last executing test programs:

9m33.959110345s ago: executing program 32 (id=553):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0x0, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x1c, 0x52, 0x1, 0x70bd2a, 0x25dfdbfb, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="feffffff"]}]}, 0x1c}}, 0x0)

9m5.31905098s ago: executing program 33 (id=690):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000002d80)=[{0x0}, {&(0x7f0000000400)="63030047c25cc5070ffe9f0d", 0xc}], 0x2}}], 0x1, 0x9200000000000000)

8m58.130754024s ago: executing program 5 (id=722):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800000, &(0x7f0000001bc0)=ANY=[@ANYBLOB='nls=cp949,barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB="000800139e6ec30b2b99f47f097f267d35dc81666a63e7768c00aeecc11e3d8dd215e24988d111429ce29e60b1481b4454b6c882e8b9de8fa5ff541d3f0470f9a71ac6e14f74c9c65ca943b2e922748c5955a3428550d6fdae754bea64db124b811d06bda34e3f366148a417d90f5120", @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRESHEX, @ANYBLOB="2c6e6f626172726965722c00cd2c1a77bebe1941eb51308a0e1eefab7e5e16b355"], 0x5, 0x6bd, &(0x7f0000000cc0)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xbd053, 0x0, 0x4, 0x0, &(0x7f00000008c0))

8m55.711430519s ago: executing program 34 (id=722):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800000, &(0x7f0000001bc0)=ANY=[@ANYBLOB='nls=cp949,barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB="000800139e6ec30b2b99f47f097f267d35dc81666a63e7768c00aeecc11e3d8dd215e24988d111429ce29e60b1481b4454b6c882e8b9de8fa5ff541d3f0470f9a71ac6e14f74c9c65ca943b2e922748c5955a3428550d6fdae754bea64db124b811d06bda34e3f366148a417d90f5120", @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRESHEX, @ANYBLOB="2c6e6f626172726965722c00cd2c1a77bebe1941eb51308a0e1eefab7e5e16b355"], 0x5, 0x6bd, &(0x7f0000000cc0)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xbd053, 0x0, 0x4, 0x0, &(0x7f00000008c0))

8m38.68906684s ago: executing program 35 (id=763):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r1], 0x2c}}, 0x20008000)

7m56.618320869s ago: executing program 36 (id=1004):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x2202, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8)

7m48.859728626s ago: executing program 4 (id=1049):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000006400)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303235342c6c6f6e6761642c756d61736b3d30303030303030303030303030303030303137373737372c646d6f64653d30303030303030303030303030303030303030303430302c756e686964652c73686f727461642c616e63686f723d30303030303030303030303030303030303030372c6e6f7374726963742c696f636861727365743d6b6f69382d72752c00263468691e626cd4f6d91d6fed4bb42a4515346a98d55253771fadd9bb31ceaa8d7647a551ee49f3b17bfc6ae1090b228307b8fdc1935c7e8cbbf9aea203bd"], 0x1, 0xc65, &(0x7f0000000f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

7m47.123514402s ago: executing program 4 (id=1055):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000880"], 0x2c}}, 0x20008000)

7m46.348428148s ago: executing program 4 (id=1058):
unshare(0x24020400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20)

7m44.393359644s ago: executing program 37 (id=1058):
unshare(0x24020400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20)

7m0.036416867s ago: executing program 38 (id=1330):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})

3m50.047743701s ago: executing program 3 (id=2621):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x510})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x40})

3m49.57220496s ago: executing program 3 (id=2623):
syz_read_part_table(0x59d, &(0x7f0000000000)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
remap_file_pages(&(0x7f0000ebb000/0x1000)=nil, 0x1000, 0x0, 0xe, 0x40000)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)

3m48.24560763s ago: executing program 3 (id=2628):
socket$inet6(0xa, 0x200000000003, 0x87)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00188700fc0200000000000000000000000000fdff0200000000000000000000000000013b"], 0x0)

3m47.488064945s ago: executing program 3 (id=2634):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x6, 0x4cd, &(0x7f0000000c80)="$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")
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1200002, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, 0x0)
syz_mount_image$fuse(&(0x7f0000000700), &(0x7f00000000c0)='./file0\x00', 0x30c407a, &(0x7f0000000780)=ANY=[], 0x1, 0x0, 0x0)

3m46.397694137s ago: executing program 3 (id=2641):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0)

3m45.56727197s ago: executing program 3 (id=2646):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xff000000, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0)

3m43.688168209s ago: executing program 39 (id=2646):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0xff000000, 0x4)
setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0)

3m43.051448909s ago: executing program 2 (id=2654):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x47, 0xc11, &(0x7f0000000d00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x3, 0x0)
getdents64(r0, 0x0, 0x22)

3m42.188518203s ago: executing program 2 (id=2657):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0xda7, "2b048511119c2921d1f9c408a182282ce9df27ccabfcf9feedeedc0627e04200", <r1=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r2})

3m41.158042113s ago: executing program 2 (id=2659):
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)

3m40.676038616s ago: executing program 2 (id=2662):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8a}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {0x1, 0x6}, [], {}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x24, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)

3m39.716956955s ago: executing program 2 (id=2667):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffff, 0x20000, @ipv4={'\x00', '\xff\xff', @private=0x2a010100}, 0x80200000}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0)

3m36.505258396s ago: executing program 2 (id=2682):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1a0, 0x65, 0x800, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x164, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x14c, 0x1, [@m_ct={0x118, 0xa, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_LABELS={0x14, 0x7, "efe7377efb339bc59f350c7b025a3b71"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x9}, @TCA_CT_PARMS={0x18, 0x1, {0x9, 0x1c, 0x0, 0x7, 0x1000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010101}, @TCA_CT_ACTION={0x6, 0x3, 0x1}, @TCA_CT_LABELS={0x14, 0x7, "075abac8315d88d707c2ed5fc953392e"}]}, {0x85, 0x6, "a9b0373813e0f2da6e8f5cd5c2f0e993b814de8645c7545f5f50c5380480ed4ef5013ca2d00164d47399225c275c36df8b272a85bb6c9c930de5c21cfca20d72ffe99adec2667fa15f5dc9985c817cb94e99bf8eae0ce64edfaa10bc97d348e5ca551e710bda8f076cf48aeee6d7cc33aeaa9d11c113860c15a1e0dee5e6a21d94"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

3m34.469895805s ago: executing program 40 (id=2682):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1a0, 0x65, 0x800, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x164, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x14c, 0x1, [@m_ct={0x118, 0xa, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_LABELS={0x14, 0x7, "efe7377efb339bc59f350c7b025a3b71"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x9}, @TCA_CT_PARMS={0x18, 0x1, {0x9, 0x1c, 0x0, 0x7, 0x1000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010101}, @TCA_CT_ACTION={0x6, 0x3, 0x1}, @TCA_CT_LABELS={0x14, 0x7, "075abac8315d88d707c2ed5fc953392e"}]}, {0x85, 0x6, "a9b0373813e0f2da6e8f5cd5c2f0e993b814de8645c7545f5f50c5380480ed4ef5013ca2d00164d47399225c275c36df8b272a85bb6c9c930de5c21cfca20d72ffe99adec2667fa15f5dc9985c817cb94e99bf8eae0ce64edfaa10bc97d348e5ca551e710bda8f076cf48aeee6d7cc33aeaa9d11c113860c15a1e0dee5e6a21d94"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

3m21.92698312s ago: executing program 5 (id=2648):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x6109, 0xc2}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xb}, 0x614, 0x2, 0x2, 0xe, 0x8000, 0xfffb}, 0x20)

3m21.237671633s ago: executing program 5 (id=2704):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
accept4(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0, 0x0)

3m21.234679392s ago: executing program 9 (id=2716):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x7}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x60}}, 0x0)

3m20.87716524s ago: executing program 9 (id=2706):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x6071, 0x0, 0xe7, {[@generic={0x3, 0x2}]}}}}}}}, 0x0)

3m20.281366051s ago: executing program 5 (id=2708):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x6, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=")
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1200002, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, 0x0)
syz_mount_image$fuse(&(0x7f0000000700), &(0x7f00000000c0)='./file0\x00', 0x30c407a, &(0x7f0000000780)=ANY=[], 0x1, 0x0, 0x0)

3m20.16475938s ago: executing program 9 (id=2709):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000003c0)={0x38, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x8008}, 0x10)

3m19.71277618s ago: executing program 9 (id=2710):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0)
close(r0)

3m19.347600424s ago: executing program 5 (id=2717):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010105}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x2}, 0x8)

3m19.053673637s ago: executing program 9 (id=2719):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000080)=ANY=[], 0x1, 0x2b1, &(0x7f0000000700)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

3m18.639151607s ago: executing program 5 (id=2720):
r0 = socket$netlink(0x10, 0x3, 0x15)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0)

3m16.779267453s ago: executing program 41 (id=2720):
r0 = socket$netlink(0x10, 0x3, 0x15)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0)

3m16.764470023s ago: executing program 9 (id=2723):
r0 = gettid()
socket$inet6(0xa, 0x2, 0x4)
tkill(r0, 0x11)
rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0, {[0x8000000000000001]}}, 0x0, 0x8, &(0x7f0000000000))

3m15.80903371s ago: executing program 42 (id=2723):
r0 = gettid()
socket$inet6(0xa, 0x2, 0x4)
tkill(r0, 0x11)
rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0, {[0x8000000000000001]}}, 0x0, 0x8, &(0x7f0000000000))

2m55.117763436s ago: executing program 4 (id=2725):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x6, 0x4cd, &(0x7f0000000c80)="$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")
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x1200002, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, 0x0)
syz_mount_image$fuse(&(0x7f0000000700), &(0x7f00000000c0)='./file0\x00', 0x30c407a, &(0x7f0000000780)=ANY=[], 0x1, 0x0, 0x0)

2m53.943021721s ago: executing program 4 (id=2761):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1b0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x134, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}, {@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c, 0x2, 0x0, 0x3507, 0x0, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2m53.270375102s ago: executing program 4 (id=2767):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}}, 0x8000)

2m51.717763638s ago: executing program 43 (id=2767):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}}, 0x8000)

4.696102293s ago: executing program 6 (id=3802):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x1, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000)

4.522137071s ago: executing program 8 (id=3804):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000140), 0x2c, 0x522, &(0x7f0000000c80)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x83)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))

4.108547706s ago: executing program 6 (id=3807):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000880)=ANY=[@ANYBLOB="100902"], 0x0, 0x0, 0x0, 0x0})

4.104364738s ago: executing program 0 (id=3817):
syz_mount_image$udf(&(0x7f0000002480), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x495, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
unshare(0x6020400)
open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c0000005100000005"], 0x0)

3.462044294s ago: executing program 0 (id=3809):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x202dc1f, 0x0, 0x1, 0x0, &(0x7f00000007c0))
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0)

3.457999842s ago: executing program 8 (id=3820):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000001cc0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0xce8248cce702812d}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x4c}}, 0x8000002)

3.344367408s ago: executing program 7 (id=3810):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf9}}, 0x10}, 0x1c)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1f0, &(0x7f0000000080)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)

3.13967349s ago: executing program 1 (id=3811):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000100)={[{@nobh}, {@test_dummy_encryption_v1}]}, 0xdf, 0x258, &(0x7f0000000780)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x12}, 0x18)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @aes256, 0x19, '\x00', @a})

2.7413257s ago: executing program 7 (id=3812):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8)
sendto$inet6(r0, &(0x7f0000000040)='H', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)

2.738496579s ago: executing program 8 (id=3813):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003500)=@newtaction={0x60, 0x30, 0x715, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x31fd, 0x4, 0x0, 0x0, 0xfa05}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xa850}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.714242205s ago: executing program 0 (id=3814):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800001, &(0x7f0000000380), 0x3, 0xbc2, &(0x7f0000002380)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

2.35515696s ago: executing program 8 (id=3815):
r0 = socket$inet(0x2, 0x3, 0x4)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x64, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1644}, @TCA_TBF_RATE64={0xc, 0x4, 0x44d485d9f3e34d96}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb04c73c4e8adee02}, @TCA_TBF_PBURST={0x8, 0x7, 0xfe}, @TCA_TBF_BURST={0x8, 0x6, 0x6}, @TCA_TBF_PARMS={0x28, 0x1, {{0x26, 0x1, 0x8, 0x6, 0x1, 0x8}, {0x1, 0x1, 0x8, 0xf408, 0x2, 0x100}, 0xe, 0x5, 0x508}}, @TCA_TBF_PBURST={0x1, 0x7, 0x4d8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x4, 0x7, 0x2, 0x2, 0x7, 0xfff}}, {0x4}}]}]}, 0xb4}}, 0x40000)

2.354935327s ago: executing program 1 (id=3816):
r0 = gettid()
clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff})

2.134410775s ago: executing program 7 (id=3818):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x4c, r1, 0x1, 0xffffffff, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c7a0100009f8f90f800"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.759998076s ago: executing program 8 (id=3819):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000007401"])

1.759793148s ago: executing program 1 (id=3821):
unshare(0x24000480)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x7e, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value=0xf6}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)

1.708105687s ago: executing program 6 (id=3822):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002440)=0xffffffffffffffff, 0x4)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10)
sendto$inet(r0, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000000d}, 0x10)

1.632875775s ago: executing program 0 (id=3823):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c00)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000340)={r1, 0xfa}, 0x8)

1.34032428s ago: executing program 1 (id=3824):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, 0x0)

1.058489866s ago: executing program 6 (id=3825):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0fe1709850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r1, r0, 0x7}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d40)={@map=r1, 0x7, 0x0, 0x100, &(0x7f0000000c40)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

1.041089635s ago: executing program 7 (id=3835):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1d, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0)

940.288401ms ago: executing program 8 (id=3826):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x6f, &(0x7f00000006c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x61, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6071, 0x0, 0xe7}, {"b0b014de405ed718693ee3fc61dd81ec81b43a22394445448e0c30c583b9d73758b5e4dd814b0186d696c623902d3ef6ce18096f91f7775d59"}}}}}}, 0x0)

