last executing test programs:

2m6.214096397s ago: executing program 2 (id=290):
syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d63703933322c706172746974696f6e3d30303030303030303030303030303030303030332c6769643d666f726765742c6769643d666f726765742c6e6f6164696e6963622c756e64656c6574652c7569643d666f726765742c00fb5ebc1bbec00aea8217b7375ace1f91cad4e856ac3ce827902dd91a9a936650ca99205dc1adee73bc464ab6ea2dad7091eea47594f5ef5227a72684b2ed98640aa52eba3e04c81c829036f312ecb1c7483575d32ed9eef652c6b7284dc45cecea6a0ae3a01c5cd7b60af90431eddc00"/225], 0xfe, 0xc24, &(0x7f0000001480)="$eJzs3UFsHNd9B+D/Gy5Fym4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIRtrQvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKeAxcy+lZY0ZcmmSFH299nUbznz3ux7b5YzkqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN976cKpZ9ODbgUAcJAuTX311Gn3fwD4RLnsz/8AAAAAAAAAAAAAAHDYpSjisUixeGkzzVTfdw1fbHdu3Jwen9i92tFU1Ryoypdfw8+ePnP2S8+NnevlB9e/356IV6YuX6i/uHB9cam1vNyaq0932rMLc617PsJe6+80Wg1A/fqrN+auXl2un37mzLbdN0feG3r0+Mj5sadOPtkrOz0+MTHVV6Y2+JHf/X3uNMPjSBRxMlI8/b2fpGZEFLH3sbjLZ2e/Ha06MVp1Ynp8ourIfLvZWSl3TvYGooio91Vq9MboAM7FnjQiVsvmlw0eLbs3tdhcal6Zb9Unm0sr7ZX2QmcydVtb9qceRZxLEWsRsTH0/sMNRhG1SPGdY5vpSkQM9Mbhi9XE4Du3o9jHPt6Dsp31wYi14iE4Z4fYUBTxcqT46dtFzJZjlr/iCxEvl/mDiDfLfCEilR+MsxHv7vI54uFUiyL+vDz/5zfTXHU96F1XLn6t/pXO1YW+sr3rykN/fzhIh/zaNBxFNKsr/mb66L/ZAQAAAAAAAAAAAAAAAOB+OxpFPBEpXvr3P6rmFUc1L/3Y+bHfH/nF/jnjj9/lOGXZZyJitbi3OblH8hTiyTSZ0gOeS/xJNhxF/HGe//fGg24MAAAAAAAAAAAAAAAAAADAJ9yPI8Xz75xIa9G/pni7c61+uXllvrsqbG/t396a6VtbW1v11M1GzpmcqznXcq7n3MgZRa6fs5FzJudqzrWc6zk3csZArp+zkXMm52rOtZzrOTdyRi3Xz9nIOZNzNedazvWcGznjkKzdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwcVJEET+PFN/+xmaKFBGNiJno5vpQrwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CANpSK+Hynqf9C4ta0WEan6v+tE+cvZaBwp89PRGCvzhWhcyNmsstZ44wG0n70ZTEX8KFIMDb9164Tn8z/Y/e7WxyDe/Obt736l1s2B3s6R94YePX7s/NjErz1+p9dptwaMXmx3btysT49PTEz1ba7ld/9037aR/L7F/ek6EbH82uuvNufnW0ufmBdFHIpmPKgXte6LWhyS9hzUi3y9il12FYfhp6BxWAaq9+IBX5g4EOX9/91I8dvv/Efvht+7//9C97tbd/j42Z/cvv8/v/NA+3T/f6xv2/P5dyODtYjhleuLg8cjhpdfe/1k+3rzWutaq3P21Kkvj419+cypwSMRw1fb862+V3seKgAAAAAAAAAAAAAAAICDlYr43UjR/NFmqkfEzWq+1sj5sadOPjkQA9V8q23ztl6Zunyh/uLC9cWl1vJya64+3WnPLsy17vXthqvpXtPjE/vSmbs6us/tPzr84sLia0vta3+4suv+R4YvXFleWWrO7r47jkYR0ejfMlo1eHp8omr0fLvZqapO7jqZ7sMbTEX8Z6SYPVs/0tuW5//tnOG/bf7/6s4D7dP8v0/1bSvfM6UifhYpfusvHo/PV+18JN43Zrnc30SK0XOfy+XiSFmu14bucwW6MwPLsv8bKf7h59vL9uZDPna77LP3Oq4Pi/L8H4sU3/+z78av523bn/+w+/l/ZOeB9un8f6Zv2yPbnlew566Tz//JSPHCY2/Fb+RtH/T8jyK2tra+FXEiF771fI59Ov+f7ds2Et33/c37130AAAAAAAAAAICH1mAq4m8jxZMTtfRc3nYv//5vbueB9unff/1y37a5A1qvaM+DCgAAAACHxGAq4seR4trKW7fmUG+f/903//N3bq+9Pp527K3+nu+XqucG3M+//+s3kt93Zu/dBgAAAAAAAAAAAAAAAAAAgEMlpSKey+upz9xlPfX1SPHSfz+dy6XjZbneOvAj1a/DlxY6Jy/Mzy/MNleaV+Zb9anF5myrrPuZSLH515/LdYtqffXP57rdNd6Ht3prsS9Fiom/65XtrsXeW5u8ux54dy32suynIsV//f32sr11rD97u+zpsuxfRYqv/9PuZY/fLnumLPvdSPHDr9d7ZR8py/aej9p9JulwLeZbz8wuzL/vUagAAAAAAAAAAAAAAAAAAADwYQ2mIv40UvzP9bVYrab9v3FrV85ab8Ob3+xb73+Hm9U6/yPV+v93ev1R1v8fuS+9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh0uKIl6PFIuXNtP6UPl91/DFdufGzenxid2rHU1VzYGqfPk1/OzpM2e/9NzYuV5+cP377Yl4ZeryhfqLC9cXl1rLy625+nSnPbsw17rnI+y1/u2h6xqtBqB+/dUbc1evLtdPP3Nm2+6bI+8NPXp85PzYUyef7JWdHp+YmOorUxv8EO/+oRp325Eo4i8jxdPf+0n656GIIvY+Fnf57Oy3o1UnRqtOTI9PVB2Zbzc7K+XOyd5AFBH1vkqN3hgdwLnYk0bEatn8ssGjZfemFptLzSvzrfpkc2mlvdJe6EymbmvL/tSjiHMpYi0iNob6D3QkZxGvRorvHNtM/zIUMdAbhy9emvrqqdN3bkexr728i29V7awPRqwVD8E5O8SGooh/jBQ/fftE/OtQRC26X/GFiJfL/EHEm2W+EJHKD8bZiHeHHnSruV9qUcT/lef//GZ6eyii+pGprisXv1b/SufqQl/Z3nVl5/1hKyIeqvvDQTrk16bhKOKH1RV/M/2bn2sAAAAAAAAAAAAAAACAQ6SIX40Uz79zIlXzg2/NKW53rtUvN6/Md6f19eb+9eZMb21tbdVTNxs5Z3Ku5lzLuZ5zI2cUuX7ORs6ZnKs513Ku59zIGQO5fs5GzpmcqznXcq7n3MgZtVw/ZyPnTM7VnGs513Nu5IxDMncPAAAAAAAAAAAAAAAAAAD4eCmq/1J8+xubaWuou770THRz3XqgH3v/HwAA//9wn/vk")
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000))
getpid()
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x0)

2m5.340409482s ago: executing program 2 (id=298):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/81, 0x51}], 0x1}, 0x0)

2m4.972592494s ago: executing program 2 (id=300):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180))
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)

2m4.840374674s ago: executing program 2 (id=301):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0)

2m4.544567476s ago: executing program 2 (id=305):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x7, 0x4002}, 0x90)

2m3.359747422s ago: executing program 2 (id=310):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000004f104300000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)

2m3.186465484s ago: executing program 32 (id=310):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000004f104300000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)

1m19.257340224s ago: executing program 5 (id=658):
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

1m17.695876463s ago: executing program 5 (id=671):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x8, 0x2c, 0x1, @local, @local, {[@hopopts={0xff}]}}}}}, 0x0)
recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40010020)

1m17.549416404s ago: executing program 5 (id=675):
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={0x0})

1m17.429304715s ago: executing program 5 (id=678):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x42000, 0x0)
getdents64(r0, &(0x7f0000000c80)=""/135, 0x87)

1m16.882590697s ago: executing program 5 (id=683):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000004c0)={0x0, 0x5, 0x2, "37f6"}, 0xa)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000600)=ANY=[], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8)

1m14.912507378s ago: executing program 5 (id=703):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000300)=r1)

1m14.61082493s ago: executing program 33 (id=703):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000300)=r1)

38.448105218s ago: executing program 6 (id=960):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @empty, 0x23}, 0x1c)

37.462322493s ago: executing program 6 (id=962):
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000000)='./file1\x00', 0x4480, &(0x7f0000002cc0)=ANY=[], 0xfb, 0x2a2, &(0x7f0000000200)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0xfea7)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0xc17a)

37.248041805s ago: executing program 6 (id=967):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read(r1, &(0x7f0000000000)=""/70, 0xfffffe1b)

34.999677367s ago: executing program 6 (id=970):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x43)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd, "fee8a2a478fc179fd2f8dda1af1ea89de2b7fb0a0100000000000000000300000000000004000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591)

34.765020859s ago: executing program 6 (id=973):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x141042, 0xa9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xbfd, 0x0, 0x0)
write$UHID_INPUT(r0, &(0x7f0000001f00)={0x8, {"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", 0x1000}}, 0x1006)

34.180475232s ago: executing program 6 (id=984):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0xa8, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0502000017040200280012800900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

34.030748753s ago: executing program 34 (id=984):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0xa8, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0502000017040200280012800900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

13.199991328s ago: executing program 4 (id=1187):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xc})
write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c)

13.140072738s ago: executing program 4 (id=1190):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0)

12.451317922s ago: executing program 4 (id=1194):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, "06"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

11.722495116s ago: executing program 4 (id=1204):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x42000, 0x0)
getdents64(r0, &(0x7f0000000c80)=""/135, 0x87)

11.196498908s ago: executing program 4 (id=1207):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
ppoll(&(0x7f0000000200)=[{r0, 0x88}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0)

9.630928647s ago: executing program 4 (id=1225):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file1\x00', 0x2, &(0x7f0000000400)=ANY=[], 0x1, 0xf0d, &(0x7f0000001e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
read$FUSE(r0, &(0x7f0000002dc0)={0x2020}, 0xeffd)

9.524865698s ago: executing program 35 (id=1225):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file1\x00', 0x2, &(0x7f0000000400)=ANY=[], 0x1, 0xf0d, &(0x7f0000001e80)="$eJzs3U9sHNUZAPA367+JTbwGCgZKSKEVgYIdkkhNb0GgHhGX3kEhoRGGooYeiICYHhCVEEVCnCoOVFwolQJSkUCVKtRT21Or3npCvVCpSqWgHtpIiavYb9a7L/vY9cSetXd/P+nz2zdvdr5vbMeZmZ19G4CR1Vj7evToQhHCO5+9/ejLTxWfXF12V2uNA2tfi9hrhhAm2vpFsr0v4oLLF1860a0twuG1r2U/PHah9dyZEMJKOBA+D83w4dLyVx+8+8jBj1+bvuXNs8+8sk2735LuBwAADKPzf17++33//NMD85fO7z8eplrLy+PzZuzPxOP+Q/FAuTxeboTOftEW7SaT9cZiNJL1xpL1xpM845l8E8l2JjLrTfbIN9a2rNt+AgAAwG5Untc2Q9FY7Og3GouL6+f9V30xN1ksPnd6+dSZARUKAAAAVPafc2s33QohhBBCCCGEEGKIY3Vu0FcgAAAAgFGTzhd2jZWtnamrtbVmf/kvPNzo/nzYAnX//n99/ukB5+9ixPO//6q/OAAAVDesR5PlfpXH0eU8Buk8gmPJ8zZ7/N9ItjO+yTpz8wrulvkGc3Wm39edKlf/Zn+Og5KrP50Pc6fK1Z/O07lT5eqfqrmOqnL1d7nysyPl6t9Tcx1V5erfW3MdVeXqn6m5jqpy9c/WXEdVufpvqLmOqnL176u5jqpy9e+W22pz9TdrrqOqXP3zNddRVa7+G2uuo6pc/TfVXEdVufpvrrmOQbkztuX3YX9mvZku53S75RwPAAAARt3/zP8nhBBCtMf6LRCDr0MIIYQQYkvj3KAvQAAAAAADV74voHzX+2pUjo/1GB9vH5/eWKEcn+jx/Mke41M9xgEAAIAQfvf6qdveKjbmu7ve+fDKeaP2hE+uhArzGKXzEW42//XOe3a9+XfLvGUAAACMluIHn1+5/9H3Xpi/dH7/8baz3yvxfLecB3Q8Xhv4NPbL+wJmk35RnkMf78zTyKyXXh+4Ibe9x69zRwEAAGCElefvzVA0FtvOu5uh0Vhc3DgfXwgTxanTyycPxX75+Sx/nJuYurr8oZrrBgAAAPq3cb7f/fy//BzfhTBZLD53evnUmfX+bGv5RKP9usDcxvKi/bpAM1l+OLP8SOyXn9/5o7k9a8sXT/x4+amt3nkAAAAYEWdePPvMk8vLJ3/igQceeNB6MOi/TAAAwFb78su3J356ZPb36+//35j/7kp8cCD2m3Fuv7/E5eV9AuX7AK55v/4TnXnmcus937leM1lvLMZUUvd023bC2nyDnc+bz+Vrdm5nMpNvJsk3m+RL5ykYT9YvuswlGLrMT1iuN5csT+dhHE9yFEn+u7vkAgAAgNLSC88+v3TmxbMPnn72yadPPn3yuSOHj33/2LFDD33voaW1+/qX2u/uBwAAAHajjZt+B10JAAAAAAAAAAAAAAAAAAAAjK46Pk5s0PsIAAAAo+7f50IIK0JkovyAwUHXIXZyrE4NvobhjrBD/x2+/tHgaxBCCCF2R0wN/P9y531iJYTV1fST5gEAAAC21+WLL51ob6+xUmxpvtbWmuvNlZi3bGcf/Nv81ShXu/Bw5/WSvVtaDaOu7t9/+Xdq/qmu4++/urX5p8PG377Q19+/RucGjnf09vSb996lXy+08ocQbh/vM3+6/4/3m7HTwST/vaG//KvvJfmf6Og1+s1/X5J/b5/5r9n/5/vN2On+mH8h9g/e02/+zl0sf0vL/ej3F+C7yf4/FfrNn+x/s8+EiQdifgAYRa3/zVfPDbaQLVYeJZTH0zOxX+5vPNwM6d0Pmz3+byTbGb/uyju3Wx4H3Rr70606OvOWNlt/+X2Zje0NFetM7Za7SnL1b9XPcbvl6p+ouY6qcvVP1lxHVbn6u5+97zy5+qdrrqOqXP19X4gYsFz9u+W6cq7+mZrrqCpX/2zNdVSVq3+z/48PSq7+fTXXUVWu/rma66gqV3/Fy2q1y9U/X3MdVeXqv7HmOqrK1X9TzXVUlav/5prrGJQ7Yps7Hy7PP+fiWNlvJv2pLt/Lvl8MAQAAALbVv3bkPBBtVw4GXosQQgghhBDDH/9dXTfoOoQQ2xerq4O8+sCgbe+7mQHYqfz9H21+/qPNz3+0+fnzdcpX4oukXxrrMT7eY3yix/hkMp7+vk71GL8p2e5qeV0zurnH+DfiHuTG9/V4/q09xhd6jN/WY/z2HuN39BgHAABgNNwSW+eHAAAAMLxe/s2nb/z23icuzl86v/94mLxm3vlDsT8VX1t/PfbTee9LE/E1/5/F/q9i+4fY/iNZ3/0nAAAAsP3Kz4nx+j8AAAAMr/JzSp3/AwAAwPCaj63zfwAAABheN8bW+T8AAAAMsWK6++LYltcF7o5tv/P6AQA73zdje2ds98f2rth+K7blccA9sf12TfUBAFvnlz/8+bG3io35/o8k45fj8rK9xsr6lYKi0TmT/57Y7o3td/qsJ/08gH7zl/b1mWe78s9dZ34AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYHg01r4ePbpQhPDOZ28/+ovJN/56ddldrTUOrH0tYq8ZQphoPa8c3eh/FFe8fPGlE+3tldgW4XAoQtFaHh670Mo0E0JYCQfC56EZPlxa/uqDdx85+PFr07e8efaZV7bxW9CxfwAAADCM/h8AAP//PZYhLQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
read$FUSE(r0, &(0x7f0000002dc0)={0x2020}, 0xeffd)

