last executing test programs:

16m1.833966169s ago: executing program 32 (id=158):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x2, 0x6d, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x8}}}}}]}}]}}, 0x0)
ioctl$EVIOCRMFF(r0, 0x40085503, 0x0)

15m24.477515227s ago: executing program 33 (id=339):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
tee(r0, r2, 0x4e, 0x0)
write$binfmt_script(r1, &(0x7f00000021c0)={'#! ', './file0'}, 0xb)

14m37.015242998s ago: executing program 34 (id=537):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x45}, {0x6, 0x37, 0x0, 0x7}]}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x15, 0x1c, 0x65, 0x300, 0x0, 0x2, 0x0, @local, @multicast2}, {0x15, 0x6, 0x0, @multicast1}}}}}, 0x0)

12m51.663214769s ago: executing program 35 (id=993):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b08"], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0)
sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x8000)

11m29.296510398s ago: executing program 36 (id=1370):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

10m40.410181825s ago: executing program 37 (id=1555):
r0 = epoll_create1(0x80000)
r1 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

9m48.169485184s ago: executing program 38 (id=1708):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000840)='./bus\x00', 0x210052, &(0x7f0000000b40)=ANY=[@ANYBLOB='debug,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,check=relaxed,dots,nodots,errors=continue,showexec,dots,dots,codepage=860,dots,nocase,codepage=936,check=relaxed,nodots,fmask=00000000000000000000002,umask=00000000000000000000005,uid=', @ANYRESHEX=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB=',context=system_u,ro,audit,subj_role=,hash,\x00'], 0x5, 0x1c7, &(0x7f0000000500)="$eJzs3TFrE2EYB/DnYu1FF7sJ4nDg4hTUL2BFKog3VTLopNC69ERIltPF+hWc/IB+AOlUBzkxlzY2JFKKvbukv9+Sh/vf8T5vAm+mPHlz9/3B3ofxu++3v0W/n0RvO7bjOImt6MWJwwAA1slxVcWPqtZ2LwBAM87x/f+r4ZYAgEv28tXrF0/yfGc3y/oRR4flsBzWr3X+7Hm+8yCb2Jo9dVSWw2un+cM6z87m1+PmNH+0MN+M+/cm+Zc/2dOf+Vyext6ihr/u/vf3AAAAAAAAAAAAAAAAAAAAAAAAmjbITi2c7zMYLMvr6q/5QHPzezbizkZj2wAAAAAAAAAAAAAAAAAAAICVNv746eBtUeyPZkUaEWevXKyobi1dojtFLzrRxooWaUc/3KwbbRQxdyWKk5EY/3x8MyImxeNl99yIiEtufnZGpK2cTAAAAAAAAAAAAAAAAAAAcPVMf+ubjMZtdwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7an//7/YH12k+BwR57h5ulTS8lYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYY78DAAD//6d2Kn0=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

9m20.738689129s ago: executing program 39 (id=1841):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0)
link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0\x00')

7m53.884575447s ago: executing program 40 (id=2266):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
syz_emit_ethernet(0x4a, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100}}}}}}}, 0x0)

6m55.999808331s ago: executing program 9 (id=2504):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @random="175a8b527dc1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0)

6m54.940003221s ago: executing program 9 (id=2508):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x3, @loopback, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x7, {{0xa, 0x4e21, 0x1000, @mcast2, 0x1}}, {{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8187}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000005c0)={0x7, {{0xa, 0x4e23, 0x2, @mcast2, 0x8000081}}, {{0xa, 0x4620, 0xfffffff8, @loopback, 0x8000}}}, 0x108)

6m51.384821104s ago: executing program 41 (id=2508):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x3, @loopback, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x7, {{0xa, 0x4e21, 0x1000, @mcast2, 0x1}}, {{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8187}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000005c0)={0x7, {{0xa, 0x4e23, 0x2, @mcast2, 0x8000081}}, {{0xa, 0x4620, 0xfffffff8, @loopback, 0x8000}}}, 0x108)

6m47.705944025s ago: executing program 5 (id=2528):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x63)

6m46.63563988s ago: executing program 5 (id=2533):
r0 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1})
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
close_range(r0, 0xffffffffffffffff, 0x0)

6m45.704475109s ago: executing program 5 (id=2537):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x2, 0x1, 0x4, 0x0, 0x1})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