887.961311ms ago: executing program 0 (id=3827):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x1cc, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_bpf={{0x8}, {0x64, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x4c, 0x1, [@m_simple={0x48, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x19, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cf300b92ef"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x12c, 0x2, [@TCA_BPF_ACT={0x128, 0x1, [@m_connmark={0x124, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x9, 0x3, 0x3, 0x1}}}]}, {0xd5, 0x6, "7d1c2f218ab42f594fe5adbe85eea4a07891f03c95b96ccd9c2cc998aa5257967475522c2ef4397c75e5cd9a15b78828602efb5bb8d8f18605fd1d4ac132fc6229edf4a2184213ba5ea94b254ee4adfe495b418382819811503deec2cd166133b7f5ce1aede8154721099eb87bbdf128c2d67d606cc26e787ce45c03fde1ba3b27d5dee1efa3eda225021429dfdbc555fa38db8cd8c88f888028d9c70ef8a8946d40da5441a39a55b3cdb62b43c2b7bc5f44599e2dcc16b860d7dbe968ccddcc329a9015e939bf295f7d59358fe899de8e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

664.227431ms ago: executing program 1 (id=3828):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0xff80, 0x10}, 0x8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000040)=0x26d, 0x4)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)=""/184, &(0x7f0000000500)=0xb8)

477.210738ms ago: executing program 6 (id=3829):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x50)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000340)={0x0, <r1=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc)

472.250779ms ago: executing program 7 (id=3840):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, 0x0)

286.401839ms ago: executing program 0 (id=3830):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)

172.734006ms ago: executing program 1 (id=3831):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x1}, 0xe)

2.737593ms ago: executing program 7 (id=3832):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@minixdf}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x7aa, &(0x7f0000000bc0)="$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")
timer_create(0x3, 0x0, &(0x7f0000001b40)=<r0=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_gettime(r0, &(0x7f0000000040))

0s ago: executing program 6 (id=3833):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000140)={0x4, 0x4, 0x2000, 0x1000, &(0x7f0000015000/0x1000)=nil, 0x0, r2})

kernel console output (not intermixed with test programs):