9.508780678s ago: executing program 3 (id=1227):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080))
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x110)

7.958592376s ago: executing program 3 (id=1236):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x20000002})
epoll_pwait2(r1, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28000006})

7.570962378s ago: executing program 3 (id=1237):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}})
io_uring_enter(r1, 0x3516, 0xddd3, 0x4, 0x0, 0x0)

7.478511679s ago: executing program 3 (id=1239):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0)

6.990164282s ago: executing program 3 (id=1241):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)

5.43258978s ago: executing program 3 (id=1249):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

5.245901721s ago: executing program 36 (id=1249):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r1}, 0x18)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff620af0fff8ffffff79a4f0ff000000002d040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000a0000000b5040000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd5070ce5c24099d3f18079ebbea6f1707207acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b28753531d3f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c7636f9d1b88caadef8930fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb8bc70000a4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba596684066f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

3.983636588s ago: executing program 7 (id=1255):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9aab}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x19383fb31bd4d798}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

3.61262112s ago: executing program 0 (id=1257):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r1}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

3.472065011s ago: executing program 7 (id=1258):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = io_uring_setup(0x664c, &(0x7f0000000500))
close_range(r2, 0xffffffffffffffff, 0x0)
sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000880)="81", 0x1}], 0x1}, 0x20040801)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)

3.411314271s ago: executing program 0 (id=1259):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000b00)="c803089475", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001ec0)="f6e1", 0x2}], 0x1}}], 0x2, 0x40004090)

3.304495922s ago: executing program 0 (id=1261):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x200000, &(0x7f0000000dc0)=ANY=[], 0x0, 0x3fc, &(0x7f0000000280)="$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")
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="080000000000000090000040"])

2.977801194s ago: executing program 0 (id=1264):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000000000", @ANYRES64=r0], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0)
sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x4048884)

2.714683175s ago: executing program 0 (id=1265):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040))

2.512533486s ago: executing program 7 (id=1266):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b8002944291189"], 0xfdef)

2.058825239s ago: executing program 7 (id=1268):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r0, 0x3)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x800)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16)

1.500605462s ago: executing program 7 (id=1269):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x4)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
fallocate(r0, 0x1, 0x13, 0xfffe)

932.594585ms ago: executing program 1 (id=1272):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/keys\x00', 0x0, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r1, r0, 0x0, 0x3fffff)

917.059595ms ago: executing program 1 (id=1273):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xae}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0)

602.571147ms ago: executing program 7 (id=1274):
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x62, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030601010405050724", @ANYRES32=r0], 0x0)

497.663458ms ago: executing program 1 (id=1275):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x3}, 0xc)
close_range(r0, r1, 0x0)

352.592348ms ago: executing program 1 (id=1276):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x2, 0x0, 0x0, 0x11, 0x3}]}}, 0x0, 0x2a}, 0x28)
setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120)
setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f0000000100), 0x3d)

265.371128ms ago: executing program 0 (id=1277):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x4, 0x24, &(0x7f00000003c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18)

137.406639ms ago: executing program 1 (id=1278):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = userfaultfd(0x80001)
r2 = fanotify_init(0x0, 0x40000)
fanotify_mark(r2, 0x445, 0x1011, r1, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1)

0s ago: executing program 1 (id=1279):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b8032d7eff662209411b3311b1cbed46b3e7afb3013ca86f61146b71acc6184e43656079c723c06a2248eb07fc5b5246997e3ec29211a4791de1fd68d4612b86452f06a1acfbaf4e22", 0xb}, {&(0x7f0000000280)="474a0a4561e81782cbf66936447534f02c3c4aabc1e98f01b916d45fc52678ba4e49c6a239e5dc164d407919b08ec9dfcc1a826c144280f314704719e318efe44486608e517c40b1fc173ea262c2d66504b4bab6c1161a236e8bc008955c1dc72078ce05", 0xfffffe31}, {&(0x7f00000003c0)="6af5b6c2f0430e11ad32d681c8480e", 0xf}], 0x3, 0x0, 0x0, 0x804}, 0x4004150)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000001c0)=0x7, 0x4)

kernel console output (not intermixed with test programs):