6m45.08090058s ago: executing program 5 (id=2541):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x222, &(0x7f00000005c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
open(&(0x7f0000000140)='./file0\x00', 0x100, 0x41)

6m44.291355184s ago: executing program 5 (id=2544):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0xffffffffffffff42)
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x4, 0x5, 0x74, 0xfffffffffffffff8, 0x1, 0x8000}, {0x4, 0x4, 0x8, 0x5, 0xf8}]})

6m43.643419084s ago: executing program 5 (id=2545):
r0 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

6m41.348293924s ago: executing program 42 (id=2545):
r0 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

6m23.050833961s ago: executing program 4 (id=2614):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x4, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xfc, 0x1], 0x1, [0x8, 0x4, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x7a00}, 0x0)

6m22.108041526s ago: executing program 4 (id=2619):
syz_mount_image$hfsplus(&(0x7f0000000a40), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000000)=ANY=[], 0x1, 0x68b, &(0x7f0000000a80)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8040c1, 0x0, 0x1, 0x0, &(0x7f0000000d40))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

6m20.486929583s ago: executing program 4 (id=2621):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
bind$can_raw(r0, &(0x7f0000000040), 0x10)

6m19.697127605s ago: executing program 4 (id=2626):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@bsdgroups}, {@nogrpid}]}, 0x0, 0x506, &(0x7f00000023c0)="$eJzs3c9vHFcdAPDvjL2x67q1C5UKCGgohYCi7Nqb1qp6KhcQqiohKk4cXGNvLMu7Xsu7LrGJFPt/QCISEghOnDkgcYiUE0cEN7jlEg5IASJQjMRh0ewPx4l3s078YxXv5yONZt688Xzfy2re23wTzwtgaF2MiJ2IuBARn0TEVPt80t7ig9aWXffwwY3FvQc3FpNoND7+Z9Ksz87FgZ/JvNy+53hEfP87ET9KDsetbW2vLpTLpY12uVCvrBdqW9tXVioLy6Xl0lqxODc7N/Pe1XeLJ9bXNyu/vf/tlQ9/cPv3X7r3551v/iRr1mS77mA/TlKr67n9OJnRiPjwNIINwEi7PxcG3RCeSxoRn4mIt5rP/1SMND/No+nyWAMAL4BGYyoaUwfLAMB5lzZzYEmab+cCJiNN8/lWDu/1mEjL1Vr98rXq5tpSK1c2Hbn02kq5NNPOFU5HLsnKszez40flYjxevhoRr0XET8deapbzi0fPMwAAJ+vlJ+b//4y15n8A4Jwb73fB/Nm0AwA4O33nfwDg3DH/A8DwMf8DwPAx/wPA8DH/A8CwuduZ/0cG3RIA4Ex876OPsq2x137/9dKnW5ur1U+vLJVqq/nK5mJ+sbqxnl+uVpfLpfxitZL0eelvuVpdn30nNq8X6qVavVDb2p6vVDfX6vPN93rPl3Jn1C8AoLfX3rzz12xK33n/peYWB9ZyMFfD+ZYOugHAwMj5w/DyFm4YXv6OD/Rby7PnfxG+9RzBGjef44eAk3bp8/L/MKzk/2F4yf/D8JL/h+HVaCS91vxP9y8BAM4VOX7gVP/9/xeXn71BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8AKYbG7TB8ppms9HvBIR05FLrq2USzMR8WpE/GUsN5aVZwfaYgDg+NK/J+31vy5NvT35ZO2F5L9jzX1E/PjnH//s+kK9vjGbnf/X/vn6rfb54iDaDwD005mnO/N4x8MHNxY721m25/63WouLZnH32lurZjRGs92fxiMXERP/Tlrltuz7ysgJxN/ZjYjPdet/0syNTLdXPn0yfhb7lTONnz4WP23WtfbZn8VnD915rGfMfmu9wrC4k40/H3R7/tK42NyPd138eLw5Qh1fZ/zbOzT+dZ738eZY0238u3jUGO/84bs963YjvjDaLX6yHz/pEf/tI8a/+8Uvv9WrrvGriEvRPf7BWIV6Zb1Q29q+slJZWC4tl9aKxbnZuZn3rr5bLDRz1IVOpvqwf7x/+dWe/f9NxESP+ON9+v+1p/a6sT8A//p/n/zwK73i70Z846vdP//XnxI/mxO//tT4jyxM/K7n8t1Z/KVW/3ef9fM/6qre9/62vXTESwGAM1Db2l5dKJdLGyd6kIsTvuGBg+SU2uzgnB9k38ePe5832imzrtf88Ze338gqB97T3s9OcvSLBzwwAafu0UM/6JYAAAAAAAAAAAAAAAC9HPf3ikb6XZMOuocAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcZ/8PAAD//zV4yq8=")
chdir(&(0x7f0000000240)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
syz_mount_image$fuse(0x0, &(0x7f0000002e00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0)