9] bridge_slave_1: entered promiscuous mode
[  682.191861][   T50] Bluetooth: hci4: command tx timeout
[  682.223588][T12328] bridge0: port 1(bridge_slave_0) entered blocking state
[  682.231125][T12328] bridge0: port 1(bridge_slave_0) entered disabled state
[  682.239229][T12328] bridge_slave_0: entered allmulticast mode
[  682.248331][T12328] bridge_slave_0: entered promiscuous mode
[  682.270521][T12319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  682.297260][T12328] bridge0: port 2(bridge_slave_1) entered blocking state
[  682.310418][T12328] bridge0: port 2(bridge_slave_1) entered disabled state
[  682.318340][T12328] bridge_slave_1: entered allmulticast mode
[  682.326784][T12328] bridge_slave_1: entered promiscuous mode
[  682.386868][T12319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  682.488752][T12328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  682.542039][T12319] team0: Port device team_slave_0 added
[  682.568101][T12328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  682.588163][T12319] team0: Port device team_slave_1 added
[  682.780378][T12328] team0: Port device team_slave_0 added
[  682.797006][T12328] team0: Port device team_slave_1 added
[  682.807037][T12319] batman_adv: batadv0: Adding interface: batadv_slave_0
[  682.818322][T12319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  682.845996][T12319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  682.905930][T12319] batman_adv: batadv0: Adding interface: batadv_slave_1
[  682.913181][T12319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  682.943489][T12319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  683.027146][T12328] batman_adv: batadv0: Adding interface: batadv_slave_0
[  683.034508][T12328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  683.060861][T12328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  683.083205][T12328] batman_adv: batadv0: Adding interface: batadv_slave_1
[  683.090321][T12328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  683.116701][T12328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  683.156535][   T50] Bluetooth: hci0: command tx timeout
[  683.295534][T12273] 8021q: adding VLAN 0 to HW filter on device bond0
[  683.351144][T12319] hsr_slave_0: entered promiscuous mode
[  683.360784][T12319] hsr_slave_1: entered promiscuous mode
[  683.369305][T12319] debugfs: 'hsr0' already exists in 'hsr'
[  683.375249][T12319] Cannot create hsr debugfs directory
[  683.403183][T12328] hsr_slave_0: entered promiscuous mode
[  683.413661][T12328] hsr_slave_1: entered promiscuous mode
[  683.422775][T12328] debugfs: 'hsr0' already exists in 'hsr'
[  683.431151][T12328] Cannot create hsr debugfs directory
[  683.776089][T12273] 8021q: adding VLAN 0 to HW filter on device team0
[  683.907904][ T4063] bridge0: port 1(bridge_slave_0) entered blocking state
[  683.915516][ T4063] bridge0: port 1(bridge_slave_0) entered forwarding state
[  684.118975][ T4063] bridge0: port 2(bridge_slave_1) entered blocking state
[  684.126571][ T4063] bridge0: port 2(bridge_slave_1) entered forwarding state
[  684.272000][   T50] Bluetooth: hci4: command tx timeout
[  684.833748][T12273] 8021q: adding VLAN 0 to HW filter on device batadv0
[  684.927641][T12328] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  684.947957][T12328] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  684.975335][T12328] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  684.998893][T12328] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  685.118295][T12319] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  685.149921][T12319] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  685.184283][T12319] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  685.222988][T12319] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  685.407334][T12273] veth0_vlan: entered promiscuous mode
[  685.534853][T12273] veth1_vlan: entered promiscuous mode
[  685.860791][T12328] 8021q: adding VLAN 0 to HW filter on device bond0
[  685.944233][T12273] veth0_macvtap: entered promiscuous mode
[  686.017397][T12328] 8021q: adding VLAN 0 to HW filter on device team0
[  686.044749][T12273] veth1_macvtap: entered promiscuous mode
[  686.107814][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  686.115454][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  686.148120][T12319] 8021q: adding VLAN 0 to HW filter on device bond0
[  686.230358][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  686.238009][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  686.326056][T12319] 8021q: adding VLAN 0 to HW filter on device team0
[  686.384719][T12273] batman_adv: batadv0: Interface activated: batadv_slave_0
[  686.411658][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  686.419133][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  686.473694][T12273] batman_adv: batadv0: Interface activated: batadv_slave_1
[  686.566027][ T1841] bridge0: port 2(bridge_slave_1) entered blocking state
[  686.573670][ T1841] bridge0: port 2(bridge_slave_1) entered forwarding state
[  686.649526][ T1863] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  686.668389][T12328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  686.756119][ T1863] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  686.778466][ T4063] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  686.803648][ T4063] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  687.893818][T12328] 8021q: adding VLAN 0 to HW filter on device batadv0
[  688.021799][T12319] 8021q: adding VLAN 0 to HW filter on device batadv0
[  689.496449][T12328] veth0_vlan: entered promiscuous mode
[  689.523971][T12319] veth0_vlan: entered promiscuous mode
[  689.587906][T12328] veth1_vlan: entered promiscuous mode
[  689.624275][T12319] veth1_vlan: entered promiscuous mode
[  689.799536][T12328] veth0_macvtap: entered promiscuous mode
[  689.834758][T12328] veth1_macvtap: entered promiscuous mode
[  689.908911][T12319] veth0_macvtap: entered promiscuous mode
[  689.987551][T12319] veth1_macvtap: entered promiscuous mode
[  690.009998][T12328] batman_adv: batadv0: Interface activated: batadv_slave_0
[  690.073200][T12328] batman_adv: batadv0: Interface activated: batadv_slave_1
[  690.177329][T12319] batman_adv: batadv0: Interface activated: batadv_slave_0
[  690.199780][ T4098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  690.208006][ T4098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  690.245223][ T3969] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  690.273787][ T3969] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  690.289367][T12319] batman_adv: batadv0: Interface activated: batadv_slave_1
[  690.359968][ T3969] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  690.370194][ T3969] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  690.424635][ T1863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  690.432935][ T1863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  690.447123][ T3969] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  690.508818][ T3969] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  690.540745][ T1863] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  690.564802][ T4026] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  690.967172][T12414] loop0: detected capacity change from 0 to 512
[  691.025177][T12414] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  691.081203][T12414] EXT4-fs (loop0): 1 truncate cleaned up
[  691.089732][T12414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  691.142165][ T5895] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  691.198347][T12416] loop1: detected capacity change from 0 to 2048
[  691.279164][T12416] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  691.372112][ T5895] usb 7-1: Using ep0 maxpacket: 16
[  691.452703][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  691.464139][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  691.475243][ T5895] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  691.488599][ T5895] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  691.498137][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.545247][T12416] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2715: bg 0: block 441: padding at end of block bitmap is not set
[  691.603624][T12416] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 117
[  691.617736][T12416] EXT4-fs (loop1): This should not happen!! Data will be lost
[  691.617736][T12416] 
[  691.651873][ T5895] usb 7-1: config 0 descriptor??
[  691.823457][T12184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  691.908382][T12273] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  692.094577][T12413] random: crng reseeded on system resumption
[  692.240677][ T5895] input: HID 0955:7214 Haptics as /devices/virtual/input/input24
[  692.307871][ T5895] shield 0003:0955:7214.0026: Registered Thunderstrike controller
[  692.323350][ T5895] shield 0003:0955:7214.0026: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0
[  692.453655][ T1877] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  692.466806][   T11] usb 7-1: USB disconnect, device number 14
[  692.520240][ T1877] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  692.532620][ T1877] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  692.548250][ T1877] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  693.063729][T12446] loop1: detected capacity change from 0 to 16
[  693.082746][T12446] erofs (device loop1): mounted with root inode @ nid 36.
[  693.123628][T12446] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[  693.162283][T12446] erofs (device loop1): failed to decompress -21 in[56, 4040] out[1851]
[  693.170883][T12446] erofs (device loop1): read error -117 @ 43 of nid 36
[  693.210978][T12446] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[  693.219953][T12446] erofs (device loop1): failed to decompress -21 in[56, 4040] out[1851]
[  693.228728][T12446] erofs (device loop1): read error -117 @ 43 of nid 36
[  693.741329][T12455] loop6: detected capacity change from 0 to 1024
[  694.029091][ T4243] hfsplus: b-tree write err: -5, ino 4
[  695.261287][ T4063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  695.269644][ T4063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  695.301664][ T1841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  695.313644][ T1841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  695.830847][ T1841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  695.840160][ T1841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  696.038814][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  696.047012][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  696.253983][T12495] loop4: detected capacity change from 0 to 512
[  696.310587][T12495] EXT4-fs: Ignoring removed nobh option
[  696.350358][T12495] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2725: iget: bad i_size value: 38620345925642
[  696.392633][T12495] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2725: couldn't read orphan inode 15 (err -117)
[  696.474370][T12495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  697.147141][T12328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  697.573596][ T4243] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  697.756002][ T4243] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  697.915004][ T4243] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.083252][ T4243] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.397932][ T4243] bridge_slave_1: left allmulticast mode
[  698.404092][ T4243] bridge_slave_1: left promiscuous mode
[  698.410675][ T4243] bridge0: port 2(bridge_slave_1) entered disabled state
[  698.426005][ T4243] bridge_slave_0: left allmulticast mode
[  698.432114][ T4243] bridge_slave_0: left promiscuous mode
[  698.438722][ T4243] bridge0: port 1(bridge_slave_0) entered disabled state
[  698.906190][ T4243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  698.926385][ T4243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  698.948011][ T4243] bond0 (unregistering): Released all slaves
[  699.339186][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2770'.
[  699.484632][ T4243] hsr_slave_0: left promiscuous mode
[  699.497974][ T4243] hsr_slave_1: left promiscuous mode
[  699.515751][ T4243] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  699.523540][ T4243] batman_adv: batadv0: Removing interface: batadv_slave_0
[  699.574903][ T4243] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  699.582595][ T4243] batman_adv: batadv0: Removing interface: batadv_slave_1
[  699.700492][ T4243] veth1_macvtap: left promiscuous mode
[  699.707141][ T4243] veth0_macvtap: left promiscuous mode
[  699.720449][ T4243] veth1_vlan: left promiscuous mode
[  699.726111][ T4243] veth0_vlan: left promiscuous mode
[  700.253254][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  700.297833][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  700.362819][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  700.408121][T12537] Invalid logical block size (6)
[  700.459977][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  700.480353][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  700.709731][T12541] loop8: detected capacity change from 0 to 512
[  700.744367][ T4243] team0 (unregistering): Port device team_slave_1 removed
[  700.774205][ T4243] team0 (unregistering): Port device team_slave_0 removed
[  700.867978][T12541] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  701.190525][T12319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  701.233386][T12529] tipc: Started in network mode
[  701.238416][T12529] tipc: Node identity , cluster identity 4711
[  701.245036][T12529] tipc: Failed to set node id, please configure manually
[  701.255522][T12529] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  702.252870][T12534] chnl_net:caif_netlink_parms(): no params data found
[  702.489217][T12564] loop8: detected capacity change from 0 to 512
[  702.560739][T12564] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.2786: error while reading EA inode 32 err=-116
[  702.601231][ T5794] Bluetooth: hci4: command tx timeout
[  702.675219][T12564] EXT4-fs (loop8): Remounting filesystem read-only
[  702.687664][T12564] EXT4-fs (loop8): 1 orphan inode deleted
[  702.697651][T12564] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  702.767291][T12568] loop6: detected capacity change from 0 to 1024
[  702.780857][T12568] EXT4-fs: Ignoring removed orlov option
[  702.813055][T12564] EXT4-fs (loop8): shut down requested (1)
[  702.864820][T12568] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  702.877673][T12568] ext4 filesystem being mounted at /438/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  702.980616][T12319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  703.021072][   T30] audit: type=1800 audit(1760035433.791:146): pid=12568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2787" name="file1" dev="loop6" ino=15 res=0 errno=0
[  703.042655][   T30] audit: type=1800 audit(1760035433.821:147): pid=12568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2787" name="file1" dev="loop6" ino=15 res=0 errno=0
[  703.375380][ T7537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  703.625515][T12534] bridge0: port 1(bridge_slave_0) entered blocking state
[  703.633336][T12534] bridge0: port 1(bridge_slave_0) entered disabled state
[  703.641032][T12534] bridge_slave_0: entered allmulticast mode
[  703.650889][T12534] bridge_slave_0: entered promiscuous mode
[  703.685123][T12534] bridge0: port 2(bridge_slave_1) entered blocking state
[  703.693338][T12534] bridge0: port 2(bridge_slave_1) entered disabled state
[  703.701089][T12534] bridge_slave_1: entered allmulticast mode
[  703.714892][T12534] bridge_slave_1: entered promiscuous mode
[  703.838214][   T11] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  703.886044][T12534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  703.923208][T12534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  704.004127][   T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  704.019212][   T11] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  704.030704][   T11] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  704.040801][   T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  704.153993][   T11] usb 2-1: config 0 descriptor??
[  704.180530][   T11] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  704.187782][   T11] dvb-usb: bulk message failed: -22 (3/0)
[  704.214449][T12534] team0: Port device team_slave_0 added
[  704.244550][   T11] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  704.267738][T12534] team0: Port device team_slave_1 added
[  704.278277][   T11] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  704.285849][   T11] usb 2-1: media controller created
[  704.341837][T12594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2796'.
[  704.344563][   T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  704.369369][   T11] dvb-usb: bulk message failed: -22 (6/0)
[  704.375716][   T11] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  704.392686][   T11] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25
[  704.398023][T12584] dvb-usb: bulk message failed: -22 (2/0)
[  704.412199][   T11] dvb-usb: schedule remote query interval to 150 msecs.
[  704.419327][   T11] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  704.464545][   T11] usb 2-1: USB disconnect, device number 12
[  704.536214][   T11] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  704.590569][T12534] batman_adv: batadv0: Adding interface: batadv_slave_0
[  704.599775][T12534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  704.627444][T12534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  704.656412][T12534] batman_adv: batadv0: Adding interface: batadv_slave_1
[  704.671669][T12534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  704.699124][T12534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  704.742056][   T50] Bluetooth: hci4: command tx timeout
[  704.917318][T12534] hsr_slave_0: entered promiscuous mode
[  704.927881][T12534] hsr_slave_1: entered promiscuous mode
[  704.940966][T12534] debugfs: 'hsr0' already exists in 'hsr'
[  704.947322][T12534] Cannot create hsr debugfs directory
[  705.095559][T12603] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2799'.
[  705.602132][T10353] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  705.610209][T12607] loop1: detected capacity change from 0 to 2048
[  705.679447][T12607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  705.747157][   T30] audit: type=1800 audit(1760035436.531:148): pid=12607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2801" name="file1" dev="loop1" ino=1415 res=0 errno=0
[  705.761828][T10353] usb 1-1: Using ep0 maxpacket: 32
[  705.818252][T10353] usb 1-1: config 0 has an invalid interface number: 130 but max is 0
[  705.827523][T10353] usb 1-1: config 0 has no interface number 0
[  705.834277][T10353] usb 1-1: config 0 interface 130 has no altsetting 0
[  705.883097][T10353] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1201, bcdDevice=69.37
[  705.892630][T10353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.900830][T10353] usb 1-1: Product: syz
[  705.906207][T10353] usb 1-1: Manufacturer: syz
[  705.910985][T10353] usb 1-1: SerialNumber: syz