: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  152.843262][ T5295] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  152.894438][ T5295] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  152.952174][ T5295] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  153.012015][ T5295] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  153.052773][ T5295] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  153.243556][ T6638] loop0: detected capacity change from 0 to 2048
[  153.341690][ T6638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.452433][ T6633] loop4: detected capacity change from 0 to 40427
[  153.488849][ T6642] loop3: detected capacity change from 0 to 64
[  153.573327][ T6633] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  153.579906][ T6633] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  153.611065][ T6633] F2FS-fs (loop4): invalid crc value
[  153.648243][ T6642] hfs: hfs: Invalid key length: 94
[  153.671204][ T6633] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  153.756680][ T6633] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  153.763815][ T6633] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  153.844895][ T4190] hfs: node 4:3 still has 1 user(s)!
[  153.855649][ T4191] attempt to access beyond end of device
[  153.855649][ T4191] loop4: rw=2049, want=45104, limit=40427
[  154.334532][  T155] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.511486][  T155] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.797024][  T155] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.823695][ T6669] loop4: detected capacity change from 0 to 2048
[  154.885589][ T6667] loop0: detected capacity change from 0 to 65536
[  154.912455][ T6669] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  154.993000][  T155] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.033562][ T4419] udevd[4419]: incorrect nilfs2 checksum on /dev/loop4
[  155.051496][ T6669] NILFS (loop4): mounting unchecked fs
[  155.068199][ T6667] XFS (loop0): Mounting V5 Filesystem
[  155.088528][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.705'.
[  155.143366][ T6669] NILFS (loop4): recovery complete
[  155.260251][ T6667] XFS (loop0): Ending clean mount
[  155.269758][ T6667] XFS (loop0): Quotacheck needed: Please wait.
[  155.300017][ T6684] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  155.425251][ T6667] XFS (loop0): Quotacheck: Done.
[  155.435994][   T26] audit: type=1800 audit(1761756654.423:20): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.702" name="file1" dev="loop0" ino=38 res=0 errno=0
[  155.716434][ T4182] XFS (loop0): Unmounting Filesystem
[  155.922804][ T6680] chnl_net:caif_netlink_parms(): no params data found
[  156.451708][ T6680] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.474694][ T6680] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.510823][ T6680] device bridge_slave_0 entered promiscuous mode
[  156.553480][ T6680] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.564628][ T6680] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.583155][ T6680] device bridge_slave_1 entered promiscuous mode
[  156.644584][ T4300] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  156.678775][ T6680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.697129][ T6680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.901331][ T6680] team0: Port device team_slave_0 added
[  156.914372][ T4300] usb 5-1: Using ep0 maxpacket: 16
[  156.965594][ T6680] team0: Port device team_slave_1 added
[  157.072824][ T6680] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.096021][ T6680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.184513][   T21] Bluetooth: hci4: command 0x0409 tx timeout
[  157.187961][ T6680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.205831][ T6740] loop0: detected capacity change from 0 to 256
[  157.234670][ T4300] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  157.244536][ T4300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.252556][ T4300] usb 5-1: Product: syz
[  157.309551][ T4300] usb 5-1: Manufacturer: syz
[  157.316808][ T6680] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.331791][ T4300] usb 5-1: SerialNumber: syz
[  157.338557][ T6680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.378256][ T4300] usb 5-1: config 0 descriptor??
[  157.425714][ T4300] ums-onetouch 5-1:0.0: USB Mass Storage device detected
[  157.437504][ T6680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.600584][ T6725] loop3: detected capacity change from 0 to 32768
[  157.650703][   T21] usb 5-1: USB disconnect, device number 11
[  157.698483][ T6680] device hsr_slave_0 entered promiscuous mode
[  157.709724][ T6680] device hsr_slave_1 entered promiscuous mode
[  157.751955][ T6725] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  157.873099][  T155] device hsr_slave_0 left promiscuous mode
[  157.893070][  T155] device hsr_slave_1 left promiscuous mode
[  157.930728][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.960843][ T4190] ocfs2: Unmounting device (7,3) on (node local)
[  157.977678][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.015095][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.028269][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.039570][  T155] device bridge_slave_1 left promiscuous mode
[  158.087282][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.117952][  T155] device bridge_slave_0 left promiscuous mode
[  158.135595][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.196812][  T155] device veth1_macvtap left promiscuous mode
[  158.216835][  T155] device veth0_macvtap left promiscuous mode
[  158.244365][  T155] device veth1_vlan left promiscuous mode
[  158.259140][  T155] device veth0_vlan left promiscuous mode
[  158.291730][ T6762] loop0: detected capacity change from 0 to 32768
[  158.379426][ T6762] read_mapping_page failed!
[  158.384019][ T6762] ialloc: diAlloc returned -5!
[  158.520584][ T6778] loop4: detected capacity change from 0 to 22
[  159.195059][ T6778] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  159.264341][ T4300] Bluetooth: hci4: command 0x041b tx timeout
[  159.289022][ T6778] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  159.373641][ T6782] loop3: detected capacity change from 0 to 256
[  159.486106][ T6785] loop4: detected capacity change from 0 to 1024
[  159.613046][ T6785] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  159.630574][  T155] team0 (unregistering): Port device team_slave_1 removed
[  159.691786][ T6791] loop3: detected capacity change from 0 to 1024
[  159.713261][  T155] team0 (unregistering): Port device team_slave_0 removed
[  159.714923][ T6785] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none.
[  159.729717][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.757106][ T6791] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.777481][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.058644][ T6800] loop3: detected capacity change from 0 to 512
[  160.100028][ T6800] EXT4-fs (loop3): Unrecognized mount option "fowner>18446744073709551615" or missing value
[  160.100988][  T155] bond0 (unregistering): Released all slaves
[  160.185508][ T4411] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  160.554549][ T4411] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  160.563656][ T4411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.633343][ T4411] usb 5-1: config 0 descriptor??
[  160.674596][ T6798] loop0: detected capacity change from 0 to 32768
[  160.701930][ T4411] cp210x 5-1:0.0: cp210x converter detected
[  160.797396][ T6798] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.736 (6798)
[  160.830854][ T6798] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  160.863297][ T6798] BTRFS info (device loop0): turning off barriers
[  160.872482][ T6680] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  160.878750][ T6798] BTRFS info (device loop0): setting nodatasum
[  160.894135][ T6798] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  160.914352][ T6798] BTRFS info (device loop0): use zstd compression, level 3
[  160.925030][ T6680] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  160.941683][ T6680] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  160.955009][ T6798] BTRFS info (device loop0): using free space tree
[  160.973699][ T6798] BTRFS info (device loop0): has skinny extents
[  161.001257][ T6680] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  161.104120][ T6835] Context (ID=0x0) not attached to queue pair (handle=0x0:0x0)
[  161.140709][ T4411] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  161.189024][ T4411] cp210x 5-1:0.0: GPIO initialisation failed: -524
[  161.233601][ T4411] usb 5-1: cp210x converter now attached to ttyUSB0
[  161.344358][   T21] Bluetooth: hci4: command 0x040f tx timeout
[  161.399533][ T1323] usb 5-1: USB disconnect, device number 12
[  161.428366][ T1323] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  161.502170][ T1323] cp210x 5-1:0.0: device disconnected
[  161.536198][ T6680] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.623302][ T6680] 8021q: adding VLAN 0 to HW filter on device team0
[  161.673939][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  161.694033][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  161.771540][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  161.794103][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  161.804128][ T6834] loop3: detected capacity change from 0 to 32768
[  161.830644][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.837807][ T4308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.930699][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  161.939919][ T4419] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (4419)
[  161.966718][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  162.004915][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.012022][ T4308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.067652][ T6873] loop4: detected capacity change from 0 to 256
[  162.135387][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  162.182622][ T6873] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  162.210425][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  162.229846][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  162.256631][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  162.305740][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  162.345909][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  162.368117][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  162.417521][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  162.448407][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  162.520090][ T6834] XFS (loop3): Mounting V5 Filesystem
[  162.563593][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  162.574632][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  162.583359][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  162.789787][ T6680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  162.868148][ T6834] XFS (loop3): Ending clean mount
[  162.920443][ T6834] XFS (loop3): Quotacheck needed: Please wait.
[  163.064975][ T6834] XFS (loop3): Quotacheck: Done.
[  163.244738][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  163.300118][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  163.351246][ T6680] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.362139][ T4190] XFS (loop3): Unmounting Filesystem
[  163.384641][ T4221] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  163.456357][ T4253] Bluetooth: hci4: command 0x0419 tx timeout
[  163.640152][ T5192] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  163.814682][ T4221] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.842498][ T4221] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  163.885747][ T6889] loop4: detected capacity change from 0 to 32768
[  164.016289][ T4221] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  164.025999][ T5192] usb 1-1: config 0 has an invalid interface number: 133 but max is 0
[  164.049412][ T5192] usb 1-1: config 0 has no interface number 0
[  164.057088][ T4221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.066517][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  164.092962][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  164.124094][ T4221] usb 2-1: Product: syz
[  164.162545][ T4221] usb 2-1: Manufacturer: syz
[  164.170692][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  164.185859][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  164.193688][ T4221] usb 2-1: SerialNumber: syz
[  164.222457][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  164.240478][ T6889] XFS (loop4): Mounting V5 Filesystem
[  164.244942][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  164.266466][ T5192] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  164.277004][ T6680] device veth0_vlan entered promiscuous mode
[  164.294444][ T5192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.309027][ T5192] usb 1-1: Product: syz
[  164.340761][ T6680] device veth1_vlan entered promiscuous mode
[  164.347765][ T5192] usb 1-1: Manufacturer: syz
[  164.352392][ T5192] usb 1-1: SerialNumber: syz
[  164.389571][ T6889] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  164.422487][ T5192] usb 1-1: config 0 descriptor??
[  164.428037][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  164.446193][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  164.459763][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  164.489865][ T6889] XFS (loop4): Starting recovery (logdev: internal)
[  164.505689][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  164.534707][ T4221] usb 2-1: 0:2 : does not exist
[  164.537494][ T6680] device veth0_macvtap entered promiscuous mode
[  164.558395][ T6889] XFS (loop4): Ending recovery (logdev: internal)
[  164.579006][ T6680] device veth1_macvtap entered promiscuous mode
[  164.598392][ T4221] usb 2-1: USB disconnect, device number 12
[  164.665997][ T6680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.717770][ T6680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.772287][ T6680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.789215][ T6680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.800038][ T6680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.817589][ T6680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.846770][ T6680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.865656][ T4419] udevd[4419]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  164.879964][ T6680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.915625][ T6680] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.922971][ T4191] XFS (loop4): Unmounting Filesystem
[  164.962454][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  164.988278][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  164.998403][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  165.025963][ T6680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.047710][ T5192] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected
[  165.067428][ T5192] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81
[  165.084410][ T6680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.105273][ T5192] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1
[  165.112030][ T6928] loop3: detected capacity change from 0 to 32768
[  165.113098][ T5192] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2
[  165.120537][ T6680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.139802][ T5192] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  165.144926][ T6680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.165136][ T6680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.175871][ T6680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.186049][ T6680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.197446][ T6680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.210332][ T6680] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.222768][ T6680] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.232485][ T6680] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.241586][ T6680] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.262439][ T6680] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.294417][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  165.322365][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  165.359563][ T5780] usb 1-1: USB disconnect, device number 15
[  165.386684][ T5780] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  165.408614][ T5780] keyspan 1-1:0.133: device disconnected
[  165.426810][   T13] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  165.569186][ T6928] XFS (loop3): Mounting V5 Filesystem
[  165.715317][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.723649][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.738679][ T6928] XFS (loop3): Ending clean mount
[  165.810838][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  165.850376][   T26] audit: type=1804 audit(1761756664.833:21): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.759" name="/newroot/167/file1/file1" dev="loop3" ino=4422 res=1 errno=0
[  165.855359][   T13] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  165.890441][ T4612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.916437][ T4612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.934512][   T13] usb 2-1: config 0 has no interface number 0
[  165.964396][   T13] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  166.002700][ T4190] XFS (loop3): Unmounting Filesystem
[  166.060995][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  166.096369][ T6957] device sit0 entered promiscuous mode
[  166.160276][   T13] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  166.169870][ T6957] netlink: 'syz.4.760': attribute type 1 has an invalid length.
[  166.192728][ T6957] netlink: 1 bytes leftover after parsing attributes in process `syz.4.760'.
[  166.200465][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.254048][   T13] usb 2-1: Product: syz
[  166.275049][   T13] usb 2-1: Manufacturer: syz
[  166.279708][   T13] usb 2-1: SerialNumber: syz
[  166.313865][   T13] usb 2-1: config 0 descriptor??
[  166.362608][   T13] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[  166.474480][ T4411] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  166.634363][    C0] yurex 2-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  166.822908][    T7] usb 2-1: USB disconnect, device number 13
[  166.835304][ T4411] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  166.846370][    T7] yurex 2-1:0.50: USB YUREX #0 now disconnected
[  166.874848][ T4411] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  166.968473][ T6984] loop3: detected capacity change from 0 to 1024
[  166.974656][ T4411] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  166.994474][ T4411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  167.022903][ T4411] usb 1-1: SerialNumber: syz
[  167.097646][ T6984] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  167.348202][ T4411] usb 1-1: 0:2 : does not exist
[  167.420568][ T4411] usb 1-1: USB disconnect, device number 16
[  167.484116][ T7008] "syz.1.773" (7008) uses obsolete ecb(arc4) skcipher
[  167.501366][ T7009] loop6: detected capacity change from 0 to 512
[  167.531421][ T7009] EXT4-fs (loop6): inline encryption not supported
[  167.540718][ T4300] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  167.565097][ T7009] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  167.583048][ T7009] EXT4-fs (loop6): Test dummy encryption mode enabled
[  167.602807][ T7009] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  167.645640][ T7009] EXT4-fs (loop6): orphan cleanup on readonly fs
[  167.654333][ T7009] EXT4-fs error (device loop6): ext4_orphan_get:1401: comm syz.6.774: inode #13: comm syz.6.774: iget: illegal inode #
[  167.691867][ T7009] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.774: couldn't read orphan inode 13 (err -117)
[  167.727822][ T7009] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,dioread_nolock,max_dir_size_kb=0x000000000000222a,nouid32,test_dummy_encryption,bsdgroups,,errors=continue. Quota mode: none.
[  167.766630][ T7009] EXT4-fs (loop6): shut down requested (1)
[  167.989472][ T4300] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.020053][ T4300] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  168.111615][ T7023] loop6: detected capacity change from 0 to 4096
[  168.151669][ T4300] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  168.171129][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  168.225643][ T4300] usb 5-1: SerialNumber: syz
[  168.245266][ T7023] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  168.295514][ T1323] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  168.561751][ T4300] usb 5-1: 0:2 : does not exist
[  168.621721][ T4300] usb 5-1: USB disconnect, device number 13
[  168.672568][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.6.778'.
[  168.704865][ T1323] usb 2-1: unable to get BOS descriptor or descriptor too short
[  168.749359][ T7046] loop3: detected capacity change from 0 to 1024
[  168.756326][ T1323] usb 2-1: not running at top speed; connect to a high speed hub
[  168.766329][ T7024] loop0: detected capacity change from 0 to 32768
[  168.840418][ T1323] usb 2-1: config 12 has an invalid interface number: 184 but max is 0
[  168.858046][ T7046] EXT4-fs (loop3): Ignoring removed nobh option
[  168.875028][ T7046] EXT4-fs (loop3): Ignoring removed bh option
[  168.877339][ T1323] usb 2-1: config 12 has no interface number 0
[  168.881244][ T7046] EXT4-fs (loop3): Ignoring removed nobh option
[  168.899137][ T4419] udevd[4419]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  168.939996][ T1323] usb 2-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  168.956599][ T7046] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,auto_da_alloc,dioread_nolock,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b5,data_err=ignore,grpquota,nobh,user_xattr,bh,nobh,,errors=continue. Quota mode: writeback.
[  168.997667][ T7024] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  169.180925][ T7046] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.780: Allocating blocks 497-513 which overlap fs metadata
[  169.213353][ T1323] usb 2-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2
[  169.236231][ T7046] EXT4-fs (loop3): pa ffff8880738ddee0: logic 256, phys. 385, len 8
[  169.243478][ T1323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.244482][ T7046] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1
[  169.263706][ T1323] usb 2-1: Product: syz
[  169.272033][ T1323] usb 2-1: Manufacturer: syz
[  169.295491][ T1323] usb 2-1: SerialNumber: syz
[  169.397047][ T4182] (syz-executor,4182,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  169.418302][ T4182] ocfs2: Unmounting device (7,0) on (node local)
[  169.553817][ T7074] loop6: detected capacity change from 0 to 1024
[  169.676991][ T1323] usb 2-1: USB disconnect, device number 14
[  169.699373][ T7078] loop3: detected capacity change from 0 to 512
[  169.770241][ T7074] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  169.821213][ T7074] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  169.865859][ T7074] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 51 with max blocks 1 with error 28
[  169.884944][ T7078] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  169.951200][ T7078] EXT4-fs (loop3): 1 truncate cleaned up
[  169.965095][ T4243] udevd[4243]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  169.986292][ T7074] EXT4-fs (loop6): This should not happen!! Data will be lost
[  169.986292][ T7074] 
[  169.996321][ T7078] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000000012,inode_readahead_blks=0x0000000000000020,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none.
[  170.094480][ T7074] EXT4-fs (loop6): Total free blocks count 0
[  170.146665][ T7074] EXT4-fs (loop6): Free/Dirty block details
[  170.185881][ T7074] EXT4-fs (loop6): free_blocks=68451041280
[  170.188937][ T7078] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.789: corrupted in-inode xattr
[  170.197737][ T7088] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14
[  170.232247][ T7074] EXT4-fs (loop6): dirty_blocks=32
[  170.259260][ T7074] EXT4-fs (loop6): Block reservation details
[  170.273729][ T7074] EXT4-fs (loop6): i_reserved_data_blocks=2
[  170.297506][ T7078] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1761: inode #15: comm syz.3.789: unable to update i_inline_off
[  170.314400][ T7066] loop4: detected capacity change from 0 to 40427
[  170.344529][ T7078] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.789: corrupted in-inode xattr
[  170.359954][ T7066] F2FS-fs (loop4): build fault injection attr: rate: 684, type: 0x1ffff
[  170.385452][ T7078] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.789: corrupted in-inode xattr
[  170.399878][ T7066] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7
[  170.409894][ T4266] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 52 with error 28
[  170.465987][ T7066] F2FS-fs (loop4): invalid crc value
[  170.468083][ T7099] loop0: detected capacity change from 0 to 512
[  170.479470][ T4266] EXT4-fs (loop6): This should not happen!! Data will be lost
[  170.479470][ T4266] 
[  170.500022][ T7066] F2FS-fs (loop4): Found nat_bits in checkpoint
[  170.522118][ T7099] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  170.653023][ T7099] EXT4-fs error (device loop0): ext4_init_orphan_info:619: comm syz.0.794: orphan file block 0: bad magic
[  170.770802][ T7110] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  170.780335][ T7099] EXT4-fs (loop0): mount failed
[  170.801598][ T7066] F2FS-fs (loop4): Start checkpoint disabled!
[  170.846701][ T7066] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  170.854895][    T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  171.094476][    T7] usb 4-1: Using ep0 maxpacket: 32
[  171.151613][  T155] attempt to access beyond end of device
[  171.151613][  T155] loop4: rw=2049, want=40984, limit=40427
[  171.214693][    T7] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  171.256821][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.292478][    T7] usb 4-1: config 0 descriptor??
[  171.370801][    T7] gspca_main: nw80x-2.14.0 probing 055f:d001
[  171.449913][ T7127] 9pnet: p9_errstr2errno: server reported unknown error 
[  171.800343][ T7119] loop6: detected capacity change from 0 to 32768
[  171.821507][ T7117] loop0: detected capacity change from 0 to 32768
[  171.918646][ T7119] XFS (loop6): Mounting V5 Filesystem
[  171.947697][   T26] audit: type=1800 audit(1761756670.933:22): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.798" name="file1" dev="loop0" ino=4 res=0 errno=0
[  172.170408][ T7119] XFS (loop6): Ending clean mount
[  172.201753][ T7119] XFS (loop6): Quotacheck needed: Please wait.
[  172.281166][ T7119] XFS (loop6): Quotacheck: Done.
[  172.436037][ T6680] XFS (loop6): Unmounting Filesystem
[  172.450944][    T7] gspca_nw80x: reg_w err -71
[  172.457293][    T7] nw80x: probe of 4-1:0.0 failed with error -71
[  172.475213][   T13] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  172.501161][    T7] usb 4-1: USB disconnect, device number 6
[  172.724553][   T13] usb 5-1: Using ep0 maxpacket: 8
[  172.886918][   T13] usb 5-1: unable to get BOS descriptor or descriptor too short
[  172.926480][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.6.812'.
[  172.944012][ T7172] tipc: Started in network mode
[  172.960262][ T7172] tipc: Node identity @emory.en, cluster identity 8
[  172.984686][   T13] usb 5-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0
[  173.024287][   T13] usb 5-1: config 12 interface 0 has no altsetting 0
[  173.206500][   T13] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  173.225691][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.240593][   T13] usb 5-1: Product: syz
[  173.249247][   T13] usb 5-1: Manufacturer: syz
[  173.258394][   T13] usb 5-1: SerialNumber: syz
[  173.602703][ T7182] loop6: detected capacity change from 0 to 40427
[  173.612877][   T13] usb 5-1: selecting invalid altsetting 0
[  173.654462][   T13] usb 5-1: USB disconnect, device number 14
[  173.709789][ T7182] F2FS-fs (loop6): Found nat_bits in checkpoint
[  173.834768][ T7182] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  173.873503][ T7182] attempt to access beyond end of device
[  173.873503][ T7182] loop6: rw=10241, want=45104, limit=40427
[  173.928176][ T6680] attempt to access beyond end of device
[  173.928176][ T6680] loop6: rw=2049, want=45112, limit=40427
[  173.941498][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  174.108342][ T7200] loop0: detected capacity change from 0 to 512
[  174.296382][ T7200] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  174.359241][ T7200] ext4 filesystem being mounted at /156/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.461039][   T26] audit: type=1800 audit(1761756673.443:23): pid=7200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.830" name="file1" dev="loop0" ino=15 res=0 errno=0
[  174.577417][   T26] audit: type=1800 audit(1761756673.443:24): pid=7200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.830" name="file2" dev="loop0" ino=16 res=0 errno=0
[  174.846323][ T7239] loop6: detected capacity change from 0 to 128
[  174.947822][ T7239] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  174.967071][ T7239] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  175.024903][ T4300] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  175.133558][ T7247] process '/newroot/195/file0' started with executable stack
[  175.259255][ T7256] netlink: 256 bytes leftover after parsing attributes in process `syz.6.850'.
[  175.322435][ T7260] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.341113][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.464734][ T4300] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  175.492532][ T4300] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  175.534303][ T4300] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  175.554688][ T4300] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  175.574329][ T4253] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  175.786037][ T4300] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  175.809970][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.823639][ T7274] loop4: detected capacity change from 0 to 8192
[  175.844120][ T4300] usb 4-1: Product: syz
[  175.848851][ T4300] usb 4-1: Manufacturer: syz
[  175.853509][ T4300] usb 4-1: SerialNumber: syz
[  175.866631][ T7276] loop6: detected capacity change from 0 to 8192
[  175.898636][ T7233] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  175.920126][ T7274] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  175.925892][ T4300] cdc_mbim 4-1:1.0: skipping garbage
[  175.940979][ T7274] REISERFS (device loop4): using ordered data mode
[  175.951020][ T7274] reiserfs: using flush barriers
[  175.974981][ T4253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.986138][ T7274] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  176.022056][ T4253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.035118][ T7274] REISERFS (device loop4): checking transaction log (loop4)
[  176.099000][ T4253] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  176.151656][ T7233] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  176.165079][ T4253] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  176.184448][ T7233] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  176.195363][ T4253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.248321][ T4253] usb 2-1: config 0 descriptor??
[  176.348723][ T7274] REISERFS (device loop4): Using tea hash to sort names
[  176.369411][ T7274] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  176.473901][ T7274] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  176.530378][ T7284] FAT-fs (loop6): error, corrupted directory (invalid entries)
[  176.557393][ T7284] FAT-fs (loop6): Filesystem has been set read-only
[  176.572137][ T7285] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  176.751199][ T7295] loop6: detected capacity change from 0 to 512
[  176.767612][ T4253] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  176.790005][ T4253] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  176.809960][ T1323] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  176.859793][ T7233] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  176.876139][ T7295] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.863: inode has both inline data and extents flags
[  176.897511][ T7233] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  176.924549][ T7295] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.863: couldn't read orphan inode 15 (err -117)
[  176.929265][ T4300] cdc_mbim 4-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048
[  176.954159][ T7295] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  176.971158][ T4300] cdc_mbim 4-1:1.0: setting rx_max = 2048
[  177.027424][ T7303] loop4: detected capacity change from 0 to 512
[  177.047139][ T4253] usb 2-1: USB disconnect, device number 15
[  177.122686][ T7303] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  177.177144][ T4300] cdc_mbim 4-1:1.0: setting tx_max = 16384
[  177.194617][ T1323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  177.207855][ T4300] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[  177.215960][ T1323] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  177.268806][ T4300] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 5e:a4:9d:80:b2:aa
[  177.301161][ T7303] EXT4-fs (loop4): re-mounted. Opts: quota,noload,block_validity,. Quota mode: writeback.
[  177.307237][ T1323] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  177.320623][ T1323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  177.329764][ T1323] usb 1-1: SerialNumber: syz
[  177.332165][ T4300] usb 4-1: USB disconnect, device number 7
[  177.371851][ T4300] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  177.620613][ T7313] loop4: detected capacity change from 0 to 2048
[  177.647230][ T1323] usb 1-1: 0:2 : does not exist
[  177.669179][ T1323] usb 1-1: USB disconnect, device number 17
[  177.698072][ T7313] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  177.791646][ T7313] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  177.881272][   T26] audit: type=1800 audit(1761756676.863:25): pid=7313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.867" name="file0" dev="loop4" ino=13 res=0 errno=0
[  177.885689][ T4419] udevd[4419]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  178.134426][   T13] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  178.525427][   T13] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  178.536578][    T7] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  178.548566][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.568730][   T13] usb 4-1: config 0 descriptor??
[  178.605578][   T13] cp210x 4-1:0.0: cp210x converter detected
[  178.697019][ T7334] loop4: detected capacity change from 0 to 4096
[  178.736234][ T7334] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  178.784589][    T7] usb 1-1: Using ep0 maxpacket: 32
[  178.919294][    T7] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  178.943645][    T7] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  178.969209][    T7] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  178.987400][    T7] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  179.007154][    T7] usb 1-1: config 0 interface 0 has no altsetting 0
[  179.034420][   T13] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  179.108665][   T13] usb 4-1: cp210x converter now attached to ttyUSB0
[  179.169250][    T7] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  179.184867][    T7] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  179.196679][    T7] usb 1-1: Product: syz
[  179.213736][    T7] usb 1-1: Manufacturer: syz
[  179.220763][    T7] usb 1-1: SerialNumber: syz
[  179.237531][    T7] usb 1-1: config 0 descriptor??
[  179.275974][    T7] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  179.294448][   T13] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  179.301061][ T5551] usb 4-1: USB disconnect, device number 8
[  179.308657][    T7] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  179.323171][ T5551] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  179.355964][ T5551] cp210x 4-1:0.0: device disconnected
[  179.513417][ T6524] usb 1-1: USB disconnect, device number 18
[  179.525186][ T6524] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  179.664530][   T13] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  179.689879][   T13] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  179.716353][   T13] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  179.735328][   T13] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  179.762793][   T13] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  179.904677][   T13] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  179.913826][   T13] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  179.942352][   T13] usb 7-1: Product: syz
[  179.974938][   T13] usb 7-1: Manufacturer: syz
[  180.035476][   T13] cdc_wdm 7-1:1.0: skipping garbage
[  180.050544][   T13] cdc_wdm 7-1:1.0: skipping garbage
[  180.075675][   T13] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  180.082617][   T13] cdc_wdm 7-1:1.0: Unknown control protocol
[  180.308876][ T7377] loop0: detected capacity change from 0 to 256
[  180.387750][ T7377] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d)
[  180.405388][   T13] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  180.544444][    T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  180.645533][   T13] usb 2-1: Using ep0 maxpacket: 32
[  180.694782][ T7384] loop4: detected capacity change from 0 to 4096
[  180.736902][ T7384] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  180.765621][   T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.784607][    T7] usb 4-1: Using ep0 maxpacket: 32
[  180.801881][   T13] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  180.822552][ T7384] ntfs: volume version 3.1.
[  180.849899][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.897801][   T13] usb 2-1: config 0 descriptor??