[  705.924946][T10353] usb 1-1: config 0 descriptor??
[  706.275428][T10353] option 1-1:0.130: GSM modem (1-port) converter detected
[  706.289148][T10353] usb 1-1: USB disconnect, device number 4
[  706.297476][T10353] option 1-1:0.130: device disconnected
[  706.315747][T12534] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  706.340208][T12534] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  706.413826][T12534] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  706.433960][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'.
[  706.452990][T12534] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  706.753243][   T50] Bluetooth: hci4: command 0x040f tx timeout
[  707.297234][T12534] 8021q: adding VLAN 0 to HW filter on device bond0
[  707.482598][T12534] 8021q: adding VLAN 0 to HW filter on device team0
[  707.539683][ T1841] bridge0: port 1(bridge_slave_0) entered blocking state
[  707.547769][ T1841] bridge0: port 1(bridge_slave_0) entered forwarding state
[  707.624139][ T1841] bridge0: port 2(bridge_slave_1) entered blocking state
[  707.631814][ T1841] bridge0: port 2(bridge_slave_1) entered forwarding state
[  708.021824][T12637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2813'.
[  708.031072][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2813'.
[  708.831989][   T50] Bluetooth: hci4: command 0x040f tx timeout
[  708.997275][T12534] 8021q: adding VLAN 0 to HW filter on device batadv0
[  709.536175][T12666] loop1: detected capacity change from 0 to 136
[  710.404881][T12682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2828'.
[  710.697414][T12686] loop8: detected capacity change from 0 to 512
[  710.827993][T12687] loop1: detected capacity change from 0 to 2048
[  710.916199][   T50] Bluetooth: hci4: command 0x040f tx timeout
[  710.944182][T12686] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  710.957407][T12686] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  711.018637][T12687] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  711.109612][   T30] audit: type=1800 audit(1760035441.881:149): pid=12686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2830" name="file1" dev="loop8" ino=15 res=0 errno=0
[  711.130804][   T30] audit: type=1800 audit(1760035441.881:150): pid=12686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2830" name="file2" dev="loop8" ino=16 res=0 errno=0
[  711.157552][T12534] veth0_vlan: entered promiscuous mode
[  711.206270][T12534] veth1_vlan: entered promiscuous mode
[  711.297807][T10353] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  711.404353][T12534] veth0_macvtap: entered promiscuous mode
[  711.434430][T12319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  711.448755][T12534] veth1_macvtap: entered promiscuous mode
[  711.484210][T10353] usb 1-1: Using ep0 maxpacket: 16
[  711.532321][T12534] batman_adv: batadv0: Interface activated: batadv_slave_0
[  711.533632][T10353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  711.551072][T10353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  711.562693][T10353] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  711.572914][T10353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.584693][T12534] batman_adv: batadv0: Interface activated: batadv_slave_1
[  711.703953][T10353] usb 1-1: config 0 descriptor??
[  711.710190][ T3969] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  711.784490][ T3969] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  711.822357][ T3969] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  711.894624][ T3969] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  712.093499][T12703] netlink: 7 bytes leftover after parsing attributes in process `syz.8.2837'.
[  712.179790][T10353] corsair 0003:1B1C:1B02.0027: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0
[  712.360944][T10353] corsair 0003:1B1C:1B02.0027: Read invalid backlight brightness: d5.
[  712.602865][T10353] usb 1-1: USB disconnect, device number 5
[  712.757752][T12709] loop1: detected capacity change from 0 to 2048
[  712.881424][T12709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  713.214805][T12273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  713.524549][T10353] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  713.701837][T10353] usb 9-1: Using ep0 maxpacket: 32
[  713.718557][T10353] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  713.729916][T10353] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  713.742873][T10353] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  713.753284][T10353] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.856004][T10353] usb 9-1: config 0 descriptor??
[  714.373378][T10353] savu 0003:1E7D:2D5A.0028: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0
[  714.607258][   T11] usb 9-1: USB disconnect, device number 2
[  714.877010][T12747] loop6: detected capacity change from 0 to 1024
[  714.975083][T12747] hfsplus: inconsistency in B*Tree (31095,1,255,1,0)
[  714.994549][T12747] hfsplus: inconsistency in B*Tree (31095,1,255,1,0)
[  715.001445][T12747] hfsplus: xattr searching failed
[  715.133173][T12753] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2853'.
[  716.119279][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  716.126307][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  716.162571][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  716.170811][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.330947][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  716.339800][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.852011][T10353] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  716.871450][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2769'.
[  717.021864][T10353] usb 9-1: Using ep0 maxpacket: 8
[  717.078645][T10353] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  717.090886][T10353] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  717.099425][T10353] usb 9-1: Product: syz
[  717.103915][T10353] usb 9-1: Manufacturer: syz
[  717.108706][T10353] usb 9-1: SerialNumber: syz
[  717.174607][T10353] usb 9-1: config 0 descriptor??
[  717.215047][T10353] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  717.337477][T12786] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2866'.
[  717.346931][T12786] netem: unknown loss type 12
[  717.349508][T12788] Bluetooth: MGMT ver 1.23
[  717.816873][T10353] input: gspca_zc3xx as /devices/platform/dummy_hcd.8/usb9/9-1/input/input26
[  717.867881][T12793] loop1: detected capacity change from 0 to 47
[  718.036984][T10353] usb 9-1: USB disconnect, device number 3
[  718.389288][T12801] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2873'.
[  718.398858][T12801] net_ratelimit: 503 callbacks suppressed
[  718.398933][T12801] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  718.989134][T12811] loop6: detected capacity change from 0 to 256
[  719.068852][T12811] exfat: Deprecated parameter 'utf8'
[  719.075202][T12811] exfat: Deprecated parameter 'utf8'
[  719.246254][T12811] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d)
[  720.290651][T12831] loop1: detected capacity change from 0 to 512
[  720.352259][   T30] audit: type=1326 audit(1760035451.131:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.6.2889" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[  720.352421][T12831] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  720.441768][   T30] audit: type=1326 audit(1760035451.181:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.6.2889" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf704d539 code=0x7ffc0000
[  720.464346][   T30] audit: type=1326 audit(1760035451.181:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.6.2889" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[  720.487202][   T30] audit: type=1326 audit(1760035451.191:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.6.2889" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf704d539 code=0x7ffc0000
[  720.511281][   T30] audit: type=1326 audit(1760035451.191:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.6.2889" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[  720.543511][   T30] audit: type=1326 audit(1760035451.201:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.6.2889" exe="/root/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf704d539 code=0x7ffc0000
[  720.566550][   T30] audit: type=1326 audit(1760035451.201:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12834 comm="syz.6.2889" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[  720.577092][T12831] EXT4-fs (loop1): 1 truncate cleaned up
[  720.597231][T12831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  720.719248][T12832] loop7: detected capacity change from 0 to 4096
[  720.824381][T12273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  721.642172][T12853] loop8: detected capacity change from 0 to 256
[  721.707122][T12853] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  723.116731][T12874] nbd0: detected capacity change from 0 to 127
[  723.155787][   T50] block nbd0: Receive control failed (result -32)
[  723.952183][   T11] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  724.130134][   T11] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  724.142057][   T11] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  724.151121][   T11] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  724.161975][   T11] usb 1-1: config 220 has no interface number 2
[  724.168462][   T11] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  724.182184][   T11] usb 1-1: config 220 interface 0 has no altsetting 0
[  724.194867][   T11] usb 1-1: config 220 interface 76 has no altsetting 0
[  724.204152][   T11] usb 1-1: config 220 interface 1 has no altsetting 0
[  724.318464][   T11] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  724.327974][   T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.336331][   T11] usb 1-1: Product: syz
[  724.340671][   T11] usb 1-1: Manufacturer: syz
[  724.345862][   T11] usb 1-1: SerialNumber: syz
[  724.680359][   T11] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  724.688208][   T11] uvcvideo 1-1:220.0: No valid video chain found.
[  724.695279][   T11] usb 1-1: selecting invalid altsetting 0
[  724.815505][   T11] usb 1-1: selecting invalid altsetting 0
[  724.822532][   T11] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  724.860216][   T11] usb 1-1: USB disconnect, device number 6
[  725.150853][T12911] loop1: detected capacity change from 0 to 2048
[  725.184967][T12911] EXT4-fs: Ignoring removed mblk_io_submit option
[  725.324027][T12911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  725.448532][T12922] loop0: detected capacity change from 0 to 128
[  725.467024][T12922] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  725.510749][T12922] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  725.540701][T12273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  725.555283][   T11] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  725.712342][   T11] usb 7-1: Using ep0 maxpacket: 32
[  725.740481][   T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  725.754822][   T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  725.767742][   T11] usb 7-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  725.779868][   T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.799635][   T11] usb 7-1: config 0 descriptor??
[  726.077323][   T11] usbhid 7-1:0.0: can't add hid device: -71
[  726.084157][   T11] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  726.125863][   T11] usb 7-1: USB disconnect, device number 15
[  726.462523][T12933] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2933'.
[  726.472033][T12933] netem: unknown loss type 0
[  726.943803][ T4098] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting
[  727.011748][ T4098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  727.019881][ T4098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  728.289318][T12965] loop7: detected capacity change from 0 to 512
[  728.404039][T12965] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  729.237279][T12534] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  729.390077][T12984] loop1: detected capacity change from 0 to 64
[  729.855538][T12989] loop8: detected capacity change from 0 to 128
[  729.927992][T12989] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  729.962091][T12989] hpfs: filesystem error: improperly stopped
[  729.962205][T12989] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  729.962304][T12989] hpfs: You really don't want any checks? You are crazy...
[  729.962772][T12989] hpfs: hpfs_map_sector(): read error
[  729.962836][T12989] hpfs: code page support is disabled
[  729.974324][T12989] hpfs: hpfs_map_4sectors(): unaligned read
[  729.974594][T12989] hpfs: hpfs_map_4sectors(): unaligned read
[  729.974656][T12989] hpfs: filesystem error: unable to find root dir
[  730.716912][T13006] loop8: detected capacity change from 0 to 512
[  730.751078][T13006] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  730.828909][T13006] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.2966: invalid indirect mapped block 4294967295 (level 0)
[  730.880510][T13006] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.2966: invalid indirect mapped block 4294967295 (level 1)
[  730.975221][T13006] EXT4-fs (loop8): 1 orphan inode deleted
[  730.981275][T13006] EXT4-fs (loop8): 1 truncate cleaned up
[  730.989621][T13006] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  731.291892][   T11] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  731.336747][T12319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  731.483400][   T11] usb 2-1: Using ep0 maxpacket: 16
[  731.516334][   T11] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  731.525998][   T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.534385][   T11] usb 2-1: Product: syz
[  731.538724][   T11] usb 2-1: Manufacturer: syz
[  731.543614][   T11] usb 2-1: SerialNumber: syz
[  731.553609][T13020] netlink: 422 bytes leftover after parsing attributes in process `syz.6.2970'.
[  731.578138][   T11] usb 2-1: config 0 descriptor??
[  731.597084][   T11] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  731.816056][   T11] gspca_sn9c2028: read1 error -32
[  731.842326][   T11] gspca_sn9c2028: read1 error -32
[  731.901336][T13023] loop8: detected capacity change from 0 to 512
[  731.940102][T13023] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  731.996428][T13023] EXT4-fs (loop8): invalid journal inode
[  732.002440][T13023] EXT4-fs (loop8): can't get journal size
[  732.022070][T13023] EXT4-fs (loop8): 1 truncate cleaned up
[  732.044374][T13023] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  732.065093][   T11] usb 2-1: USB disconnect, device number 13
[  732.124298][   T30] audit: type=1800 audit(1760035462.901:158): pid=13023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2973" name="file0" dev="loop8" ino=13 res=0 errno=0
[  732.241946][   T30] audit: type=1804 audit(1760035463.011:159): pid=13023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2973" name="/newroot/47/file0/file0/file0" dev="loop8" ino=13 res=1 errno=0
[  732.482696][T12319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  732.987688][T13028] loop6: detected capacity change from 0 to 4096
[  733.025075][T13036] input: syz0 as /devices/virtual/input/input27
[  733.110912][T13038] loop0: detected capacity change from 0 to 128
[  733.162351][T13038] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  733.203184][T13038] hpfs: filesystem error: improperly stopped
[  733.209420][T13038] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  733.217885][T13038] hpfs: You really don't want any checks? You are crazy...
[  733.268215][T13038] hpfs: hpfs_map_sector(): read error
[  733.274232][T13038] hpfs: code page support is disabled
[  733.335673][T13038] hpfs: hpfs_map_4sectors(): unaligned read
[  733.348248][T13038] hpfs: hpfs_map_4sectors(): unaligned read
[  733.354471][T13038] hpfs: filesystem error: unable to find root dir
[  733.536134][T13045] hpfs: hpfs_map_4sectors(): unaligned read
[  733.982979][T13041] loop8: detected capacity change from 0 to 4096
[  734.215198][T13050] loop7: detected capacity change from 0 to 256
[  734.241059][T13028] ntfs3(loop6): ino=18, mi_enum_attr
[  734.247013][T13028] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  734.309655][T13050] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  734.441780][T13055] ntfs3(loop6): ino=1e, "file1" The size of extended attributes must not exceed 64KiB
[  735.052540][   T11] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  735.254697][   T11] usb 2-1: Using ep0 maxpacket: 8
[  735.277440][   T11] usb 2-1: unable to get BOS descriptor or descriptor too short
[  735.309624][   T11] usb 2-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 65535, setting to 1024
[  735.321873][   T11] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024
[  735.332352][   T11] usb 2-1: config 8 interface 0 has no altsetting 0
[  735.400205][   T11] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  735.409784][   T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.418338][   T11] usb 2-1: Product: syz
[  735.422797][   T11] usb 2-1: Manufacturer: syz
[  735.427565][   T11] usb 2-1: SerialNumber: syz
[  735.514044][T13057] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  735.776669][   T11] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  735.783958][   T11] usb 2-1: selecting invalid altsetting 0
[  736.003349][   T11] usb 2-1: USB disconnect, device number 14
[  736.953423][T13081] loop0: detected capacity change from 0 to 512
[  737.074063][T13081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  737.094564][T13081] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  737.516830][T12184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  737.768115][T13094] loop8: detected capacity change from 0 to 1024
[  738.369540][T13098] loop0: detected capacity change from 0 to 4096
[  738.388083][T13098] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  738.446268][T13098] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096)
[  738.461154][T13104] loop1: detected capacity change from 0 to 128
[  738.486510][T13106] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  738.612210][T13098] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  738.691305][T13098] Remounting filesystem read-only
[  738.712287][ T3969] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  738.783297][ T3969] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  738.829392][ T3969] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  738.878179][ T3969] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  738.968199][T13112] loop8: detected capacity change from 0 to 256
[  738.984430][T12184] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  740.086148][T13128] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  741.358332][T13140] loop1: detected capacity change from 0 to 1024
[  741.890106][T13143] netlink: 'syz.7.3026': attribute type 21 has an invalid length.
[  742.073872][ T4063] hfsplus: b-tree write err: -5, ino 4
[  742.555144][T13155] dummy0: Device is already in use.
[  742.570770][T13153] loop7: detected capacity change from 0 to 1024
[  742.650838][T13153] EXT4-fs: Ignoring removed nobh option
[  742.722114][T13153] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  742.810183][T13153] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.3030: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  742.976805][T13153] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.3030: couldn't read orphan inode 11 (err -117)
[  743.042070][T13153] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  743.156480][T13153] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.3030: Invalid block bitmap block 0 in block_group 0
[  743.174795][T13163] loop0: detected capacity change from 0 to 512
[  743.223999][T13153] Quota error (device loop7): write_blk: dquota write failed
[  743.239654][T13153] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  743.252659][T13153] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.3030: Failed to acquire dquot type 0
[  743.279523][T13165] netlink: 'syz.8.3036': attribute type 2 has an invalid length.
[  743.339145][T13153] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.3030: Invalid inode bitmap blk 137438953472 in block_group 0
[  743.621103][ T3969] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm kworker/u8:14: Invalid inode table block 18446744065119617025 in block_group 0
[  743.667045][T12534] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  743.756536][T13170] loop1: detected capacity change from 0 to 128
[  743.999890][T13170] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  744.113851][T13170] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  744.607816][T12273] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  744.696844][T13177] loop6: detected capacity change from 0 to 256
[  745.628460][T13189] loop0: detected capacity change from 0 to 2048
[  745.747607][T13189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  745.765758][T13199] loop8: detected capacity change from 0 to 8
[  745.927391][   T30] audit: type=1800 audit(1760035476.711:160): pid=13189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3046" name="file1" dev="loop0" ino=15 res=0 errno=0
[  745.934794][T13189] EXT4-fs (loop0): shut down requested (2)
[  746.164150][T13201] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.3051'.
[  746.294250][T12184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  746.567896][T13205] loop8: detected capacity change from 0 to 256
[  746.695346][T13205] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  746.795122][T13209] IPv6: Can't replace route, no match found
[  747.344317][T13214] loop1: detected capacity change from 0 to 4096
[  747.411022][T13214] ntfs3(loop1): ino=3, Correct links count -> 2.
[  747.467006][T13218] loop8: detected capacity change from 0 to 256
[  747.682663][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3062'.
[  748.074955][T13227] block nbd1: Unsupported socket: should be TCP or UNIX.
[  748.125703][T13214] ntfs3(loop1): failed to convert "0000" to cp950
[  748.928874][T13238] loop1: detected capacity change from 0 to 2048
[  749.016765][T13238] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  749.432464][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3071'.
[  749.938267][T13251] loop1: detected capacity change from 0 to 256
[  750.048382][T13251] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d)
[  750.792507][T13263] loop6: detected capacity change from 0 to 1024
[  750.876172][T13263] EXT4-fs: Ignoring removed oldalloc option
[  750.882596][T13263] EXT4-fs: Ignoring removed bh option
[  751.173433][T13271] loop8: detected capacity change from 0 to 512
[  751.282848][T13263] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  751.679335][ T7537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  751.947106][   T11] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  752.151833][   T11] usb 1-1: Using ep0 maxpacket: 8
[  752.188010][   T11] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  752.197641][   T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  752.267218][   T11] pvrusb2: Hardware description: Terratec Grabster AV400
[  752.275035][   T11] pvrusb2: **********
[  752.279178][   T11] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  752.289643][   T11] pvrusb2: Important functionality might not be entirely working.
[  752.297696][   T11] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  752.309238][   T11] pvrusb2: **********
[  752.482118][T10353] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  752.486488][ T2330] pvrusb2: Invalid write control endpoint
[  752.673664][T13281] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61)
[  752.706534][T13295] loop7: detected capacity change from 0 to 256
[  752.711377][   T11] usb 1-1: USB disconnect, device number 7
[  752.725065][ T2330] pvrusb2: Invalid write control endpoint
[  752.736423][ T2330] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  752.746337][ T2330] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  752.756360][ T2330] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  752.767394][ T2330] pvrusb2: Device being rendered inoperable
[  752.774459][ T2330] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  752.781913][ T2330] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  752.796957][ T2330] pvrusb2: Attached sub-driver cx25840
[  752.804996][ T2330] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  752.815637][ T2330] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  753.122253][T10353] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  753.134417][T10353] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.142934][T10353] usb 7-1: Product: syz
[  753.147292][T10353] usb 7-1: Manufacturer: syz
[  753.152394][T10353] usb 7-1: SerialNumber: syz
[  753.442096][   T30] audit: type=1326 audit(1760035484.221:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13300 comm="syz.1.3096" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700d539 code=0x0
[  753.779453][T10353] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  753.796980][T10353] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  753.808974][T10353] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  753.836706][T10353] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[  753.859199][T10353] usb 7-1: USB disconnect, device number 16
[  754.524903][T13316] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3103'.
[  755.383606][T13333] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3111'.
[  756.198505][T13345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3117'.
[  756.932433][   T11] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  756.952994][T13359] loop8: detected capacity change from 0 to 512
[  756.996904][T13359] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  757.101999][T13359] EXT4-fs (loop8): 1 truncate cleaned up
[  757.109815][T13359] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  757.141896][   T11] usb 8-1: Using ep0 maxpacket: 16
[  757.185551][   T11] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  757.197334][   T11] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  757.207713][   T11] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  757.217084][   T11] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.269875][   T11] usb 8-1: config 0 descriptor??
[  757.608957][T12319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  757.769110][   T11] corsair 0003:1B1C:1B02.0029: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.7-1/input0
[  757.942758][   T11] corsair 0003:1B1C:1B02.0029: Read invalid backlight brightness: d5.
[  758.275574][   T11] usb 8-1: USB disconnect, device number 7
[  758.343035][T13373] loop0: detected capacity change from 0 to 2048
[  758.521144][T13373] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  758.986779][T13375] loop8: detected capacity change from 0 to 8192
[  759.711912][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'.
[  760.145508][   T50] Bluetooth: unknown link type 97
[  760.150786][   T50] Bluetooth: hci0: connection err: -111
[  760.241340][T13402] loop0: detected capacity change from 0 to 512
[  760.321334][T13402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  760.337350][T13402] ext4 filesystem being mounted at /97/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  760.405139][T13404] loop1: detected capacity change from 0 to 256
[  760.533573][T13397] loop6: detected capacity change from 0 to 4096
[  760.562775][   T30] audit: type=1800 audit(1760035491.311:162): pid=13402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3141" name="file1" dev="loop0" ino=15 res=0 errno=0
[  760.583826][   T30] audit: type=1800 audit(1760035491.311:163): pid=13402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3141" name="file2" dev="loop0" ino=16 res=0 errno=0
[  760.671293][T13397] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  760.738444][T12184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  761.022603][T13410] loop7: detected capacity change from 0 to 128
[  761.122251][T13413] loop0: detected capacity change from 0 to 16
[  761.189294][T13413] erofs (device loop0): mounted with root inode @ nid 36.
[  761.923626][T13423] program syz.8.3148 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  762.036043][T10353] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  762.222029][T10353] usb 8-1: Using ep0 maxpacket: 16
[  762.249210][T10353] usb 8-1: config 0 interface 0 has no altsetting 0
[  762.256347][T10353] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  762.265900][T10353] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.348693][T10353] usb 8-1: config 0 descriptor??
[  762.805986][T10353] hid (null): bogus close delimiter
[  763.029542][T10353] usb 8-1: USB disconnect, device number 8
[  763.359912][T13442] loop6: detected capacity change from 0 to 256
[  763.406732][T13442] exfat: Deprecated parameter 'utf8'
[  763.413088][T13442] exfat: Deprecated parameter 'namecase'
[  763.419515][T13442] exfat: Deprecated parameter 'namecase'
[  763.426274][T13442] exfat: Deprecated parameter 'utf8'
[  763.584185][T13442] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  763.741448][T13449] exFAT-fs (loop6): start_clu is invalid cluster(0x400)
[  763.837734][T13451] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3161'.
[  764.194256][   T50] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  764.203026][   T50] Bluetooth: hci0: Injecting HCI hardware error event
[  764.210647][   T50] Bluetooth: hci0: hardware error 0x00
[  765.131807][T13476] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  765.503335][T13484] loop1: detected capacity change from 0 to 512
[  766.290154][   T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  766.706690][T13490] loop6: detected capacity change from 0 to 4096
[  767.451973][   T30] audit: type=1326 audit(1760035498.231:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.8.3184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  767.537303][   T30] audit: type=1326 audit(1760035498.281:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.8.3184" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf706d539 code=0x7ffc0000
[  767.560068][   T30] audit: type=1326 audit(1760035498.321:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.8.3184" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x0
[  767.873118][T13513] loop6: detected capacity change from 0 to 256
[  767.897719][T13515] loop7: detected capacity change from 0 to 64
[  768.526717][T13521] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  768.533943][T13521] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  769.810903][T13535] loop6: detected capacity change from 0 to 4096
[  769.915089][T13535] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  769.925716][T13546] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  769.966805][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3201'.
[  770.022521][T13535] Remounting filesystem read-only
[  770.147482][T13552] netlink: 'syz.1.3202': attribute type 49 has an invalid length.
[  771.150660][T13566] macvtap1: entered promiscuous mode
[  771.155011][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'.
[  771.158785][T13566] macvtap1: entered allmulticast mode
[  771.174279][T13566] dummy0: entered promiscuous mode
[  771.179599][T13566] dummy0: entered allmulticast mode
[  771.203523][T13566] team0: Device macvtap1 failed to register rx_handler
[  771.223680][T13566] dummy0: left allmulticast mode
[  771.230022][T13566] dummy0: left promiscuous mode
[  771.536781][T13575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3214'.
[  771.671804][T13578] loop0: detected capacity change from 0 to 47
[  771.766883][T13582] loop8: detected capacity change from 0 to 64
[  771.832841][T13582] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing
[  772.055348][ T1877] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  772.253127][ T1877] usb 8-1: Using ep0 maxpacket: 16
[  772.275793][ T1877] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  772.285604][ T1877] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  772.294081][ T1877] usb 8-1: Product: syz
[  772.298501][ T1877] usb 8-1: Manufacturer: syz
[  772.303459][ T1877] usb 8-1: SerialNumber: syz
[  772.395910][ T1877] usb 8-1: config 0 descriptor??
[  772.699167][ T1877] usb 8-1: USB disconnect, device number 9
[  773.067333][T13605] loop8: detected capacity change from 0 to 256
[  773.129863][T13605] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  773.262082][ T1877] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  773.473636][ T1877] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  773.483402][ T1877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  773.500085][ T1877] usb 2-1: config 0 descriptor??
[  773.516444][ T1877] cp210x 2-1:0.0: cp210x converter detected
[  773.688976][T13613] loop0: detected capacity change from 0 to 256
[  773.705758][T13611] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3231'.
[  773.752577][T13613] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  773.796778][T13613] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  773.882340][   T30] audit: type=1800 audit(1760035504.661:167): pid=13613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3232" name="file0" dev="loop0" ino=1048914 res=0 errno=0
[  773.917627][T13615] loop8: detected capacity change from 0 to 1024
[  773.956279][T13615] EXT4-fs: Ignoring removed orlov option
[  773.968716][T13617] loop6: detected capacity change from 0 to 16
[  773.979020][ T1877] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  774.014589][ T1877] usb 2-1: cp210x converter now attached to ttyUSB0
[  774.184354][T13615] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  774.198215][T13615] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  774.236187][ T1877] usb 2-1: USB disconnect, device number 15
[  774.304167][ T1877] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  774.319207][ T1877] cp210x 2-1:0.0: device disconnected
[  774.329469][T13620] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  774.429609][T13615] EXT4-fs error (device loop8): ext4_free_blocks:6706: comm syz.8.3230: Freeing blocks not in datazone - block = 0, count = 16
[  774.631955][T13627] loop6: detected capacity change from 0 to 256
[  774.641426][T13627] exfat: Deprecated parameter 'utf8'
[  774.647572][T13627] exfat: Deprecated parameter 'utf8'
[  774.736172][ T4063] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  774.748800][ T4063] EXT4-fs (loop8): This should not happen!! Data will be lost
[  774.748800][ T4063] 
[  774.759322][ T4063] EXT4-fs (loop8): Total free blocks count 0
[  774.765658][ T4063] EXT4-fs (loop8): Free/Dirty block details
[  774.778806][ T4063] EXT4-fs (loop8): free_blocks=4293918736
[  774.787122][ T4063] EXT4-fs (loop8): dirty_blocks=16
[  774.792820][ T4063] EXT4-fs (loop8): Block reservation details
[  774.799069][ T4063] EXT4-fs (loop8): i_reserved_data_blocks=1
[  774.823655][T13627] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36d2a6b4, utbl_chksum : 0xe619d30d)
[  774.904209][T12319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  775.980678][T13647] loop7: detected capacity change from 0 to 7
[  775.988349][T13647] buffer_io_error: 14 callbacks suppressed
[  775.988427][T13647] Buffer I/O error on dev loop7, logical block 0, async page read
[  776.004725][T13647] Buffer I/O error on dev loop7, logical block 0, async page read
[  776.022322][T13647] Buffer I/O error on dev loop7, logical block 0, async page read
[  776.033234][T13647] Buffer I/O error on dev loop7, logical block 0, async page read
[  776.041435][T13647] Buffer I/O error on dev loop7, logical block 0, async page read
[  776.049918][T13647] Buffer I/O error on dev loop7, logical block 0, async page read
[  776.058599][T13647] Buffer I/O error on dev loop7, logical block 0, async page read
[  776.066813][T13647] ldm_validate_partition_table(): Disk read failed.
[  776.073838][T13647] Buffer I/O error on dev loop7, logical block 0, async page read
[  776.082187][T13647] Buffer I/O error on dev loop7, logical block 0, async page read
[  776.090287][T13647] Buffer I/O error on dev loop7, logical block 0, async page read
[  776.098554][T13647] Dev loop7: unable to read RDB block 0
[  776.113955][T13647]  loop7: unable to read partition table
[  776.173062][T13647] loop7: partition table beyond EOD, truncated
[  776.179607][T13647] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  776.652672][ T1877] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  776.852981][ T1877] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  776.863643][ T1877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  776.875038][ T1877] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[  776.887621][ T1877] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  777.047106][ T1877] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  777.056703][ T1877] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  777.065099][ T1877] usb 9-1: Manufacturer: syz
[  777.094219][ T1877] usb 9-1: config 0 descriptor??
[  777.502366][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  777.668739][ T1877] rc_core: IR keymap rc-hauppauge not found
[  777.675193][ T1877] Registered IR keymap rc-empty
[  777.764394][ T1877] mceusb 9-1:0.0: Error: mce write urb status = -71
[  777.803671][ T1877] mceusb 9-1:0.0: Error: mce write urb status = -71
[  777.833359][ T1877] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  777.857772][ T1877] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input28
[  777.982719][ T1877] mceusb 9-1:0.0: Error: mce write urb status = -71
[  778.072808][ T1877] mceusb 9-1:0.0: Error: mce write urb status = -71
[  778.093318][ T1877] mceusb 9-1:0.0: Error: mce write urb status = -71
[  778.116258][ T1877] mceusb 9-1:0.0: Error: mce write urb status = -71
[  778.160638][ T1877] mceusb 9-1:0.0: Error: mce write urb status = -71
[  778.194053][ T1877] mceusb 9-1:0.0: Error: mce write urb status = -71
[  778.243783][ T1877] mceusb 9-1:0.0: Error: mce write urb status = -71
[  778.273866][ T1877] mceusb 9-1:0.0: Error: mce write urb status = -71
[  778.293650][ T1877] mceusb 9-1:0.0: Error: mce write urb status = -71
[  778.313460][ T1877] mceusb 9-1:0.0: Error: mce write urb status = -71
[  778.346443][ T1877] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  778.366512][ T1877] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  778.417290][ T1877] usb 9-1: USB disconnect, device number 4