[  180.904761][    T7] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  180.909202][ T6524] usb 7-1: USB disconnect, device number 2
[  180.913500][    T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.913537][    T7] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  180.920757][ T7384] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp775.  You might want to try to use the mount option nls=utf8.
[  180.962541][   T13] dw2102: su3000_identify_state
[  180.967569][ T7384] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  181.014393][   T13] dvb-usb: found a 'TeVii S662' in warm state.
[  181.020624][   T13] dw2102: su3000_power_ctrl: 1, initialized 0
[  181.053970][   T13] dvb-usb: bulk message failed: -22 (2/0)
[  181.116907][   T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  181.137413][ T7365] dvb-usb: bulk message failed: -22 (4/0)
[  181.143229][ T7365] dw2102: i2c transfer failed.
[  181.194813][   T13] dvbdev: DVB: registering new adapter (TeVii S662)
[  181.208619][    T7] usb 4-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=b1.bd
[  181.219187][   T13] usb 2-1: media controller created
[  181.238251][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.249697][   T13] dvb-usb: bulk message failed: -22 (6/0)
[  181.264158][   T13] dw2102: i2c transfer failed.
[  181.274113][    T7] usb 4-1: Product: syz
[  181.281241][   T13] dvb-usb: bulk message failed: -22 (6/0)
[  181.302810][    T7] usb 4-1: Manufacturer: syz
[  181.318885][   T13] dw2102: i2c transfer failed.
[  181.323762][   T13] dvb-usb: bulk message failed: -22 (6/0)
[  181.329649][    T7] usb 4-1: SerialNumber: syz
[  181.347991][    T7] usb 4-1: config 0 descriptor??
[  181.373345][   T13] dw2102: i2c transfer failed.
[  181.378630][   T13] dvb-usb: bulk message failed: -22 (6/0)
[  181.389541][   T13] dw2102: i2c transfer failed.
[  181.406728][   T13] dvb-usb: bulk message failed: -22 (6/0)
[  181.412541][   T13] dw2102: i2c transfer failed.
[  181.425593][    T7] rndis_wlan 4-1:0.0: skipping garbage
[  181.431230][    T7] usb 4-1: bad CDC descriptors
[  181.443238][    T7] rndis_host 4-1:0.0: skipping garbage
[  181.483462][   T13] dvb-usb: bulk message failed: -22 (6/0)
[  181.500305][    T7] usb 4-1: bad CDC descriptors
[  181.507929][   T13] dw2102: i2c transfer failed.
[  181.514040][   T13] dvb-usb: MAC address: 02:02:02:02:02:02
[  181.520797][    T7] cdc_acm 4-1:0.0: skipping garbage
[  181.528959][ T7388] loop0: detected capacity change from 0 to 32768
[  181.544868][    T7] cdc_acm 4-1:0.0: Control and data interfaces are not separated!
[  181.555618][    T7] cdc_acm 4-1:0.0: This needs exactly 3 endpoints
[  181.576252][   T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  181.590705][ T7388] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.893 (7388)
[  181.612490][    T7] cdc_acm: probe of 4-1:0.0 failed with error -22
[  181.628632][ T7374] netlink: 27 bytes leftover after parsing attributes in process `syz.3.889'.
[  181.694996][    T7] usb 4-1: USB disconnect, device number 9
[  181.702158][   T13] dvb-usb: bulk message failed: -22 (3/0)
[  181.743576][   T13] dw2102: command 0x0e transfer failed.
[  181.762277][   T13] dvb-usb: bulk message failed: -22 (3/0)
[  181.792578][   T13] dw2102: command 0x0e transfer failed.
[  181.929010][ T7388] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  181.994475][ T7388] BTRFS info (device loop0): using free space tree
[  182.021842][ T7388] BTRFS info (device loop0): has skinny extents
[  182.125789][   T13] dvb-usb: bulk message failed: -22 (3/0)
[  182.131667][   T13] dw2102: command 0x0e transfer failed.
[  182.163882][   T13] dvb-usb: bulk message failed: -22 (3/0)
[  182.202911][   T13] dw2102: command 0x0e transfer failed.
[  182.233662][   T13] dvb-usb: bulk message failed: -22 (1/0)
[  182.281702][   T13] dw2102: command 0x51 transfer failed.
[  182.364357][   T13] dvb-usb: bulk message failed: -22 (5/0)
[  182.370153][   T13] dw2102: i2c probe for address 0x68 failed.
[  182.398426][ T7388] BTRFS info (device loop0): enabling ssd optimizations
[  182.407447][   T13] dvb-usb: bulk message failed: -22 (5/0)
[  182.419812][   T13] dw2102: i2c probe for address 0x69 failed.
[  182.440558][   T13] dvb-usb: bulk message failed: -22 (5/0)
[  182.460191][   T13] dw2102: i2c probe for address 0x6a failed.
[  182.480961][   T13] dw2102: probing for demodulator failed. Is the external power switched on?
[  182.528337][   T13] dvb-usb: no frontend was attached by 'TeVii S662'
[  182.673557][ T7397] loop4: detected capacity change from 0 to 40427
[  182.741684][ T7448] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  182.803797][ T7445] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  182.824259][   T13] rc_core: IR keymap rc-tt-1500 not found
[  182.830218][   T13] Registered IR keymap rc-empty
[  182.862469][   T13] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  182.884377][ T7397] F2FS-fs (loop4): invalid crc value
[  182.907222][ T7397] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  182.929595][   T13] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input16
[  183.001202][   T13] dvb-usb: schedule remote query interval to 250 msecs.
[  183.039164][   T13] dw2102: su3000_power_ctrl: 0, initialized 1
[  183.093473][   T13] dvb-usb: TeVii S662 successfully initialized and connected.
[  183.174804][   T13] usb 2-1: USB disconnect, device number 16
[  183.312863][ T7397] F2FS-fs (loop4): Start checkpoint disabled!
[  183.363801][ T7397] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  183.507794][ T7397] attempt to access beyond end of device
[  183.507794][ T7397] loop4: rw=10241, want=45104, limit=40427
[  183.675129][ T4612] attempt to access beyond end of device
[  183.675129][ T4612] loop4: rw=2049, want=45112, limit=40427
[  183.798239][   T13] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  183.941123][ T7471] loop8: detected capacity change from 0 to 1
[  183.968446][ T4419] Dev loop8: unable to read RDB block 1
[  183.975628][ T4419]  loop8: unable to read partition table
[  184.014941][ T4419] loop8: partition table beyond EOD, truncated
[  184.062534][ T7471] Dev loop8: unable to read RDB block 1
[  184.073161][ T7471]  loop8: unable to read partition table
[  184.088258][ T7471] loop8: partition table beyond EOD, truncated
[  184.109281][ T7471] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  184.194505][   T13] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  184.298157][ T7486] loop0: detected capacity change from 0 to 64
[  184.382801][ T7486] hfs: keylen 1794 too large
[  184.411056][ T7486] hfs: keylen 1794 too large
[  184.435848][ T7486] hfs: keylen 1794 too large
[  184.444463][   T13] usb 2-1: Using ep0 maxpacket: 16
[  184.542359][  T154] hfs: keylen 1794 too large
[  184.745663][   T13] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  184.766139][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.774182][   T13] usb 2-1: Product: syz
[  184.808532][   T13] usb 2-1: Manufacturer: syz
[  184.813237][   T13] usb 2-1: SerialNumber: syz
[  184.848501][   T13] usb 2-1: config 0 descriptor??
[  184.885505][   T13] ums-onetouch 2-1:0.0: USB Mass Storage device detected
[  185.182647][ T7496] loop4: detected capacity change from 0 to 32768
[  185.265595][ T7496] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  185.286228][   T23] usb 2-1: USB disconnect, device number 17
[  185.477948][ T4191] ocfs2: Unmounting device (7,4) on (node local)
[  185.649381][ T7501] loop3: detected capacity change from 0 to 32768
[  185.793189][ T7501] read_mapping_page failed!
[  185.808132][ T7501] ialloc: diAlloc returned -5!
[  186.064541][   T23] Bluetooth: hci0: command 0x0406 tx timeout
[  186.074289][   T23] Bluetooth: hci2: command 0x0406 tx timeout
[  186.129733][   T23] Bluetooth: hci3: command 0x0406 tx timeout
[  186.164298][   T23] Bluetooth: hci1: command 0x0406 tx timeout
[  186.183229][ T7540] input: syz0 as /devices/virtual/input/input17
[  186.583868][ T7556] loop8: detected capacity change from 0 to 1
[  186.676518][ T7556] Dev loop8: unable to read RDB block 1
[  186.709319][ T7556]  loop8: unable to read partition table
[  186.742418][ T7556] loop8: partition table beyond EOD, truncated
[  186.775302][ T7556] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  187.041105][ T7495] ODEBUG: Out of memory. ODEBUG disabled
[  187.250516][ T7572] loop3: detected capacity change from 0 to 128
[  187.368989][ T7572] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  187.400552][ T7572] hpfs: filesystem error: improperly stopped
[  187.412943][ T7572] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  187.485434][ T7572] hpfs: You really don't want any checks? You are crazy...
[  187.493240][ T7572] hpfs: hpfs_map_sector(): read error
[  187.504350][ T7572] hpfs: code page support is disabled
[  187.509815][ T7572] hpfs: hpfs_map_4sectors(): unaligned read
[  187.565422][ T7572] hpfs: hpfs_map_4sectors(): unaligned read
[  187.571370][ T7572] hpfs: filesystem error: unable to find root dir
[  188.183996][ T7611] netlink: 104 bytes leftover after parsing attributes in process `syz.0.939'.
[  188.686159][ T7626] netlink: 'syz.0.954': attribute type 12 has an invalid length.
[  188.693940][ T7626] netlink: 'syz.0.954': attribute type 29 has an invalid length.
[  188.743529][ T7626] netlink: 148 bytes leftover after parsing attributes in process `syz.0.954'.
[  188.804495][ T7631] netlink: 'syz.0.954': attribute type 12 has an invalid length.
[  188.817995][ T7631] netlink: 'syz.0.954': attribute type 29 has an invalid length.
[  188.878063][ T7631] netlink: 148 bytes leftover after parsing attributes in process `syz.0.954'.
[  188.889255][ T7637] loop4: detected capacity change from 0 to 64
[  188.997851][ T7637] hfs: keylen 1794 too large
[  189.018560][ T7637] hfs: keylen 1794 too large
[  189.061766][ T7640] loop2: detected capacity change from 0 to 7
[  189.064179][ T7637] hfs: keylen 1794 too large
[  189.085168][ T7640] Dev loop2: unable to read RDB block 7
[  189.154394][ T7640]  loop2: AHDI p1 p2 p3 p4
[  189.179399][ T7640] loop2: partition table partially beyond EOD, truncated
[  189.229021][  T154] hfs: keylen 1794 too large
[  189.265966][ T7640] loop2: p1 start 1601398130 is beyond EOD, truncated
[  189.274425][ T7640] loop2: p2 start 1702059890 is beyond EOD, truncated
[  189.305893][ T7640] loop2: p3 size 150995200 extends beyond EOD, truncated
[  189.507802][ T4419] udevd[4419]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  190.017089][ T7643] loop0: detected capacity change from 0 to 40427
[  190.156466][ T7643] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  190.163556][ T7643] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  190.248512][ T7495] Set syz1 is full, maxelem 65536 reached
[  190.253909][ T7643] F2FS-fs (loop0): invalid crc value
[  190.292434][ T7658] loop6: detected capacity change from 0 to 22
[  190.300512][ T7643] F2FS-fs (loop0): Found nat_bits in checkpoint
[  190.344841][ T7658] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  190.382043][ T7658] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  190.411824][ T7662] netlink: 40 bytes leftover after parsing attributes in process `syz.4.951'.
[  190.477492][ T7643] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  190.505013][ T7643] F2FS-fs (loop0): Start checkpoint disabled!
[  190.530696][ T7643] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  190.566800][ T7643] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  190.604788][ T7668] loop4: detected capacity change from 0 to 4096
[  190.664931][ T7668] EXT4-fs (loop4): Test dummy encryption mode enabled
[  190.680731][ T7668] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  190.722834][ T7668] EXT4-fs (loop4): Test dummy encryption mode enabled
[  190.737275][ T7670] loop6: detected capacity change from 0 to 512
[  190.781815][ T7668] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[  190.808252][ T7668] System zones: 0-5
[  190.821382][ T7668] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000400,journal_ioprio=0x0000000000000004,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,nomblk_io_submit,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback.
[  190.900946][ T7670] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  190.914487][ T7670] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  191.124748][    T9] attempt to access beyond end of device
[  191.124748][    T9] loop0: rw=2049, want=40984, limit=40427
[  191.323232][ T7678] netlink: 'syz.3.961': attribute type 12 has an invalid length.
[  191.395164][ T7678] netlink: 'syz.3.961': attribute type 29 has an invalid length.
[  191.433583][ T7678] netlink: 148 bytes leftover after parsing attributes in process `syz.3.961'.
[  191.469091][ T7679] netlink: 'syz.3.961': attribute type 12 has an invalid length.
[  191.509872][ T7679] netlink: 'syz.3.961': attribute type 29 has an invalid length.
[  191.530379][ T7679] netlink: 148 bytes leftover after parsing attributes in process `syz.3.961'.
[  192.131532][ T7691] loop6: detected capacity change from 0 to 64
[  192.208961][ T7691] hfs: keylen 1794 too large
[  192.224150][ T7691] hfs: keylen 1794 too large
[  192.245931][ T7691] hfs: keylen 1794 too large
[  192.298255][ T7695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.978'.
[  192.306208][ T3005] hfs: keylen 1794 too large
[  192.354424][    T7] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  192.559246][ T4411] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  192.721071][ T7689] loop3: detected capacity change from 0 to 40427
[  192.747491][ T7689] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  192.772363][ T7689] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  192.826335][ T7689] F2FS-fs (loop3): Found nat_bits in checkpoint
[  192.875931][    T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  192.894509][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.912974][    T7] usb 1-1: Product: syz
[  192.923018][    T7] usb 1-1: Manufacturer: syz
[  192.927986][    T7] usb 1-1: SerialNumber: syz
[  192.935656][ T4411] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  192.950518][ T4411] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  192.976546][ T7689] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  192.983785][ T7689] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  193.005234][    T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  193.134583][ T4411] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  193.144088][ T4190] attempt to access beyond end of device
[  193.144088][ T4190] loop3: rw=2049, want=45104, limit=40427
[  193.157008][ T4411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.165530][ T4411] usb 5-1: Product: syz
[  193.170066][ T4411] usb 5-1: Manufacturer: syz
[  193.175108][ T4411] usb 5-1: SerialNumber: syz
[  193.191900][ T4411] usb 5-1: config 0 descriptor??
[  193.224690][ T7697] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  193.245460][ T7697] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  193.471330][ T7697] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  193.489154][ T7697] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  193.594560][    T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  194.019314][ T1323] usb 1-1: USB disconnect, device number 19
[  194.236430][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  194.242795][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  194.404441][ T4411] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL
[  194.422057][ T4411] usb 5-1: USB disconnect, device number 15
[  194.557335][ T7709] loop6: detected capacity change from 0 to 256
[  194.586051][ T7713] loop0: detected capacity change from 0 to 22
[  194.625131][ T7713] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  194.658306][ T7713] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  194.765646][ T6680] FAT-fs (loop6): error, corrupted directory (invalid entries)
[  194.798476][ T6680] FAT-fs (loop6): error, corrupted directory (invalid entries)
[  194.865275][    T7] usb 1-1: Service connection timeout for: 256
[  194.879021][    T7] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[  194.920595][ T7722] loop3: detected capacity change from 0 to 164
[  194.928848][    T7] ath9k_htc: Failed to initialize the device
[  194.950950][ T1323] usb 1-1: ath9k_htc: USB layer deinitialized
[  195.013630][ T7722] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  195.073812][ T7722] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  195.296384][ T4308] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.386750][ T4308] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.452990][ T7730] loop3: detected capacity change from 0 to 4096
[  195.470666][ T4308] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.527523][ T7720] loop0: detected capacity change from 0 to 32768
[  195.601949][ T4308] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.625825][ T7720] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  195.626414][ T7730] ntfs: volume version 3.1.
[  195.705467][ T7720] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  195.967293][ T7720] overlayfs: upper fs does not support tmpfile.
[  196.007140][ T7720] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  196.025691][ T7720] overlayfs: failed to set xattr on upper
[  196.044359][ T7720] overlayfs: ...falling back to index=off,metacopy=off.
[  196.114882][ T7720] overlayfs: upper fs missing required features.
[  196.176505][ T7752] netlink: 96 bytes leftover after parsing attributes in process `syz.1.993'.
[  196.206495][ T4308] tipc: Left network mode
[  196.378815][ T4182] ocfs2: Unmounting device (7,0) on (node local)
[  196.412792][ T7732] loop4: detected capacity change from 0 to 32768
[  196.444565][ T7761] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  196.560127][ T7738] chnl_net:caif_netlink_parms(): no params data found
[  196.585045][ T7732] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.985 (7732)
[  196.653827][ T7732] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  196.704324][ T7732] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  196.769915][ T7732] BTRFS info (device loop4): use zstd compression, level 3
[  196.803180][ T7732] BTRFS info (device loop4): using free space tree
[  196.850661][ T7732] BTRFS info (device loop4): has skinny extents
[  196.911421][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.929332][ T7778] loop0: detected capacity change from 0 to 164
[  196.950988][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.961074][ T7738] device bridge_slave_0 entered promiscuous mode
[  196.970404][ T7738] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.977904][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.988005][ T7738] device bridge_slave_1 entered promiscuous mode
[  197.103476][ T7738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.114779][    T7] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  197.115932][ T7738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.197077][ T7738] team0: Port device team_slave_0 added
[  197.268987][ T7738] team0: Port device team_slave_1 added