[  780.322529][T13705] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3270'.
[  781.029135][T13717] gfs2: gfs2 mount does not exist
[  781.695725][T13728] loop7: detected capacity change from 0 to 512
[  781.782919][T13728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  781.796089][T13728] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  782.126961][T12534] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  782.467879][T13744] loop6: detected capacity change from 0 to 64
[  782.570357][T13744] hfs: bad catalog entry type 65535
[  782.636235][T13748] netlink: 'syz.0.3288': attribute type 4 has an invalid length.
[  783.242591][T13758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3292'.
[  783.611382][T13760] loop8: detected capacity change from 0 to 1764
[  783.806901][T13767] loop0: detected capacity change from 0 to 256
[  784.111571][T13767] FAT-fs (loop0): Directory bread(block 64) failed
[  784.118341][T13767] FAT-fs (loop0): Directory bread(block 65) failed
[  784.125504][T13767] FAT-fs (loop0): Directory bread(block 66) failed
[  784.132482][T13767] FAT-fs (loop0): Directory bread(block 67) failed
[  784.139367][T13767] FAT-fs (loop0): Directory bread(block 68) failed
[  784.146251][T13767] FAT-fs (loop0): Directory bread(block 69) failed
[  784.153235][T13767] FAT-fs (loop0): Directory bread(block 70) failed
[  784.159942][T13767] FAT-fs (loop0): Directory bread(block 71) failed
[  784.166978][T13767] FAT-fs (loop0): Directory bread(block 72) failed
[  784.173822][T13767] FAT-fs (loop0): Directory bread(block 73) failed
[  784.381842][ T1877] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  784.575679][ T1877] usb 8-1: Using ep0 maxpacket: 32
[  784.611262][ T1877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  784.622724][ T1877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  784.632942][ T1877] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  784.642352][ T1877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  784.672569][ T5794] Bluetooth: hci3: command 0x0406 tx timeout
[  784.728642][ T1877] usb 8-1: config 0 descriptor??
[  784.772846][ T1877] hub 8-1:0.0: USB hub found
[  784.954543][ T1877] hub 8-1:0.0: 1 port detected
[  785.376911][ T1877] usb 8-1: USB disconnect, device number 10
[  785.493594][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3309'.
[  785.855435][T13801] loop8: detected capacity change from 0 to 256
[  786.017024][T13801] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  787.152959][T13815] loop8: detected capacity change from 0 to 512
[  787.324302][T13815] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  787.337597][T13815] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  787.697092][T13828] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3324'.
[  787.869819][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3326'.
[  788.100629][T12319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  788.213194][T13836] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3327'.
[  788.276807][T13836] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3327'.
[  789.320797][T13854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3338'.
[  789.330312][T13854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3338'.
[  789.959721][T13867] loop7: detected capacity change from 0 to 128
[  790.090910][T13867] EXT4-fs: Ignoring removed nobh option
[  790.115859][T13867] EXT4-fs (loop7): Test dummy encryption mode enabled
[  790.309624][T13867] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  790.351010][T13867] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  790.820084][T13884] loop8: detected capacity change from 0 to 22
[  790.907743][T13884] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  791.011943][T13886] loop6: detected capacity change from 0 to 1024
[  791.207177][T13886] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  791.219941][T13886] ext4 filesystem being mounted at /545/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  791.291913][T13867] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  791.408729][T13885] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.3349: lblock 0 mapped to illegal pblock 0 (length 1)
[  791.463031][T13886] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: comm syz.6.3349: lblock 0 mapped to illegal pblock 0 (length 1)
[  791.486825][T12534] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  791.498203][T13886] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: comm syz.6.3349: lblock 0 mapped to illegal pblock 0 (length 1)
[  791.641145][ T7537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  791.928227][T13900] erspan0: entered promiscuous mode
[  792.519453][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3360'.
[  792.890080][T13919] loop0: detected capacity change from 0 to 16
[  792.946949][T13919] erofs (device loop0): mounted with root inode @ nid 36.
[  793.798983][T13936] Falling back ldisc for ttyS3.
[  794.099718][T13940] loop7: detected capacity change from 0 to 128
[  794.158192][T13940] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  794.184333][T13940] hpfs: filesystem error: improperly stopped
[  794.190570][T13940] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  794.199148][T13940] hpfs: You really don't want any checks? You are crazy...
[  794.259275][T13940] hpfs: hpfs_map_sector(): read error
[  794.265155][T13940] hpfs: code page support is disabled
[  794.295243][T13940] hpfs: hpfs_map_4sectors(): unaligned read
[  794.303198][T13940] hpfs: hpfs_map_4sectors(): unaligned read
[  794.309289][T13940] hpfs: filesystem error: unable to find root dir
[  794.913663][ T5794] Bluetooth: hci2: command 0x0406 tx timeout
[  795.650951][T13957] loop1: detected capacity change from 0 to 4096
[  795.767116][T13965] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  795.812223][   T30] audit: type=1800 audit(1760035526.591:168): pid=13957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3381" name="file2" dev="loop1" ino=16 res=0 errno=0
[  795.837333][T13964] loop6: detected capacity change from 0 to 512
[  795.889719][T13964] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  795.935222][T13964] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  795.977475][T13964] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  795.992267][T13964] System zones: 0-2, 18-18, 34-35
[  796.002303][T13964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  796.032480][T13964] fscrypt (loop6, inode 12): Error -61 getting encryption context
[  796.265164][T13974] vivid-001: disconnect
[  796.270658][ T7537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  796.344445][T13968] vivid-001: reconnect
[  797.631985][T10353] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  797.646124][T13999] netlink: 288 bytes leftover after parsing attributes in process `syz.6.3398'.
[  797.703219][T14002] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  797.826371][T10353] usb 1-1: Using ep0 maxpacket: 8
[  797.874043][T10353] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  797.884020][T10353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  797.938848][T10353] usb 1-1: config 0 descriptor??
[  798.173736][T10353] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  798.553478][T14012] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3405'.
[  798.679914][T14010] loop7: detected capacity change from 0 to 1024
[  798.794818][T10353] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  798.805405][T10353] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[  798.849253][T10353] asix 1-1:0.0: probe with driver asix failed with error -71
[  798.893152][T10353] usb 1-1: USB disconnect, device number 8
[  799.590464][T14026] loop8: detected capacity change from 0 to 128
[  799.646668][T14026] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  799.705159][T14026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  799.812001][T14028] loop0: detected capacity change from 0 to 256
[  799.836713][T14028] exfat: Deprecated parameter 'namecase'
[  799.843072][T14028] exfat: Deprecated parameter 'namecase'
[  799.849326][T14028] exfat: Deprecated parameter 'utf8'
[  799.940392][T14028] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  800.469336][T14037] loop7: detected capacity change from 0 to 1024
[  800.491338][T14037] EXT4-fs: Ignoring removed nomblk_io_submit option
[  800.554030][T14037] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  800.714080][T12534] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  800.907549][T14043] loop1: detected capacity change from 0 to 4096
[  801.014775][T14043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  801.067506][T14048] loop8: detected capacity change from 0 to 1024
[  801.078993][T14048] EXT4-fs: Ignoring removed oldalloc option
[  801.079207][T14048] EXT4-fs: Ignoring removed bh option
[  801.187144][T14048] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  801.251107][T12273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  801.373279][T14048] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.3422: Allocating blocks 497-513 which overlap fs metadata
[  801.668276][T12319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  801.676988][T14065] loop6: detected capacity change from 0 to 512
[  801.689152][T14065] EXT4-fs: Ignoring removed nobh option
[  801.772031][T14065] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.3428: corrupted in-inode xattr: e_value size too large
[  801.789552][T14068] loop0: detected capacity change from 0 to 512
[  801.814875][T14065] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3428: couldn't read orphan inode 15 (err -117)
[  801.864427][T14065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  801.925713][T14068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  801.940040][T14068] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  802.027519][T14071] loop1: detected capacity change from 0 to 16
[  802.041018][T14071] erofs (device loop1): mounted with root inode @ nid 36.
[  802.297605][T12184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  802.374456][ T7537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  802.479031][T14077] loop1: detected capacity change from 0 to 256
[  802.543560][T14077] exFAT-fs (loop1): bogus fat length
[  802.549029][T14077] exFAT-fs (loop1): failed to read boot sector
[  802.555745][T14077] exFAT-fs (loop1): failed to recognize exfat type
[  803.278840][T14086] loop8: detected capacity change from 0 to 1024
[  803.362035][T14085] loop7: detected capacity change from 0 to 2048
[  803.425263][T14077] loop1: detected capacity change from 0 to 32768
[  803.435626][T14077] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3433 (14077)
[  803.459847][T14077] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  803.471814][T14077] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  803.579838][T14095] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  803.617199][ T1841] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe8eebe8b8f887954dcf8153692d8edda437b01b76cd961dce965fb2cf766bf1e found 0x26c1dceeecb313153f2690130e1debb5ace334e08c217869dfce4b04a84b603c level 0
[  803.641699][T14077] BTRFS error (device loop1): failed to load root extent
[  803.704241][T14077] BTRFS error (device loop1): open_ctree failed: -5
[  804.569015][T14109] loop1: detected capacity change from 0 to 512
[  804.623390][T14109] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  804.712292][T14109] EXT4-fs (loop1): 1 truncate cleaned up
[  804.720281][T14109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  804.876793][T14109] fscrypt (loop1, inode 18): Mutually exclusive encryption flags (0x1c)
[  804.885828][T10353] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  805.071909][T10353] usb 1-1: Using ep0 maxpacket: 32
[  805.103455][T12273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  805.144433][T10353] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  805.155058][T10353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.163601][T10353] usb 1-1: Product: syz
[  805.168066][T10353] usb 1-1: Manufacturer: syz
[  805.172993][T10353] usb 1-1: SerialNumber: syz
[  805.209008][T10353] usb 1-1: config 0 descriptor??
[  805.381888][   T30] audit: type=1326 audit(1760035536.161:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14124 comm="syz.6.3448" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d539 code=0x0
[  805.460637][T14129] loop1: detected capacity change from 0 to 128
[  805.560863][T14129] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  805.859543][T10353] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  805.870356][T10353] peak_usb 1-1:0.0 can0: sending command failure: -22
[  805.877931][T10353] peak_usb 1-1:0.0 can0: sending command failure: -22
[  805.994161][T10353] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22
[  806.081258][   T11] usb 1-1: USB disconnect, device number 9
[  806.179453][T14136] loop1: detected capacity change from 0 to 1024
[  806.245328][T14136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  806.258264][T14136] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  806.336151][T14141] loop7: detected capacity change from 0 to 64
[  806.442769][   T30] audit: type=1800 audit(1760035537.221:170): pid=14136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3453" name="file1" dev="loop1" ino=15 res=0 errno=0
[  806.674569][T12273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  806.774742][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3457'.
[  806.809244][T14150] sctp: Trying to GSO but underlying device doesn't support it.
[  807.306707][T14160] input: syz1 as /devices/virtual/input/input29
[  807.389474][T14157] loop6: detected capacity change from 0 to 2048
[  807.519061][T14157] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  807.694027][ T7537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  807.825862][T14170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3465'.
[  807.894537][T14171] loop8: detected capacity change from 0 to 128
[  808.095526][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3468'.
[  808.104897][T14173] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3468'.
[  808.114238][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3468'.
[  808.123801][T14173] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3468'.
[  808.134851][T14173] netlink: 'syz.6.3468': attribute type 6 has an invalid length.
[  808.792883][T14182] sctp: [Deprecated]: syz.8.3472 (pid 14182) Use of int in max_burst socket option deprecated.
[  808.792883][T14182] Use struct sctp_assoc_value instead
[  809.109144][T14176] loop7: detected capacity change from 0 to 32768
[  809.122273][T14176] BTRFS error: device /dev/loop7 has incomplete metadata_uuid change, please use btrfstune to complete
[  809.429900][T14186] loop0: detected capacity change from 0 to 256
[  809.461403][T14186] exfat: Deprecated parameter 'utf8'
[  809.467518][T14186] exfat: Deprecated parameter 'namecase'
[  809.474424][T14186] exfat: Deprecated parameter 'namecase'
[  809.480330][T14186] exfat: Deprecated parameter 'utf8'
[  809.652248][   T11] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  809.683827][T14184] loop6: detected capacity change from 0 to 4096
[  809.684227][T14186] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x0fac38ce, utbl_chksum : 0xe619d30d)
[  809.777522][T14186] exFAT-fs (loop0): start_clu is invalid cluster(0x400)
[  809.844089][   T11] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00
[  809.853632][   T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  809.918624][   T11] usb 2-1: config 0 descriptor??
[  810.168757][T14194] loop8: detected capacity change from 0 to 256
[  810.196880][T14194] exfat: Deprecated parameter 'namecase'
[  810.210272][T14194] exfat: Deprecated parameter 'namecase'
[  810.339937][T14194] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x7808ae6a, utbl_chksum : 0xe619d30d)
[  810.386647][   T11] hid-corsair-void 0003:1B1C:0A55.002B: unknown main item tag 0x0
[  810.427399][   T11] hid-corsair-void 0003:1B1C:0A55.002B: hidraw0: USB HID v0.00 Device [HID 1b1c:0a55] on usb-dummy_hcd.1-1/input0
[  810.453010][T14194] exFAT-fs (loop8): error, data size is invalid(16777215)
[  810.475150][T14196] loop0: detected capacity change from 0 to 1024
[  810.534454][T14196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  810.547329][T14196] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  810.582087][ T5895] hid-corsair-void 0003:1B1C:0A55.002B: failed to request battery (reason: -71)
[  810.602255][ T1877] usb 2-1: USB disconnect, device number 16
[  810.632902][   T11] hid-corsair-void 0003:1B1C:0A55.002B: failed to request firmware (reason: -71)
[  810.692027][T14201] loop7: detected capacity change from 0 to 64
[  810.718586][   T30] audit: type=1326 audit(1760035541.491:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.6.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[  810.759991][   T30] audit: type=1326 audit(1760035541.531:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.6.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[  810.783040][   T30] audit: type=1326 audit(1760035541.531:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.6.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf704d539 code=0x7ffc0000
[  810.805856][   T30] audit: type=1326 audit(1760035541.531:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.6.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[  810.829324][   T30] audit: type=1326 audit(1760035541.531:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.6.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[  810.852128][   T30] audit: type=1326 audit(1760035541.541:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.6.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf704d539 code=0x7ffc0000
[  810.874982][   T30] audit: type=1326 audit(1760035541.541:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.6.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf704d539 code=0x7ffc0000
[  810.933026][T14196] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.3478: lblock 0 mapped to illegal pblock 0 (length 6)
[  810.970349][T14205] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  810.987194][T14205] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 4 with error 28
[  811.000073][T14205] EXT4-fs (loop0): This should not happen!! Data will be lost
[  811.000073][T14205] 
[  811.008381][T14196] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  811.010336][T14205] EXT4-fs (loop0): Total free blocks count 0
[  811.029516][T14205] EXT4-fs (loop0): Free/Dirty block details
[  811.030174][T14196] EXT4-fs (loop0): This should not happen!! Data will be lost
[  811.030174][T14196] 
[  811.036009][T14205] EXT4-fs (loop0): free_blocks=4293918720
[  811.036116][T14205] EXT4-fs (loop0): dirty_blocks=48
[  811.036210][T14205] EXT4-fs (loop0): Block reservation details
[  811.037818][   T30] audit: type=1326 audit(1760035541.751:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.6.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[  811.088226][   T30] audit: type=1326 audit(1760035541.751:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.6.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=402 compat=1 ip=0xf704d539 code=0x7ffc0000