[  197.287765][ T7732] BTRFS info (device loop4): enabling ssd optimizations
[  197.450523][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.472537][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.514661][    T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.535722][    T7] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x77, skipping
[  197.564252][    T7] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  197.586619][ T7738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.604136][    T7] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  197.631201][ T7738] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.655981][ T7738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.730408][ T7738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.887363][    T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  197.903386][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.925943][    T7] usb 2-1: Product: syz
[  197.933536][    T7] usb 2-1: Manufacturer: syz
[  197.937042][ T4414] Bluetooth: hci4: command 0x0409 tx timeout
[  197.952052][    T7] usb 2-1: SerialNumber: syz
[  198.061681][ T7738] device hsr_slave_0 entered promiscuous mode
[  198.107014][ T7738] device hsr_slave_1 entered promiscuous mode
[  198.125031][ T7738] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.144140][ T7738] Cannot create hsr debugfs directory
[  198.324035][ T7827] loop0: detected capacity change from 0 to 1024
[  198.428616][ T7827] EXT4-fs (loop0): Ignoring removed nobh option
[  198.456500][ T7827] EXT4-fs (loop0): Ignoring removed bh option
[  198.462653][ T7827] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  198.474327][ T5555] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  198.512576][ T4308] device hsr_slave_0 left promiscuous mode
[  198.528924][ T4308] device hsr_slave_1 left promiscuous mode
[  198.536156][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.543634][ T4308] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.570197][ T7827] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,nombcache,barrier,dioread_lock,stripe=0x0000000000000008,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[  198.605422][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.612887][ T4308] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.641811][ T4308] device bridge_slave_1 left promiscuous mode
[  198.654570][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.663194][ T4308] device bridge_slave_0 left promiscuous mode
[  198.669709][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.694484][ T4308] device veth1_macvtap left promiscuous mode
[  198.700715][ T4308] device veth0_macvtap left promiscuous mode
[  198.715997][ T7827] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.1007: Allocating blocks 497-513 which overlap fs metadata
[  198.723481][ T4308] device veth1_vlan left promiscuous mode
[  198.730254][ T5555] usb 4-1: Using ep0 maxpacket: 8
[  198.741261][ T4308] device veth0_vlan left promiscuous mode
[  198.802587][ T7826] EXT4-fs (loop0): pa ffff88806058d460: logic 131328, phys. 465, len 3
[  198.811107][ T7826] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1
[  198.854526][ T5555] usb 4-1: config 0 has no interfaces?
[  198.860574][ T5555] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  198.871035][ T5555] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.904997][ T5555] usb 4-1: config 0 descriptor??
[  199.039621][ T4308] team0 (unregistering): Port device team_slave_1 removed
[  199.090725][ T4308] team0 (unregistering): Port device team_slave_0 removed
[  199.105175][ T4308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.121572][ T4308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.135612][    T7] cdc_ncm 2-1:1.0: bind() failure
[  199.149765][ T1111] usb 4-1: USB disconnect, device number 10
[  199.166451][    T7] cdc_ncm: probe of 2-1:1.1 failed with error -71
[  199.196459][    T7] cdc_mbim: probe of 2-1:1.1 failed with error -71
[  199.224812][    T7] usbtest: probe of 2-1:1.1 failed with error -71
[  199.234397][    T7] usb 2-1: USB disconnect, device number 18
[  199.252869][ T4308] bond0 (unregistering): Released all slaves
[  199.326289][ T7844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1009'.
[  199.341996][ T7844] bond0: ARP target 170.170.170.170 is already present
[  199.354922][ T7844] bond0: option arp_ip_target: invalid value (2863311530)
[  199.514741][ T7738] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  199.541728][ T7738] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  199.560113][ T7738] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  199.577404][ T7738] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  199.834652][ T7738] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.883244][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  199.906323][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  199.931137][ T7738] 8021q: adding VLAN 0 to HW filter on device team0
[  199.942193][ T7880] loop0: detected capacity change from 0 to 512
[  199.989316][   T23] Bluetooth: hci4: command 0x041b tx timeout
[  200.064435][ T5555] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  200.107072][ T7880] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1016: inode has both inline data and extents flags
[  200.123463][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  200.184834][ T7880] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1016: couldn't read orphan inode 15 (err -117)
[  200.215032][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  200.264411][ T7880] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  200.286463][ T7879] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.293562][ T7879] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.423660][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  200.460705][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  200.474680][ T5555] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  200.495104][ T5555] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  200.516094][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  200.540508][ T5555] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping
[  200.558506][ T7879] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.565743][ T7879] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.610621][ T5555] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  200.650537][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  200.730210][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  200.738581][ T5555] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  200.758020][ T5555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  200.767765][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  200.802036][ T5555] usb 2-1: SerialNumber: syz
[  200.816833][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  200.856798][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  200.882937][ T7882] loop3: detected capacity change from 0 to 131072
[  200.889230][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  200.907830][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  200.921242][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  200.936765][ T7882] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  200.944970][ T7882] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  200.977144][    T7] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  200.990104][ T7882] F2FS-fs (loop3): invalid crc value
[  201.009701][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  201.030513][ T7882] F2FS-fs (loop3): Found nat_bits in checkpoint
[  201.102483][ T7882] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  201.109755][ T7882] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  201.134133][ T7738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  201.147731][ T5555] usb 2-1: 0:2 : does not exist
[  201.152671][ T5555] usb 2-1: unit 5 not found!
[  201.227421][ T7738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  201.233935][ T5555] usb 2-1: USB disconnect, device number 19
[  201.260548][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  201.275402][    T7] usb 5-1: Using ep0 maxpacket: 8
[  201.286909][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  201.475350][ T4419] udevd[4419]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  201.604764][    T7] usb 5-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01
[  201.613873][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.654239][    T7] usb 5-1: Product: syz
[  201.665790][    T7] usb 5-1: Manufacturer: syz
[  201.670431][    T7] usb 5-1: SerialNumber: syz
[  201.720370][    T7] usb 5-1: config 0 descriptor??
[  201.742668][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  201.762762][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  201.778426][    T7] go7007: probe of 5-1:0.0 failed with error -12
[  201.829761][ T7738] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.982595][ T4411] usb 5-1: USB disconnect, device number 16
[  202.064742][ T1111] Bluetooth: hci4: command 0x040f tx timeout
[  202.158640][ T7895] loop0: detected capacity change from 0 to 40427
[  202.199586][ T7895] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  202.247248][ T7895] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  202.323092][ T7895] F2FS-fs (loop0): invalid crc value
[  202.367067][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  202.390033][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  202.401631][ T7895] F2FS-fs (loop0): Found nat_bits in checkpoint
[  202.480679][ T7738] device veth0_vlan entered promiscuous mode
[  202.495471][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  202.530626][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  202.570965][ T7895] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  202.594596][ T7895] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  202.602490][ T7738] device veth1_vlan entered promiscuous mode
[  202.669514][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  202.693913][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  202.806311][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  202.845181][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  202.891446][ T7738] device veth0_macvtap entered promiscuous mode
[  202.933196][ T7738] device veth1_macvtap entered promiscuous mode
[  203.037736][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.074228][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.124540][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.151226][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.163195][ T7945] loop3: detected capacity change from 0 to 64
[  203.193905][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.233617][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.259490][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.305013][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.336205][ T7738] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.345244][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  203.370383][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  203.381257][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  203.401452][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  203.453432][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.507542][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.553013][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.574240][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.610404][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.641579][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.662005][ T7738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.694258][ T7738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.715595][ T7738] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.743984][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  203.767751][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  203.804512][   T13] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  203.858553][ T7738] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.888133][ T7738] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.913819][ T7738] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.950153][ T7738] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.095264][   T13] usb 5-1: Using ep0 maxpacket: 32
[  204.144412][ T1111] Bluetooth: hci4: command 0x0419 tx timeout
[  204.180366][ T7977] loop3: detected capacity change from 0 to 2048
[  204.194817][ T7879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.203173][ T7879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.293203][ T7977] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  204.318222][ T7977] UDF-fs: Scanning with blocksize 512 failed
[  204.334409][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  204.366627][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.384946][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.414720][   T13] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  204.426510][ T7977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  204.440601][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  204.454279][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.497120][   T13] usb 5-1: Product: syz
[  204.501339][   T13] usb 5-1: Manufacturer: syz
[  204.526841][   T13] usb 5-1: SerialNumber: syz
[  204.555423][   T13] usb 5-1: config 0 descriptor??
[  205.030986][   T13] airspy 5-1:0.0: Board ID: 00
[  205.036197][   T13] airspy 5-1:0.0: Firmware version: 
[  205.242560][ T5555] kernel read not supported for file /dsp (pid: 5555 comm: kworker/1:16)
[  205.489850][ T8024] loop0: detected capacity change from 0 to 2048
[  205.649832][ T8024] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5
[  205.649832][ T8024] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  205.649832][ T8024] 
[  205.695423][   T13] airspy 5-1:0.0: usb_control_msg() failed -71 request 12
[  205.717220][   T13] airspy 5-1:0.0: Registered as swradio24
[  205.737697][   T13] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  205.814472][   T13] usb 5-1: USB disconnect, device number 17
[  205.859193][ T8024] EXT4-fs (loop0): Ignoring removed bh option
[  205.972192][ T8024] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,nouser_xattr,grpjquota=,jqfmt=vfsold,usrquota,bh,noinit_itable,,errors=continue. Quota mode: writeback.
[  206.011685][ T8024] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.046976][ T7996] loop3: detected capacity change from 0 to 32768
[  206.124389][ T8024] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1050: bg 0: block 345: padding at end of block bitmap is not set
[  206.299550][ T8024] fs-verity (loop0, inode 13): Error -117 writing Merkle tree block 0
[  206.318140][ T7996] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  206.374418][ T8024] fs-verity (loop0, inode 13): Error -117 building Merkle tree
[  206.681795][ T8061] device syzkaller1 entered promiscuous mode
[  206.723766][ T8065] loop4: detected capacity change from 0 to 512
[  206.748750][ T4190] ocfs2: Unmounting device (7,3) on (node local)
[  206.797949][ T8065] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13
[  206.879800][ T8065] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #13: comm syz.4.1063: iget: bad i_size value: 12154757448730
[  206.917248][ T8065] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1063: couldn't read orphan inode 13 (err -117)
[  206.951842][ T8065] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,stripe=0x000000000000ffff,sysvgroups,jqfmt=vfsold,nouid32,grpjquota=.,errors=continue. Quota mode: writeback.
[  207.036284][ T8065] EXT4-fs (loop4): shut down requested (1)
[  207.078469][ T8076] loop0: detected capacity change from 0 to 256
[  207.437514][ T8095] loop3: detected capacity change from 0 to 256
[  207.617315][ T8095] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104f4, chksum : 0x5f17efa6, utbl_chksum : 0xe619d30d)
[  207.714577][ T8103] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1084'.
[  208.062934][ T8118] device batadv_slave_1 entered promiscuous mode
[  208.071248][ T8116] device batadv_slave_1 left promiscuous mode
[  208.081385][ T8119] loop0: detected capacity change from 0 to 1024
[  208.138807][ T8114] loop4: detected capacity change from 0 to 4096
[  208.209789][ T8114] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  208.507345][ T8134] loop0: detected capacity change from 0 to 128
[  208.513922][ T8081] loop7: detected capacity change from 0 to 40427
[  208.523876][ T4612] ntfs3: loop4: ino=1b, Internal error
[  208.542655][ T4612] ntfs3: loop4: ntfs3_write_inode r=1b failed, -22.
[  208.586872][ T4191] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22.
[  208.595773][ T4191] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22.
[  208.636321][ T4191] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  208.870749][ T8146] loop7: detected capacity change from 0 to 1024
[  208.994403][ T4253] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  209.234393][ T4253] usb 1-1: Using ep0 maxpacket: 8
[  209.354553][ T4253] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  209.377037][ T4253] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  209.388000][ T4253] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  209.431935][ T4253] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  209.450062][ T4253] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  209.477257][ T4253] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  209.487358][ T4253] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.512963][ T8180] loop3: detected capacity change from 0 to 64
[  209.686139][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1102'.
[  209.696484][ T4411] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[  209.774358][ T4253] usb 1-1: usb_control_msg returned -32
[  209.780076][ T4253] usbtmc 1-1:16.0: can't read capabilities
[  210.095610][ T4411] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  210.105366][ T4411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.121039][ T4411] usb 5-1: config 0 descriptor??
[  210.642036][ T8223] loop3: detected capacity change from 0 to 4096
[  210.653506][ T8229] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1120'.
[  210.716901][ T8229] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1120'.
[  210.742080][ T8223] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  210.785679][ T8223] ntfs3: loop3: Failed to load $MFT.
[  210.890884][ T8234] program syz.7.1121 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  211.208266][ T8245] loop3: detected capacity change from 0 to 2048
[  211.244517][ T4411] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  211.261625][ T4411] asix: probe of 5-1:0.0 failed with error -71
[  211.281951][ T8245]  loop3: p1 < > p2 < > p3 p4
[  211.286808][ T8245] loop3: partition table partially beyond EOD, truncated
[  211.302298][ T4411] usb 5-1: USB disconnect, device number 18
[  211.316164][ T8245] loop3: p1 start 2305 is beyond EOD, truncated
[  211.322514][ T8245] loop3: p2 start 4294902784 is beyond EOD, truncated
[  211.336146][ T8245] loop3: p3 start 3724543488 is beyond EOD, truncated
[  211.359428][ T8245] loop3: p4 size 8192 extends beyond EOD, truncated
[  211.479732][ T4419] udevd[4419]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  211.586090][ T8259] loop7: detected capacity change from 0 to 64
[  211.638085][ T8259] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing
[  211.713692][ T4253] usb 1-1: USB disconnect, device number 20
[  211.890082][ T8273] 9pnet: p9_errstr2errno: server reported unknown error �@�0x0000000000000004
[  212.459217][ T8276] loop7: detected capacity change from 0 to 32768
[  212.686640][ T8302] netlink: 'syz.4.1153': attribute type 11 has an invalid length.
[  212.763029][ T8267] loop0: detected capacity change from 0 to 40427
[  212.797045][ T8267] F2FS-fs (loop0): invalid crc value
[  212.834243][ T8267] F2FS-fs (loop0): Found nat_bits in checkpoint
[  213.029347][ T8267] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  213.037107][ T4411] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  213.147979][ T8267] attempt to access beyond end of device
[  213.147979][ T8267] loop0: rw=2049, want=77960, limit=40427
[  213.232396][ T4182] attempt to access beyond end of device
[  213.232396][ T4182] loop0: rw=2049, want=45104, limit=40427
[  213.389091][ T8326] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  213.458717][ T4411] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  213.474628][ T4411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.498635][ T4411] usb 4-1: config 0 descriptor??
[  213.557251][ T4411] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  213.591089][ T8333] devpts: called with bogus options
[  213.652230][ T8335] loop4: detected capacity change from 0 to 256
[  213.677031][ T8337] loop7: detected capacity change from 0 to 128
[  213.753553][ T8335] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  213.780450][ T4411] gp8psk: usb in 128 operation failed.
[  213.796582][ T8335] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  213.848005][ T8335] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  213.931366][ T8335] exFAT-fs (loop4): hint_cluster is invalid (17)
[  214.045572][ T4411] gp8psk: usb in 146 operation failed.
[  214.061407][ T4411] gp8psk: failed to get FW version
[  214.324748][ T4411] gp8psk: usb in 149 operation failed.
[  214.330266][ T4411] gp8psk: failed to get FPGA version
[  214.385774][ T4411] gp8psk: usb in 138 operation failed.
[  214.394284][ T4411] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  214.429194][ T8359] loop4: detected capacity change from 0 to 1024
[  214.443696][ T4411] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  214.520296][ T4411] usb 4-1: USB disconnect, device number 11
[  214.557876][ T8359] attempt to access beyond end of device
[  214.557876][ T8359] loop4: rw=0, want=5780, limit=1024
[  214.614611][   T26] audit: type=1800 audit(1761756713.533:26): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1178" name="file1" dev="loop4" ino=20 res=0 errno=0
[  214.663316][ T8359] Buffer I/O error on dev loop4, logical block 2889, async page read
[  214.745122][ T8359] attempt to access beyond end of device
[  214.745122][ T8359] loop4: rw=0, want=5780, limit=1024
[  214.774430][ T8359] Buffer I/O error on dev loop4, logical block 2889, async page read
[  214.803362][ T8359] attempt to access beyond end of device
[  214.803362][ T8359] loop4: rw=0, want=5780, limit=1024
[  214.847278][ T8359] Buffer I/O error on dev loop4, logical block 2889, async page read
[  214.867650][ T8361] attempt to access beyond end of device
[  214.867650][ T8361] loop4: rw=0, want=5780, limit=1024
[  215.174222][    C1] sched: RT throttling activated
[  215.199332][ T8367] loop0: detected capacity change from 0 to 32768
[  215.424372][ T4224] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  215.456390][ T4300] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0
[  215.463839][ T4300] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0
[  215.524666][ T4300] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0
[  215.552979][ T4300] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0
[  215.575865][ T4300] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0
[  215.593724][ T4300] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0
[  215.611231][ T8381] loop0: detected capacity change from 0 to 128
[  215.614117][ T4300] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0
[  215.649963][ T4300] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0
[  215.673359][ T4300] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0
[  215.681230][ T4224] usb 8-1: Using ep0 maxpacket: 16
[  215.694739][   T13] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  215.701645][ T4300] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x0
[  215.702559][ T8381] EXT4-fs (loop0): Ignoring removed nobh option
[  215.746794][ T4300] hid-generic 00A0:0008:0003.000A: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  215.799420][ T8381] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000001,,errors=continue. Quota mode: none.
[  215.817682][ T4224] usb 8-1: config 0 interface 0 has no altsetting 0
[  215.824837][ T4224] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  215.833961][ T4224] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.847240][ T8381] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  215.859517][ T4224] usb 8-1: config 0 descriptor??
[  216.084700][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.146938][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.187175][   T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  216.232717][   T13] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  216.253676][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.274875][   T13] usb 4-1: config 0 descriptor??
[  216.347305][ T4224] hid (null): report_id 3899690137 is invalid
[  216.364972][ T4224] hid (null): report_id 1862125167 is invalid
[  216.413560][ T8412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  216.563475][    T7] usb 8-1: USB disconnect, device number 2
[  216.720000][ T8414] loop4: detected capacity change from 0 to 40427
[  216.726940][ T5555] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  216.748090][   T13] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  216.763899][   T13] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  216.780614][ T8414] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  216.788611][ T8414] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  216.824784][ T8414] F2FS-fs (loop4): invalid crc value
[  216.856303][ T8414] F2FS-fs (loop4): Found nat_bits in checkpoint
[  216.899932][ T8414] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  216.907240][ T8414] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  216.974385][ T5555] usb 1-1: Using ep0 maxpacket: 16
[  217.039328][   T13] usb 4-1: USB disconnect, device number 12
[  217.094627][ T5555] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  217.112952][ T5555] usb 1-1: config 0 has no interface number 0
[  217.274721][ T5555] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  217.283929][ T5555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.300920][ T5555] usb 1-1: Product: syz
[  217.305728][ T5555] usb 1-1: Manufacturer: syz
[  217.310351][ T5555] usb 1-1: SerialNumber: syz
[  217.320331][ T5555] usb 1-1: config 0 descriptor??
[  217.367469][ T5555] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  217.745664][ T8446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1202'.
[  217.823860][ T8448] loop4: detected capacity change from 0 to 512
[  217.886755][ T8443] loop7: detected capacity change from 0 to 8192
[  217.935083][ T8443] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal
[  217.947731][ T8443] REISERFS (device loop7): using ordered data mode
[  217.982903][ T8448] EXT4-fs (loop4): Ignoring removed orlov option
[  217.991927][ T8443] reiserfs: using flush barriers
[  218.084516][ T8448] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  218.131882][ T8448] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  218.133706][ T8443] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  218.165165][ T8448] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.1204: corrupted in-inode xattr
[  218.177926][ T8443] REISERFS (device loop7): checking transaction log (loop7)
[  218.185684][ T8448] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1204: couldn't read orphan inode 15 (err -117)
[  218.202224][ T8448] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[  218.224717][ T4300] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  218.292047][ T8443] REISERFS (device loop7): Using r5 hash to sort names
[  218.337362][ T8443] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  218.357139][ T4191] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  218.377450][ T8443] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  218.401064][ T4191] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  218.454432][ T5555] gspca_spca1528: reg_w err -71
[  218.459491][ T5555] spca1528: probe of 1-1:0.1 failed with error -71
[  218.474390][ T4300] usb 4-1: Using ep0 maxpacket: 8
[  218.491665][ T5555] usb 1-1: USB disconnect, device number 21
[  218.594866][ T4191] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  218.616769][ T4300] usb 4-1: config 0 has no interfaces?
[  218.622307][ T4300] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  218.695474][ T4300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.735923][ T4191] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  218.778744][ T4191] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  218.788903][ T4300] usb 4-1: config 0 descriptor??
[  218.832627][ T4191] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  218.884832][ T4191] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  218.941559][ T4191] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  219.002078][ T4191] EXT4-fs error (device loop4): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  219.076360][ T4191] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  219.113992][ T4300] usb 4-1: USB disconnect, device number 13
[  219.341455][ T8495] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  219.786629][ T4308] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.886906][ T4308] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.985910][ T4308] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.047735][ T8499] loop7: detected capacity change from 0 to 40427
[  220.073400][ T8499] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  220.082190][ T8499] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  220.093812][ T8499] F2FS-fs (loop7): invalid crc_offset: 33558524
[  220.112016][ T4308] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.157197][ T8499] F2FS-fs (loop7): Found nat_bits in checkpoint
[  220.320871][ T8499] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  220.344335][ T8499] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  221.067874][ T8510] loop3: detected capacity change from 0 to 32768
[  221.145685][ T8539] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1230'.
[  221.204563][ T8510] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  221.336758][ T8510] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  221.483773][ T8516] chnl_net:caif_netlink_parms(): no params data found
[  221.617971][ T4190] ocfs2: Unmounting device (7,3) on (node local)
[  221.620718][ T8553] loop7: detected capacity change from 0 to 8192
[  221.665413][ T1323] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  221.733388][ T8553] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal
[  221.837507][ T8553] REISERFS (device loop7): using ordered data mode
[  221.844609][ T8553] reiserfs: using flush barriers
[  221.857969][ T4308] device hsr_slave_0 left promiscuous mode
[  221.864625][ T8553] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  221.890936][ T4308] device hsr_slave_1 left promiscuous mode
[  221.911897][ T8553] REISERFS (device loop7): checking transaction log (loop7)
[  221.925222][ T1323] usb 1-1: Using ep0 maxpacket: 16
[  221.932255][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.973327][ T4308] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.986191][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.004035][ T4308] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.025512][ T8553] REISERFS (device loop7): Using r5 hash to sort names
[  222.032707][ T8553] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  222.043064][ T4308] device bridge_slave_1 left promiscuous mode
[  222.052475][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.083391][ T4308] device bridge_slave_0 left promiscuous mode
[  222.103435][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.141999][ T8573] loop3: detected capacity change from 0 to 1024
[  222.163465][ T4308] device veth1_macvtap left promiscuous mode
[  222.179973][ T4308] device veth0_macvtap left promiscuous mode
[  222.211828][ T4308] device veth1_vlan left promiscuous mode
[  222.234584][ T4308] device veth0_vlan left promiscuous mode
[  222.275692][ T1323] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  222.314223][ T1323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.326220][ T8573] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  222.336944][ T1323] usb 1-1: Product: syz
[  222.341134][ T1323] usb 1-1: Manufacturer: syz
[  222.346864][ T8573] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.357738][ T1323] usb 1-1: SerialNumber: syz
[  222.372415][ T8573] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.1239: inode has both inline data and extents flags
[  222.374888][ T1323] usb 1-1: config 0 descriptor??
[  222.437018][ T1323] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  222.457393][ T1323] usb 1-1: Detected FT232H
[  222.537284][ T4190] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /254/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[  222.624303][ T4300] Bluetooth: hci3: command 0x0409 tx timeout
[  222.625266][ T4190] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /254/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  222.664560][ T1323] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  222.712037][ T4190] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[  222.713947][ T8580] loop7: detected capacity change from 0 to 4096
[  222.756763][ T4190] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /254/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  222.781186][ T4190] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[  222.808973][ T4190] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /254/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  222.838127][ T4190] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[  222.862548][ T4190] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /254/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  222.894532][ T4190] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[  222.917407][ T4308] team0 (unregistering): Port device team_slave_1 removed
[  223.017168][ T4308] team0 (unregistering): Port device team_slave_0 removed
[  223.096165][ T4308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  223.151723][ T1323] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  223.172955][ T4308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  223.373731][ T1323] usb 1-1: USB disconnect, device number 22
[  223.463049][ T1323] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  223.494379][ T1323] ftdi_sio 1-1:0.0: device disconnected
[  223.541444][ T4308] bond0 (unregistering): Released all slaves
[  223.559041][ T8588] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1244'.
[  223.656697][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.675916][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.683925][ T8516] device bridge_slave_0 entered promiscuous mode
[  223.742475][ T8588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1244'.
[  223.752827][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.770700][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.780530][ T8516] device bridge_slave_1 entered promiscuous mode
[  223.843024][ T8516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.889031][ T8516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.096521][ T8516] team0: Port device team_slave_0 added
[  224.126020][ T8516] team0: Port device team_slave_1 added
[  224.289693][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.303545][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.369600][ T8516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.407433][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.451430][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.549263][ T8516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.704417][ T1111] Bluetooth: hci3: command 0x041b tx timeout
[  224.726208][ T8516] device hsr_slave_0 entered promiscuous mode
[  224.761751][ T8516] device hsr_slave_1 entered promiscuous mode
[  225.340734][ T8516] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  225.425146][ T8516] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  225.452496][ T8516] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  225.492426][ T8516] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  225.511498][ T8632] loop0: detected capacity change from 0 to 4096
[  225.539470][ T8616] chnl_net:caif_netlink_parms(): no params data found
[  225.572569][ T7738] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22.
[  225.614302][ T7738] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  225.634883][ T8647] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  225.855907][ T8616] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.863167][ T8616] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.872576][ T8616] device bridge_slave_0 entered promiscuous mode
[  225.881367][ T8616] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.888530][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.899006][ T8616] device bridge_slave_1 entered promiscuous mode
[  226.100178][ T8616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.153132][ T8616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.243523][ T8516] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.257969][ T8616] team0: Port device team_slave_0 added
[  226.273644][ T8516] 8021q: adding VLAN 0 to HW filter on device team0
[  226.299702][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  226.321347][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  226.358479][ T8616] team0: Port device team_slave_1 added
[  226.370717][ T8670] loop0: detected capacity change from 0 to 136
[  226.401371][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  226.430727][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  226.453870][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.461135][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.512912][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  226.572056][ T8678] device bridge1 entered promiscuous mode
[  226.668694][ T8678] team0: Port device bridge1 added