[  811.110884][   T30] audit: type=1326 audit(1760035541.751:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14202 comm="syz.6.3479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[  811.202461][T12534] hfs: node 4:3 still has 1 user(s)!
[  811.823752][ T5858] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  812.004270][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  812.015933][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  812.026562][ T5858] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  812.040162][ T5858] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  812.050681][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.069319][T14223] loop1: detected capacity change from 0 to 512
[  812.114809][T14223] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  812.213784][ T5858] usb 1-1: config 0 descriptor??
[  812.504073][T14227] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3491'.
[  812.646092][ T5858] plantronics 0003:047F:FFFF.002C: unbalanced collection at end of report description
[  812.693685][ T5858] plantronics 0003:047F:FFFF.002C: parse failed
[  812.700536][ T5858] plantronics 0003:047F:FFFF.002C: probe with driver plantronics failed with error -22
[  812.729542][T14231] loop1: detected capacity change from 0 to 512
[  812.809044][T14231] EXT4-fs (loop1): orphan cleanup on readonly fs
[  812.830361][T14231] EXT4-fs error (device loop1): ext4_quota_enable:7136: inode #15: comm syz.1.3493: iget: bad i_size value: 360287970189639690
[  812.872472][ T5858] usb 1-1: USB disconnect, device number 10
[  812.882056][T14231] EXT4-fs error (device loop1): ext4_quota_enable:7139: comm syz.1.3493: Bad quota inode: 15, type: 2
[  812.915611][T14231] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix.
[  812.967187][T14231] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  812.976458][T14231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  813.153174][T14231] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  813.179253][T14231] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 2
[  813.181819][T14231] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  813.207826][T14231] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 2
[  813.427429][T12273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  813.959679][T14245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3498'.
[  814.507604][T14252] netlink: 4124 bytes leftover after parsing attributes in process `syz.1.3502'.
[  814.616593][T14253] loop6: detected capacity change from 0 to 2048
[  814.686036][T14253]  loop6: p2 < > p4
[  814.742524][T14253] loop6: p4 size 262144 extends beyond EOD, truncated
[  815.432370][T14268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3511'.
[  817.083002][T14284] loop1: detected capacity change from 0 to 1024
[  817.935210][T14300] loop7: detected capacity change from 0 to 256
[  817.994430][T14300] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d)
[  818.056559][T14301] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3523'.
[  819.163626][T14313] loop8: detected capacity change from 0 to 2048
[  819.197507][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3531'.
[  819.206849][T14316] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  819.233963][T14313] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  819.412940][T14313] syz.8.3529: attempt to access beyond end of device
[  819.412940][T14313] loop8: rw=524288, sector=65534, nr_sectors = 2 limit=2048
[  819.418183][T14318] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  819.451171][T14314] loop7: detected capacity change from 0 to 4096
[  819.470295][T14314] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  819.571359][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  819.571440][   T30] audit: type=1800 audit(1760035550.331:182): pid=14313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3529" name="file2" dev="loop8" ino=16 res=0 errno=0
[  819.774282][T14314] ntfs3(loop7): ino=19, mi_enum_attr
[  819.779935][T14314] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  819.941865][ T5858] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  820.116022][ T5858] usb 2-1: Using ep0 maxpacket: 32
[  820.165736][ T5858] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.4d
[  820.175810][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0
[  820.184356][ T5858] usb 2-1: Product: syz
[  820.223404][ T5858] usb 2-1: config 0 descriptor??
[  820.488386][ T5858] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  820.510434][ T5858] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  820.536862][ T5858] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  820.546146][ T5858] usb 2-1: media controller created
[  820.631844][ T5858] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  820.841388][ T5858] az6027: usb out operation failed. (-71)
[  820.856054][ T5858] az6027: usb out operation failed. (-71)
[  820.862267][ T5858] stb0899_attach: Driver disabled by Kconfig
[  820.868415][ T5858] az6027: no front-end attached
[  820.868415][ T5858] 
[  820.894632][ T5858] az6027: usb out operation failed. (-71)
[  820.900692][ T5858] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  820.911007][ T5858] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31
[  820.960809][ T5858] dvb-usb: schedule remote query interval to 400 msecs.
[  820.968419][ T5858] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  821.025555][ T5858] usb 2-1: USB disconnect, device number 17
[  821.200340][T14340] loop6: detected capacity change from 0 to 1024
[  821.227197][T14340] EXT4-fs: Ignoring removed orlov option
[  821.308695][T14340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  821.321719][T14340] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  821.379552][ T5858] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  821.435781][T14340] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.3542: lblock 0 mapped to illegal pblock 0 (length 1)
[  821.462599][T14340] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  821.476491][T14340] EXT4-fs (loop6): This should not happen!! Data will be lost
[  821.476491][T14340] 
[  821.529113][T14346] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #15: comm syz.6.3542: lblock 0 mapped to illegal pblock 0 (length 1)
[  821.896289][ T7537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  822.749870][T14363] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3550'.
[  822.945365][T14365] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3551'.
[  824.275136][T14389] loop7: detected capacity change from 0 to 16
[  824.310050][T14389] erofs (device loop7): mounted with root inode @ nid 36.
[  824.378294][T14389] syz.7.3563: attempt to access beyond end of device
[  824.378294][T14389] loop7: rw=0, sector=16, nr_sectors = 8 limit=16
[  824.788058][T14398] autofs4:pid:14398:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(32766.2895), cmd(0xc018937c)
[  824.802822][T14398] autofs4:pid:14398:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937c)
[  825.594536][T14415] loop0: detected capacity change from 0 to 512
[  826.264013][ T1841] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  826.274831][ T1841] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  826.492378][ T1841] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  826.503181][ T1841] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  826.557168][T14424] netlink: 'syz.6.3581': attribute type 49 has an invalid length.
[  826.660721][ T1841] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  826.672405][ T1841] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  826.777242][T14427] loop0: detected capacity change from 0 to 256
[  826.940449][ T1841] netdevsim netdevsim7 netdevsim0 (unregistering): left allmulticast mode
[  826.954406][ T1841] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  826.965166][ T1841] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  827.273677][ T1841] bridge_slave_1: left allmulticast mode
[  827.279546][ T1841] bridge_slave_1: left promiscuous mode
[  827.286522][ T1841] bridge0: port 2(bridge_slave_1) entered disabled state
[  827.336203][ T1841] bridge_slave_0: left allmulticast mode
[  827.342597][ T1841] bridge_slave_0: left promiscuous mode
[  827.349320][ T1841] bridge0: port 1(bridge_slave_0) entered disabled state
[  827.863912][ T1841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  827.893028][ T1841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  827.910688][ T1841] bond0 (unregistering): Released all slaves
[  828.607507][ T1841] hsr_slave_0: left promiscuous mode
[  828.628249][ T1841] hsr_slave_1: left promiscuous mode
[  828.645922][ T1841] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  828.653620][ T1841] batman_adv: batadv0: Removing interface: batadv_slave_0
[  828.726038][ T1841] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  828.741710][ T1841] batman_adv: batadv0: Removing interface: batadv_slave_1
[  828.861403][ T1841] veth1_macvtap: left promiscuous mode
[  828.874052][ T1841] veth0_macvtap: left promiscuous mode
[  828.879992][ T1841] veth1_vlan: left promiscuous mode
[  828.885690][ T1841] veth0_vlan: left promiscuous mode
[  828.893968][T14443] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  828.978766][T14443] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  828.988733][T14443] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  829.007318][T14443] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  829.018859][T14443] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  829.811311][ T1841] team0 (unregistering): Port device team_slave_1 removed
[  829.886116][ T1841] team0 (unregistering): Port device team_slave_0 removed
[  830.188385][T14460] loop1: detected capacity change from 0 to 256
[  831.071825][T14443] Bluetooth: hci4: command tx timeout
[  831.161421][T14442] chnl_net:caif_netlink_parms(): no params data found
[  831.405497][T14474] netlink: 'syz.1.3599': attribute type 2 has an invalid length.
[  832.285193][T14442] bridge0: port 1(bridge_slave_0) entered blocking state
[  832.292998][T14442] bridge0: port 1(bridge_slave_0) entered disabled state
[  832.300745][T14442] bridge_slave_0: entered allmulticast mode
[  832.312477][T14442] bridge_slave_0: entered promiscuous mode
[  832.356821][T14490] loop6: detected capacity change from 0 to 128
[  832.378678][T14442] bridge0: port 2(bridge_slave_1) entered blocking state
[  832.381402][T14488] loop0: detected capacity change from 0 to 1024
[  832.386406][T14442] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.403320][T14442] bridge_slave_1: entered allmulticast mode
[  832.413177][T14442] bridge_slave_1: entered promiscuous mode
[  832.470499][T14490] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  832.543531][T14490] ext4 filesystem being mounted at /598/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  832.638100][T14442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  832.668551][   T30] audit: type=1800 audit(1760035563.441:183): pid=14490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3606" name="file0" dev="loop6" ino=12 res=0 errno=0
[  832.670952][T14442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  832.895933][ T7537] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  833.006095][T14442] team0: Port device team_slave_0 added
[  833.060644][T14442] team0: Port device team_slave_1 added
[  833.154593][T14443] Bluetooth: hci4: command tx timeout
[  833.391191][T14442] batman_adv: batadv0: Adding interface: batadv_slave_0
[  833.398715][T14442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  833.425130][T14442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  833.500035][T14499] loop8: detected capacity change from 0 to 4096
[  833.500116][T14442] batman_adv: batadv0: Adding interface: batadv_slave_1
[  833.500190][T14442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  833.541072][T14442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  833.541982][T14499] NILFS error (device loop8): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  833.574432][T14506] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  833.613492][T14499] Remounting filesystem read-only
[  833.864130][T14503] loop1: detected capacity change from 0 to 4096
[  833.885702][T14503] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  833.913752][T14442] hsr_slave_0: entered promiscuous mode
[  833.926750][T14442] hsr_slave_1: entered promiscuous mode
[  833.936013][T14442] debugfs: 'hsr0' already exists in 'hsr'
[  833.944012][T14442] Cannot create hsr debugfs directory
[  835.060613][T14523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3617'.
[  835.231820][T14443] Bluetooth: hci4: command tx timeout
[  835.541227][T14442] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  835.570469][T14532] loop0: detected capacity change from 0 to 47
[  835.580862][T14442] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  835.675665][T14442] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  835.757535][T14442] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  836.653496][T14442] 8021q: adding VLAN 0 to HW filter on device bond0
[  836.802756][T14442] 8021q: adding VLAN 0 to HW filter on device team0
[  836.863750][ T1841] bridge0: port 1(bridge_slave_0) entered blocking state
[  836.871416][ T1841] bridge0: port 1(bridge_slave_0) entered forwarding state
[  836.957673][ T1841] bridge0: port 2(bridge_slave_1) entered blocking state
[  836.965250][ T1841] bridge0: port 2(bridge_slave_1) entered forwarding state
[  837.278143][T14554] loop1: detected capacity change from 0 to 16
[  837.312183][T14443] Bluetooth: hci4: command tx timeout
[  837.572784][T14559] syzkaller0: tun_chr_ioctl cmd 1074025677
[  837.579201][T14559] syzkaller0: linktype set to 1
[  838.475320][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3637'.
[  838.720543][T14442] 8021q: adding VLAN 0 to HW filter on device batadv0
[  838.812492][T14574] bond0: option arp_interval: invalid value (18446744071578845184)
[  838.820760][T14574] bond0: option arp_interval: allowed values 0 - 2147483647
[  838.944859][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  840.283213][ T1877] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  840.440718][T14442] veth0_vlan: entered promiscuous mode
[  840.459503][ T1877] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  840.468254][ T1877] usb 7-1: config 0 has no interface number 0
[  840.475243][ T1877] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  840.486545][ T1877] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  840.498824][T14603] loop7: detected capacity change from 0 to 7
[  840.551350][T14603] buffer_io_error: 4 callbacks suppressed
[  840.551445][T14603] Buffer I/O error on dev loop7, logical block 0, async page read
[  840.565879][T14603] Buffer I/O error on dev loop7, logical block 0, async page read
[  840.574578][T14603] Buffer I/O error on dev loop7, logical block 0, async page read
[  840.582856][T14603] Buffer I/O error on dev loop7, logical block 0, async page read
[  840.590983][T14603] Buffer I/O error on dev loop7, logical block 0, async page read
[  840.599386][T14603] Buffer I/O error on dev loop7, logical block 0, async page read
[  840.607612][T14603] Buffer I/O error on dev loop7, logical block 0, async page read
[  840.623787][T14603] ldm_validate_partition_table(): Disk read failed.
[  840.628052][T14605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3650'.
[  840.630641][T14603] Buffer I/O error on dev loop7, logical block 0, async page read
[  840.650105][T14603] Buffer I/O error on dev loop7, logical block 0, async page read
[  840.658723][T14603] Buffer I/O error on dev loop7, logical block 0, async page read
[  840.672563][T14603] Dev loop7: unable to read RDB block 0
[  840.677636][T14442] veth1_vlan: entered promiscuous mode
[  840.681741][T14603]  loop7: unable to read partition table
[  840.704239][T14603] loop7: partition table beyond EOD, truncated
[  840.710984][T14603] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  840.749259][ T1877] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  840.759847][ T1877] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  840.768375][ T1877] usb 7-1: Product: syz
[  840.772832][ T1877] usb 7-1: SerialNumber: syz
[  840.830633][ T1877] usb 7-1: config 0 descriptor??
[  840.857137][ T1877] cm109 7-1:0.8: invalid payload size 0, expected 4
[  840.866959][ T1877] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input32
[  840.998065][T14442] veth0_macvtap: entered promiscuous mode
[  841.069489][T14442] veth1_macvtap: entered promiscuous mode
[  841.121098][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  841.135673][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  841.147351][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  841.155792][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  841.163605][ T1877] usb 7-1: USB disconnect, device number 17
[  841.170380][    C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71
[  841.177537][    C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  841.199134][ T1877] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  841.300399][T14442] batman_adv: batadv0: Interface activated: batadv_slave_0
[  841.384924][T14442] batman_adv: batadv0: Interface activated: batadv_slave_1
[  841.446061][ T4063] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  841.469212][ T4063] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  841.495946][ T4063] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  841.520922][ T4063] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  842.344345][T14625] netem: invalid attributes len -3
[  843.239147][T14629] loop0: detected capacity change from 0 to 4096
[  843.300328][T14629] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  843.447416][T14641] loop8: detected capacity change from 0 to 1024
[  843.542400][T14641] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  843.555361][T14641] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  843.601973][T14629] ntfs3(loop0): ino=1a, mi_enum_attr
[  843.607536][T14629] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  843.626009][T14629] ntfs3(loop0): ino=1a, mi_enum_attr
[  843.638887][T14629] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  843.821689][T14641] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.3663: lblock 0 mapped to illegal pblock 0 (length 6)
[  843.865636][T14641] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  843.878781][T14641] EXT4-fs (loop8): This should not happen!! Data will be lost
[  843.878781][T14641] 
[  843.936457][T14651] EXT4-fs error (device loop8): ext4_ext_remove_space:2955: inode #15: comm syz.8.3663: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  844.018528][T14651] EXT4-fs error (device loop8) in ext4_setattr:6042: Corrupt filesystem
[  844.049841][T14654] loop6: detected capacity change from 0 to 256
[  844.085727][T14654] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d)
[  844.325017][ T4063] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  844.382234][ T4063] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 16 with error 28
[  844.395037][ T4063] EXT4-fs (loop8): This should not happen!! Data will be lost
[  844.395037][ T4063] 
[  844.411170][ T4063] EXT4-fs (loop8): Total free blocks count 0
[  844.419425][ T4063] EXT4-fs (loop8): Free/Dirty block details
[  844.427741][ T4063] EXT4-fs (loop8): free_blocks=4293918720
[  844.433903][ T4063] EXT4-fs (loop8): dirty_blocks=16
[  844.439210][ T4063] EXT4-fs (loop8): Block reservation details
[  844.507023][T14658] loop0: detected capacity change from 0 to 512
[  845.691078][T14674] bond0: entered promiscuous mode
[  845.696710][T14674] bond_slave_0: entered promiscuous mode
[  845.703876][T14674] bond_slave_1: entered promiscuous mode
[  846.176328][T14671] loop0: detected capacity change from 0 to 40427
[  846.189967][T14671] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(512)
[  846.199703][T14671] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  846.210131][T14671] F2FS-fs (loop0): build fault injection rate: 771
[  846.230911][T14671] F2FS-fs (loop0): invalid crc_offset: 16781308
[  846.241070][T14671] F2FS-fs (loop0): invalid crc value
[  846.253827][T14671] F2FS-fs (loop0): Failed to get valid F2FS checkpoint
[  847.502543][ T4063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  847.510719][ T4063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  847.583362][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3679'.
[  847.628018][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  847.636145][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  848.840960][T14702] loop7: detected capacity change from 0 to 8192
[  848.894822][T14702] msdos: Unknown parameter 'audit'
[  849.297807][T14717] loop0: detected capacity change from 0 to 256
[  850.381975][T14723] loop8: detected capacity change from 0 to 4096
[  850.421181][T14723] ntfs3(loop8): Primary boot: start of MFT 0x2 (0xf) is out of volume 0x80.
[  850.477028][T14723] ntfs3(loop8): try to read out of volume at offset 0x1ffe00
[  850.823414][T14737] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3698'.
[  851.078229][T14741] loop8: detected capacity change from 0 to 512
[  851.298649][T14741] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  851.312827][T14741] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  851.581260][T12319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  852.735544][T14763] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3711'.
[  854.033493][T14783] loop6: detected capacity change from 0 to 4096
[  854.046521][T14783] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  854.098639][T14785] loop7: detected capacity change from 0 to 4096
[  854.163774][T14785] NILFS (loop7): invalid segment: Checksum error in segment payload
[  854.172441][T14785] NILFS (loop7): trying rollback from an earlier position
[  854.223347][T14785] NILFS (loop7): recovery complete
[  854.254637][T14790] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  854.265978][ T5895] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  854.419174][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3724'.
[  854.451765][ T5895] usb 9-1: Using ep0 maxpacket: 8
[  854.476664][ T5895] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  854.487337][ T5895] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  854.511417][ T5895] usb 9-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  854.521435][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.522339][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3724'.
[  854.529843][ T5895] usb 9-1: Product: syz
[  854.529956][ T5895] usb 9-1: Manufacturer: syz
[  854.559395][ T5895] usb 9-1: SerialNumber: syz
[  854.628203][ T5895] usb 9-1: config 0 descriptor??
[  855.130541][T10353] usb 9-1: USB disconnect, device number 5
[  855.286492][T14802] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3726'.
[  855.413905][T14804] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  855.589322][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3730'.
[  855.840822][T14810] loop7: detected capacity change from 0 to 512
[  855.998992][T14814] loop6: detected capacity change from 0 to 64
[  857.027829][T14833] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3752'.
[  857.038710][T14833] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3752'.
[  857.351318][T14840] loop0: detected capacity change from 0 to 256
[  857.449909][T14840] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  857.455415][T14843] loop1: detected capacity change from 0 to 1024
[  857.573105][T14843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  857.586219][T14843] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  857.730990][T14842] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.3746: lblock 0 mapped to illegal pblock 0 (length 1)
[  857.748403][T14843] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: comm syz.1.3746: lblock 0 mapped to illegal pblock 0 (length 1)
[  857.798780][T14843] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: comm syz.1.3746: lblock 0 mapped to illegal pblock 0 (length 1)
[  857.841037][T14836] loop6: detected capacity change from 0 to 8192
[  857.850850][T14836] msdos: Unknown parameter 'audit'
[  858.078310][T14852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3748'.
[  858.095954][T12273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  859.639423][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3760'.
[  860.515797][T14896] loop0: detected capacity change from 0 to 512
[  860.563819][T14894] Falling back ldisc for ttyS3.
[  860.645700][T14898] loop7: detected capacity change from 0 to 16
[  860.660753][T14898] erofs (device loop7): mounted with root inode @ nid 36.
[  860.722904][T14896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  860.736141][T14896] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  860.843433][T14904] erspan0: entered promiscuous mode
[  861.118431][T12184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  862.093513][T14923] loop8: detected capacity change from 0 to 1024
[  863.846399][T14948] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  864.021895][ T5858] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  864.061233][T14950] loop1: detected capacity change from 0 to 128
[  864.123037][T14950] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  864.176686][T14950] hpfs: filesystem error: improperly stopped
[  864.183421][T14950] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  864.191771][T14950] hpfs: You really don't want any checks? You are crazy...
[  864.262000][ T5858] usb 7-1: Using ep0 maxpacket: 32
[  864.299063][T14950] hpfs: hpfs_map_sector(): read error
[  864.305791][T14950] hpfs: code page support is disabled
[  864.313687][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  864.325768][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  864.336162][ T5858] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  864.345643][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  864.434709][T14950] hpfs: hpfs_map_4sectors(): unaligned read
[  864.441104][T14950] hpfs: hpfs_map_4sectors(): unaligned read
[  864.447674][T14950] hpfs: filesystem error: unable to find root dir
[  864.565928][ T5858] usb 7-1: config 0 descriptor??
[  864.636407][ T5858] hub 7-1:0.0: USB hub found
[  864.835882][T14946] loop8: detected capacity change from 0 to 40427
[  864.848494][T14946] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(512)
[  864.852505][ T5858] hub 7-1:0.0: 1 port detected
[  864.857396][T14946] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  864.910068][T14946] F2FS-fs (loop8): build fault injection rate: 771
[  864.944970][T14946] F2FS-fs (loop8): invalid crc_offset: 16781308
[  864.963295][T14946] F2FS-fs (loop8): invalid crc value
[  864.968847][T14946] F2FS-fs (loop8): Failed to get valid F2FS checkpoint
[  865.287584][T14956] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3806'.
[  865.383225][ T5858] usb 7-1: USB disconnect, device number 18
[  866.451997][T14968] loop1: detected capacity change from 0 to 1024
[  866.465983][T14968] EXT4-fs: Ignoring removed oldalloc option
[  866.472554][T14968] EXT4-fs: Ignoring removed bh option
[  866.496294][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3803'.
[  866.564567][T14968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  866.689321][T14968] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.3800: Allocating blocks 497-513 which overlap fs metadata
[  866.773547][T14977] loop8: detected capacity change from 0 to 512
[  866.833456][T14977] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  866.857450][T14979] loop0: detected capacity change from 0 to 128
[  866.905674][T14977] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  866.919694][T14979] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  866.958428][T14977] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  866.979513][T14984] loop7: detected capacity change from 0 to 256
[  866.991069][T14977] System zones: 0-2, 18-18, 34-35
[  866.994987][T14984] exfat: Deprecated parameter 'namecase'
[  867.006636][T14984] exfat: Deprecated parameter 'namecase'
[  867.007937][T14979] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  867.012988][T14984] exfat: Deprecated parameter 'utf8'
[  867.038516][T14977] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  867.052322][T12273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  867.084933][T14977] fscrypt (loop8, inode 12): Error -61 getting encryption context
[  867.122228][T14984] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  867.161800][ T5895] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  867.216597][T12319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  867.323656][ T5895] usb 7-1: Using ep0 maxpacket: 8
[  867.359115][ T5895] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  867.368548][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  867.416502][ T5895] usb 7-1: config 0 descriptor??
[  867.669320][ T5895] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  867.785558][T14990] loop0: detected capacity change from 0 to 1024
[  867.811871][T14992] loop7: detected capacity change from 0 to 16
[  867.907822][T14992] erofs (device loop7): mounted with root inode @ nid 36.
[  867.932347][T14994] loop1: detected capacity change from 0 to 128
[  867.957779][T14994] EXT4-fs: Ignoring removed nobh option
[  867.970741][T14994] EXT4-fs (loop1): Test dummy encryption mode enabled
[  868.027440][T14994] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  868.078324][T14994] ext4 filesystem being mounted at /239/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  868.281194][ T5895] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  868.291864][ T5895] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[  868.322663][ T5895] asix 7-1:0.0: probe with driver asix failed with error -71
[  868.341073][ T5895] usb 7-1: USB disconnect, device number 19
[  868.420743][T12273] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  868.769030][T15001] loop0: detected capacity change from 0 to 4096
[  868.786337][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3815'.
[  868.795949][T15005] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  868.836199][T15001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  869.222852][T12184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  870.031345][T15025] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3835'.
[  870.781374][T15040] netlink: 'syz.0.3830': attribute type 2 has an invalid length.
[  870.847175][    C1] =====================================================
[  870.854617][    C1] BUG: KMSAN: uninit-value in macsec_handle_frame+0x2f6/0x5410
[  870.862516][    C1]  macsec_handle_frame+0x2f6/0x5410
[  870.867889][    C1]  __netif_receive_skb_core+0x2040/0x7150
[  870.873954][    C1]  __netif_receive_skb+0xcc/0xac0
[  870.879206][    C1]  process_backlog+0x485/0xa00
[  870.884317][    C1]  __napi_poll+0xdd/0x8a0
[  870.888829][    C1]  net_rx_action+0xbc8/0x1c30
[  870.893774][    C1]  handle_softirqs+0x169/0x6e0
[  870.898708][    C1]  __do_softirq+0x14/0x1b
[  870.903439][    C1]  do_softirq+0x99/0x100
[  870.907860][    C1]  __local_bh_enable_ip+0xa1/0xb0
[  870.913264][    C1]  netif_rx+0xdb/0x3f0
[  870.917518][    C1]  pn_send+0x95b/0xb80
[  870.921872][    C1]  pn_skb_send+0x462/0xa70
[  870.926484][    C1]  pep_sock_connect+0x2af/0x490
[  870.931695][    C1]  pn_socket_connect+0x576/0xd10
[  870.936796][    C1]  __sys_connect+0x517/0x680
[  870.941798][    C1]  __ia32_sys_connect+0x95/0x100
[  870.946943][    C1]  ia32_sys_call+0x1ca7/0x4310
[  870.952100][    C1]  __do_fast_syscall_32+0xb0/0x150
[  870.957411][    C1]  do_fast_syscall_32+0x38/0x80
[  870.962537][    C1]  do_SYSENTER_32+0x1f/0x30
[  870.967200][    C1]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  870.973914][    C1] 
[  870.976325][    C1] Uninit was created at:
[  870.980806][    C1]  kmem_cache_alloc_node_noprof+0x989/0x16b0
[  870.987189][    C1]  kmalloc_reserve+0x13c/0x4b0
[  870.992264][    C1]  __alloc_skb+0x347/0x7d0
[  870.996871][    C1]  pn_raw_send+0x59/0x510
[  871.001397][    C1]  send_reset_indications+0x139/0x1c0
[  871.007141][    C1]  phonet_rcv+0x1478/0x1830
[  871.012001][    C1]  __netif_receive_skb+0x474/0xac0
[  871.017348][    C1]  process_backlog+0x485/0xa00
[  871.022457][    C1]  __napi_poll+0xdd/0x8a0
[  871.026974][    C1]  net_rx_action+0xbc8/0x1c30
[  871.032091][    C1]  handle_softirqs+0x169/0x6e0
[  871.037036][    C1]  __do_softirq+0x14/0x1b
[  871.041757][    C1] 
[  871.044225][    C1] CPU: 1 UID: 0 PID: 15040 Comm: syz.0.3830 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[  871.055548][    C1] Tainted: [W]=WARN
[  871.059450][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  871.069750][    C1] =====================================================
[  871.076953][    C1] Disabling lock debugging due to kernel taint
[  871.083372][    C1] Kernel panic - not syncing: kmsan.panic set ...
[  871.089967][    C1] CPU: 1 UID: 0 PID: 15040 Comm: syz.0.3830 Tainted: G    B   W           syzkaller #0 PREEMPT(none) 
[  871.101104][    C1] Tainted: [B]=BAD_PAGE, [W]=WARN
[  871.106209][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  871.116370][    C1] Call Trace:
[  871.119724][    C1]  <IRQ>
[  871.122642][    C1]  __dump_stack+0x26/0x30
[  871.127140][    C1]  dump_stack_lvl+0x53/0x270
[  871.131888][    C1]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  871.137911][    C1]  dump_stack+0x1e/0x25
[  871.142236][    C1]  vpanic+0x435/0xd30
[  871.146401][    C1]  panic+0x15d/0x160
[  871.150497][    C1]  kmsan_report+0x31c/0x320
[  871.155176][    C1]  ? __msan_warning+0x1b/0x30
[  871.160007][    C1]  ? macsec_handle_frame+0x2f6/0x5410
[  871.165513][    C1]  ? __netif_receive_skb_core+0x2040/0x7150
[  871.171601][    C1]  ? __netif_receive_skb+0xcc/0xac0
[  871.176984][    C1]  ? process_backlog+0x485/0xa00
[  871.182056][    C1]  ? __napi_poll+0xdd/0x8a0
[  871.186727][    C1]  ? net_rx_action+0xbc8/0x1c30
[  871.191702][    C1]  ? handle_softirqs+0x169/0x6e0
[  871.196796][    C1]  ? __do_softirq+0x14/0x1b
[  871.201478][    C1]  ? do_softirq+0x99/0x100
[  871.206039][    C1]  ? __local_bh_enable_ip+0xa1/0xb0
[  871.211388][    C1]  ? netif_rx+0xdb/0x3f0
[  871.215785][    C1]  ? pn_send+0x95b/0xb80
[  871.220174][    C1]  ? pn_skb_send+0x462/0xa70
[  871.224955][    C1]  ? pep_sock_connect+0x2af/0x490
[  871.230152][    C1]  ? pn_socket_connect+0x576/0xd10
[  871.235416][    C1]  ? __sys_connect+0x517/0x680
[  871.240344][    C1]  ? __ia32_sys_connect+0x95/0x100
[  871.245621][    C1]  ? ia32_sys_call+0x1ca7/0x4310
[  871.250779][    C1]  ? __do_fast_syscall_32+0xb0/0x150
[  871.256215][    C1]  ? do_fast_syscall_32+0x38/0x80
[  871.261381][    C1]  ? do_SYSENTER_32+0x1f/0x30
[  871.266194][    C1]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  871.272888][    C1]  ? enqueue_to_backlog+0x349/0xfc0
[  871.278274][    C1]  ? kmsan_get_metadata+0xfb/0x160
[  871.283569][    C1]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  871.290086][    C1]  ? __netif_rx+0x3e/0x360
[  871.294673][    C1]  ? kmsan_get_metadata+0xfb/0x160
[  871.299959][    C1]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  871.305951][    C1]  ? kmsan_get_metadata+0xfb/0x160
[  871.311248][    C1]  __msan_warning+0x1b/0x30
[  871.315907][    C1]  macsec_handle_frame+0x2f6/0x5410
[  871.321261][    C1]  ? filter_irq_stacks+0x49/0x190
[  871.326454][    C1]  ? sk_filter_trim_cap+0x389/0xe90
[  871.331815][    C1]  ? kmsan_get_metadata+0xfb/0x160
[  871.337113][    C1]  ? kmsan_get_metadata+0xfb/0x160
[  871.342412][    C1]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  871.348941][    C1]  ? __pfx_macsec_handle_frame+0x10/0x10
[  871.354725][    C1]  __netif_receive_skb_core+0x2040/0x7150
[  871.360649][    C1]  ? kmsan_get_metadata+0xfb/0x160
[  871.365936][    C1]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  871.371938][    C1]  ? filter_irq_stacks+0x49/0x190
[  871.377181][    C1]  __netif_receive_skb+0xcc/0xac0
[  871.382388][    C1]  ? kmsan_get_metadata+0xfb/0x160
[  871.387699][    C1]  process_backlog+0x485/0xa00
[  871.392628][    C1]  ? __pfx_process_backlog+0x10/0x10
[  871.398055][    C1]  __napi_poll+0xdd/0x8a0
[  871.402567][    C1]  ? kmsan_get_metadata+0xfb/0x160
[  871.407877][    C1]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  871.413878][    C1]  net_rx_action+0xbc8/0x1c30
[  871.418699][    C1]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  871.424696][    C1]  ? sched_clock_cpu+0x59/0xa80
[  871.429766][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  871.435016][    C1]  handle_softirqs+0x169/0x6e0
[  871.439978][    C1]  __do_softirq+0x14/0x1b
[  871.444510][    C1]  do_softirq+0x99/0x100
[  871.448910][    C1]  </IRQ>
[  871.451924][    C1]  <TASK>
[  871.454956][    C1]  __local_bh_enable_ip+0xa1/0xb0
[  871.460140][    C1]  netif_rx+0xdb/0x3f0
[  871.464366][    C1]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  871.470362][    C1]  ? __pfx_sock_wfree+0x10/0x10
[  871.475385][    C1]  pn_send+0x95b/0xb80
[  871.479633][    C1]  pn_skb_send+0x462/0xa70
[  871.484245][    C1]  pep_sock_connect+0x2af/0x490
[  871.489273][    C1]  ? __pfx_pep_sock_connect+0x10/0x10
[  871.494815][    C1]  pn_socket_connect+0x576/0xd10
[  871.499940][    C1]  __sys_connect+0x517/0x680
[  871.504710][    C1]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  871.511221][    C1]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  871.517459][    C1]  ? kmsan_get_metadata+0xfb/0x160
[  871.522742][    C1]  ? __pfx_pn_socket_connect+0x10/0x10
[  871.528371][    C1]  __ia32_sys_connect+0x95/0x100
[  871.533487][    C1]  ia32_sys_call+0x1ca7/0x4310
[  871.538449][    C1]  __do_fast_syscall_32+0xb0/0x150
[  871.543726][    C1]  ? irqentry_exit_to_user_mode+0x7f/0xa0
[  871.549698][    C1]  do_fast_syscall_32+0x38/0x80
[  871.554698][    C1]  do_SYSENTER_32+0x1f/0x30
[  871.559351][    C1]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  871.565929][    C1] RIP: 0023:0xf7f75539
[  871.570136][    C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  871.589905][    C1] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 000000000000016a
[  871.598486][    C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040
[  871.606582][    C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  871.614670][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  871.622750][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  871.630826][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  871.638947][    C1]  </TASK>
[  871.642521][    C1] Kernel Offset: disabled
[  871.646935][    C1] Rebooting in 86400 seconds..