[  226.683805][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  226.693560][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  226.707568][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.714722][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.755699][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.762690][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.791399][ T5555] Bluetooth: hci2: command 0x0409 tx timeout
[  226.800963][ T5555] Bluetooth: hci3: command 0x040f tx timeout
[  226.855644][ T8616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.874995][ T8681] bridge0: port 3(team0) entered blocking state
[  226.884003][ T8681] bridge0: port 3(team0) entered disabled state
[  226.897031][ T8681] device team0 entered promiscuous mode
[  226.902704][ T8681] device team_slave_0 entered promiscuous mode
[  226.910869][ T8681] device team_slave_1 entered promiscuous mode
[  226.920034][ T8681] bridge0: port 3(team0) entered blocking state
[  226.926705][ T8681] bridge0: port 3(team0) entered forwarding state
[  226.938682][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  226.958776][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  226.976332][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  227.002079][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  227.016660][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  227.027121][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  227.038689][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.047702][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.077918][ T8616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.093905][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  227.116285][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  227.140175][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  227.148606][ T5555] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  227.248851][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  227.265897][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  227.288380][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  227.307299][ T8616] device hsr_slave_0 entered promiscuous mode
[  227.320218][ T8616] device hsr_slave_1 entered promiscuous mode
[  227.327185][ T8616] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.337362][ T8616] Cannot create hsr debugfs directory
[  227.514649][ T5555] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  227.539356][ T5555] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  227.588155][ T5555] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  227.599708][ T5555] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.634663][ T4188] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  227.645105][ T4188] CPU: 1 PID: 4188 Comm: kworker/u5:3 Not tainted syzkaller #0
[  227.652686][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  227.662765][ T4188] Workqueue: hci4 hci_rx_work
[  227.667495][ T4188] Call Trace:
[  227.670795][ T4188]  <TASK>
[  227.673743][ T4188]  dump_stack_lvl+0x168/0x230
[  227.678456][ T4188]  ? show_regs_print_info+0x20/0x20
[  227.683691][ T4188]  ? load_image+0x3b0/0x3b0
[  227.688240][ T4188]  sysfs_create_dir_ns+0x252/0x280
[  227.693498][ T4188]  ? __lock_acquire+0x7c60/0x7c60
[  227.698570][ T4188]  ? sysfs_warn_dup+0xa0/0xa0
[  227.703409][ T4188]  ? le_conn_complete_evt+0xcbc/0x1590
[  227.708897][ T4188]  ? hci_event_packet+0xe05/0x12f0
[  227.714034][ T4188]  ? process_one_work+0x863/0x1000
[  227.719191][ T4188]  ? do_raw_spin_unlock+0x11d/0x230
[  227.724425][ T4188]  kobject_add_internal+0x662/0xd00
[  227.729662][ T4188]  kobject_add+0x152/0x210
[  227.734116][ T4188]  ? kobject_init+0x1d0/0x1d0
[  227.738820][ T4188]  ? klist_children_get+0x50/0x50
[  227.743865][ T4188]  ? get_device_parent+0x121/0x3f0
[  227.749008][ T4188]  device_add+0x483/0xfb0
[  227.753405][ T4188]  hci_conn_add_sysfs+0xd1/0x1e0
[  227.758378][ T4188]  le_conn_complete_evt+0xcbc/0x1590
[  227.763705][ T4188]  ? cs_le_create_conn+0x5e0/0x5e0
[  227.768844][ T4188]  ? __mutex_trylock_common+0x14f/0x250
[  227.774438][ T4188]  hci_le_meta_evt+0x289/0x3b80
[  227.779330][ T4188]  ? hci_event_packet+0x36d/0x12f0
[  227.784469][ T4188]  ? hci_event_packet+0x2e2/0x12f0
[  227.789632][ T4188]  ? __lock_acquire+0x7c60/0x7c60
[  227.794709][ T4188]  ? hci_remote_host_features_evt+0x280/0x280
[  227.800806][ T4188]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  227.806482][ T4188]  ? mark_lock+0x94/0x320
[  227.810850][ T4188]  ? mutex_unlock+0x10/0x10
[  227.815403][ T4188]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  227.821419][ T4188]  ? lock_chain_count+0x20/0x20
[  227.826325][ T4188]  ? __rwlock_init+0x140/0x140
[  227.831120][ T4188]  hci_event_packet+0xe05/0x12f0
[  227.836089][ T4188]  ? lockdep_hardirqs_on+0x94/0x140
[  227.841347][ T4188]  ? rcu_lock_release+0x20/0x20
[  227.846236][ T4188]  ? hci_send_to_monitor+0x9c/0x4a0
[  227.851473][ T4188]  hci_rx_work+0x255/0xa10
[  227.856059][ T4188]  process_one_work+0x863/0x1000
[  227.861048][ T4188]  ? worker_detach_from_pool+0x240/0x240
[  227.866700][ T4188]  ? lockdep_hardirqs_off+0x70/0x100
[  227.872014][ T4188]  ? _raw_spin_lock_irq+0xab/0xe0
[  227.877073][ T4188]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  227.882495][ T4188]  ? wq_worker_running+0x97/0x170
[  227.887560][ T4188]  worker_thread+0xaa8/0x12a0
[  227.892279][ T4188]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  227.898209][ T4188]  ? lockdep_hardirqs_on+0x94/0x140
[  227.903456][ T4188]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  227.909391][ T4188]  kthread+0x436/0x520
[  227.913500][ T4188]  ? rcu_lock_release+0x20/0x20
[  227.918381][ T4188]  ? kthread_blkcg+0xd0/0xd0
[  227.923000][ T4188]  ret_from_fork+0x1f/0x30
[  227.927458][ T4188]  </TASK>
[  227.946129][ T4188] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  227.959598][ T4188] Bluetooth: hci4: failed to register connection device
[  228.003005][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  228.012952][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  228.046359][ T8516] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.098065][ T8616] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  228.126681][ T8616] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  228.144853][ T5555] usb 1-1: usb_control_msg returned -32
[  228.150726][ T5555] usbtmc 1-1:16.0: can't read capabilities
[  228.165735][ T8616] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  228.207261][ T8616] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  228.272692][ T8724] loop7: detected capacity change from 0 to 4096
[  228.443177][ T8616] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.460234][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  228.468248][ T8724] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  228.493957][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  228.532319][ T8616] 8021q: adding VLAN 0 to HW filter on device team0
[  228.577322][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  228.625434][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  228.645222][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1273'.
[  228.678032][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  228.719449][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  228.730883][ T4224] usb 1-1: USB disconnect, device number 23
[  228.779093][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.786256][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.823068][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  228.856870][ T8516] device veth0_vlan entered promiscuous mode
[  228.864671][ T5555] Bluetooth: hci3: command 0x0419 tx timeout
[  228.872559][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  228.886049][ T5555] Bluetooth: hci2: command 0x041b tx timeout
[  228.894090][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  228.923104][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  228.933398][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  228.942160][ T7879] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.949309][ T7879] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.961122][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  228.970383][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  228.979886][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  229.014911][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  229.036926][ T8516] device veth1_vlan entered promiscuous mode
[  229.054918][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  229.071758][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  229.084826][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  229.103837][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  229.136871][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  229.160001][ T8616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  229.178921][ T8616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.219563][ T4308] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.236025][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  229.247592][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  229.257761][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  229.266936][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  229.277308][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  229.286985][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  229.330609][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  229.374679][ T8516] device veth0_macvtap entered promiscuous mode
[  229.411903][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  229.441251][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  229.477122][ T4308] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.530733][ T8770] ------------[ cut here ]------------
[  229.532758][ T8516] device veth1_macvtap entered promiscuous mode
[  229.562482][ T8770] WARNING: CPU: 1 PID: 8770 at mm/page_alloc.c:5462 __alloc_pages+0x391/0x470
[  229.575304][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  229.589848][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  229.604550][ T8770] Modules linked in:
[  229.614830][ T8770] CPU: 1 PID: 8770 Comm: syz.0.1277 Not tainted syzkaller #0
[  229.632275][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.645914][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  229.681142][ T8770] RIP: 0010:__alloc_pages+0x391/0x470
[  229.692116][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.700295][ T8770] Code: 31 ff e9 b2 fe ff ff e8 fd e6 f6 07 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fd ff ff 4c 89 e7 e8 34 ad 09 00 e9 43 fd ff ff <0f> 0b 45 31 ff e9 ef fe ff ff 65 44 8b 2d 55 8e 4f 7e 41 83 fd 08
[  229.720527][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.739999][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.761340][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.786748][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.798023][ T8770] RSP: 0018:ffffc90004737a60 EFLAGS: 00010246
[  229.816108][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.833918][ T8770] RAX: ffffc90004737aa0 RBX: 1ffff920008e6f50 RCX: 0000000000000000
[  229.833928][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.833943][ T8770] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90004737ac8
[  229.859085][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_0
[  229.875833][ T8770] RBP: ffffc90004737b58 R08: dffffc0000000000 R09: ffffc90004737aa0
[  229.898350][ T4308] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.937104][ T8770] R10: fffff520008e6f59 R11: 1ffff920008e6f54 R12: dffffc0000000000
[  229.958962][ T8770] R13: 0000000000000000 R14: 0000000000040cc0 R15: 0000000000000013
[  230.005174][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  230.020703][ T7879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  230.033650][ T8770] FS:  00007fe534e656c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  230.062362][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.075243][ T8770] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  230.081902][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.103598][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.107883][ T8770] CR2: 00007f6551104e9c CR3: 0000000063a04000 CR4: 00000000003506e0
[  230.129873][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.151496][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.163607][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.174092][ T8770] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  230.183181][ T8770] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  230.193051][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.204746][ T8770] Call Trace:
[  230.208325][ T8770]  <TASK>
[  230.211385][ T8770]  ? zone_statistics+0x170/0x170
[  230.220082][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.231335][ T8770]  ? alloc_pages+0x438/0x550
[  230.236336][ T8770]  kmalloc_order+0x40/0x150
[  230.242607][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.251886][ T8770]  ? __might_fault+0xb3/0x110
[  230.257457][ T8770]  kmalloc_order_trace+0x14/0xf0
[  230.267885][ T8770]  raw_ioctl+0x1600/0x3560
[  230.272483][ T8770]  ? tomoyo_path_number_perm+0x4d4/0x5d0
[  230.280442][ T4308] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.280584][ T8770]  ? verify_lock_unused+0x140/0x140
[  230.297399][ T8770]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  230.303019][ T8770]  ? make_qualifier+0x3b0/0x3b0
[  230.311635][ T8770]  ? bpf_lsm_file_ioctl+0x5/0x10
[  230.317926][ T8770]  ? security_file_ioctl+0x7c/0xa0
[  230.324463][ T1323] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  230.343219][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  230.352959][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  230.361428][ T8770]  ? make_qualifier+0x3b0/0x3b0
[  230.374853][ T8770]  __se_sys_ioctl+0xfa/0x170
[  230.380404][ T8770]  do_syscall_64+0x4c/0xa0
[  230.388037][ T8516] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.418213][ T8516] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.429190][ T8770]  ? clear_bhb_loop+0x30/0x80
[  230.433957][ T8770]  ? clear_bhb_loop+0x30/0x80
[  230.447316][ T8516] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.447925][ T8770]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  230.465058][ T8516] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.474565][ T8770] RIP: 0033:0x7fe536bfdfc9
[  230.494570][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  230.502118][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  230.502291][ T8770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  230.530739][ T8770] RSP: 002b:00007fe534e65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  230.537178][ T8616] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.547345][ T8770] RAX: ffffffffffffffda RBX: 00007fe536e54fa0 RCX: 00007fe536bfdfc9
[  230.584450][ T1323] usb 8-1: Using ep0 maxpacket: 8
[  230.593739][ T8770] RDX: 00002000000000c0 RSI: 00000000c0085508 RDI: 0000000000000004
[  230.605087][ T8770] RBP: 00007fe536c80f91 R08: 0000000000000000 R09: 0000000000000000
[  230.625076][ T8770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  230.705772][ T8770] R13: 00007fe536e55038 R14: 00007fe536e54fa0 R15: 00007ffe47a8b308
[  230.734615][ T1323] usb 8-1: config 0 has an invalid interface number: 31 but max is 0
[  230.745154][ T1323] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.766477][ T7879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.782324][ T8770]  </TASK>
[  230.791577][ T1323] usb 8-1: config 0 has no interface number 0
[  230.813718][ T8770] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  230.821076][ T8770] CPU: 1 PID: 8770 Comm: syz.0.1277 Not tainted syzkaller #0
[  230.828483][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  230.838652][ T8770] Call Trace:
[  230.841959][ T8770]  <TASK>
[  230.844910][ T8770]  dump_stack_lvl+0x168/0x230
[  230.849649][ T8770]  ? show_regs_print_info+0x20/0x20
[  230.854888][ T8770]  ? load_image+0x3b0/0x3b0
[  230.859435][ T8770]  panic+0x2c9/0x7f0
[  230.861397][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.863358][ T8770]  ? bpf_jit_dump+0xd0/0xd0
[  230.863400][ T8770]  ? __alloc_pages+0x391/0x470
[  230.875839][ T7879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.875977][ T8770]  __warn+0x248/0x2b0
[  230.888843][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.892005][ T8770]  ? __alloc_pages+0x391/0x470
[  230.892045][ T8770]  report_bug+0x1b7/0x2e0
[  230.908431][ T8770]  handle_bug+0x3a/0x70
[  230.912616][ T8770]  exc_invalid_op+0x16/0x40
[  230.917149][ T8770]  asm_exc_invalid_op+0x16/0x20
[  230.922029][ T8770] RIP: 0010:__alloc_pages+0x391/0x470
[  230.925041][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  230.927438][ T8770] Code: 31 ff e9 b2 fe ff ff e8 fd e6 f6 07 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fd ff ff 4c 89 e7 e8 34 ad 09 00 e9 43 fd ff ff <0f> 0b 45 31 ff e9 ef fe ff ff 65 44 8b 2d 55 8e 4f 7e 41 83 fd 08
[  230.953007][ T4612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  230.954239][ T8770] RSP: 0018:ffffc90004737a60 EFLAGS: 00010246
[  230.954266][ T8770] RAX: ffffc90004737aa0 RBX: 1ffff920008e6f50 RCX: 0000000000000000
[  230.975537][ T8770] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90004737ac8
[  230.983541][ T8770] RBP: ffffc90004737b58 R08: dffffc0000000000 R09: ffffc90004737aa0
[  230.991554][ T8770] R10: fffff520008e6f59 R11: 1ffff920008e6f54 R12: dffffc0000000000
[  230.999567][ T8770] R13: 0000000000000000 R14: 0000000000040cc0 R15: 0000000000000013
[  231.007590][ T8770]  ? zone_statistics+0x170/0x170
[  231.012579][ T8770]  ? alloc_pages+0x438/0x550
[  231.017205][ T8770]  kmalloc_order+0x40/0x150
[  231.021737][ T8770]  ? __might_fault+0xb3/0x110
[  231.026449][ T8770]  kmalloc_order_trace+0x14/0xf0
[  231.031427][ T8770]  raw_ioctl+0x1600/0x3560
[  231.035878][ T8770]  ? tomoyo_path_number_perm+0x4d4/0x5d0
[  231.041540][ T8770]  ? verify_lock_unused+0x140/0x140
[  231.046772][ T8770]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  231.052264][ T8770]  ? make_qualifier+0x3b0/0x3b0
[  231.057181][ T8770]  ? bpf_lsm_file_ioctl+0x5/0x10
[  231.062140][ T8770]  ? security_file_ioctl+0x7c/0xa0
[  231.067304][ T8770]  ? make_qualifier+0x3b0/0x3b0
[  231.072186][ T8770]  __se_sys_ioctl+0xfa/0x170
[  231.076811][ T8770]  do_syscall_64+0x4c/0xa0
[  231.081252][ T8770]  ? clear_bhb_loop+0x30/0x80
[  231.085952][ T8770]  ? clear_bhb_loop+0x30/0x80
[  231.090662][ T8770]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  231.096580][ T8770] RIP: 0033:0x7fe536bfdfc9
[  231.101033][ T8770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.120666][ T8770] RSP: 002b:00007fe534e65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  231.129116][ T8770] RAX: ffffffffffffffda RBX: 00007fe536e54fa0 RCX: 00007fe536bfdfc9
[  231.137123][ T8770] RDX: 00002000000000c0 RSI: 00000000c0085508 RDI: 0000000000000004
[  231.145139][ T8770] RBP: 00007fe536c80f91 R08: 0000000000000000 R09: 0000000000000000
[  231.153141][ T8770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  231.161147][ T8770] R13: 00007fe536e55038 R14: 00007fe536e54fa0 R15: 00007ffe47a8b308
[  231.169168][ T8770]  </TASK>
[  231.172490][ T8770] Kernel Offset: disabled
[  231.176840][ T8770] Rebooting in 86400 seconds..