6m18.663188091s ago: executing program 4 (id=2631):
syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)

6m17.575346592s ago: executing program 4 (id=2637):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, r1, r2, 0x0, 0x0, 0x0, 0x1fffffd, {0x9bf6, 0xebff, 0x6, 0xf22d, 0x0, 0xffff, 0x0, 0x20, 0x101, 0x0, 0x0, 0x101, 0x1, 0x3f, "d20bddda7d1db9342de76eec7967fe97752251560ed100"}})

6m15.592778274s ago: executing program 43 (id=2637):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, r1, r2, 0x0, 0x0, 0x0, 0x1fffffd, {0x9bf6, 0xebff, 0x6, 0xf22d, 0x0, 0xffff, 0x0, 0x20, 0x101, 0x0, 0x0, 0x101, 0x1, 0x3f, "d20bddda7d1db9342de76eec7967fe97752251560ed100"}})

6m12.710311026s ago: executing program 7 (id=2654):
r0 = socket(0x2, 0x3, 0xff)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10)
socket(0x2, 0x3, 0xff)
syz_emit_ethernet(0x7e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x70, 0x66, 0x0, 0x5, 0x1, 0x0, @remote, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x15, 0x4, 0x0, 0x17, 0x3b, 0x65, 0x7b98, 0x40, 0xff, 0x5, @multicast1, @loopback, {[@rr={0x7, 0x7, 0xe4, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x13, 0x54, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @loopback]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xa2, [@rand_addr=0x64010100, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x14, 0x95, 0x3, 0x2, [{@empty, 0x5}, {@rand_addr=0x64010101, 0x9}]}]}}}}}}}, 0x0)

6m12.040198812s ago: executing program 7 (id=2658):
pipe2$watch_queue(&(0x7f0000002240)={<r0=>0xffffffffffffffff}, 0x80)
r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0)
keyctl$update(0x2, r1, &(0x7f0000000380)="fc8ae1", 0x3)

6m11.383259224s ago: executing program 7 (id=2659):
r0 = socket(0xa, 0x3, 0x8)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x23, 0x1, 0x2}})

6m10.74509182s ago: executing program 7 (id=2663):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
rmdir(&(0x7f0000000100)='./control\x00')

6m9.910758985s ago: executing program 7 (id=2667):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$bcachefs(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x1800402, &(0x7f0000000840)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c6d657461646174615f636865636b73756d3d63726336342c7f6174615f636865636b73756d3d6372633332632c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656cd6ee984c5f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c7374725f686173683d736970686173682c000f456c33737c01c96a485301f57184319607791e0389515818ee65b05741a83e2d3412b274e683f19cb37b6975e95e26fbf8", @ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRES32], 0x1, 0x5962, &(0x7f0000001400)="$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")
rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00')

6m8.906135974s ago: executing program 7 (id=2673):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x15, 0x49, "466f9c59f19c4811c16e914d8e8f333ea9adcdabca2cd0ecc7b2f694c8ee72dd7e426d9180174fa281cfa3ad2fa688f949faf62cc528763931b34b36ed5a1bf7968eddfb655e9ca04d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6m6.410288852s ago: executing program 44 (id=2673):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x15, 0x49, "466f9c59f19c4811c16e914d8e8f333ea9adcdabca2cd0ecc7b2f694c8ee72dd7e426d9180174fa281cfa3ad2fa688f949faf62cc528763931b34b36ed5a1bf7968eddfb655e9ca04d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4m56.90873335s ago: executing program 3 (id=2954):
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x5, 0x6, 0x2)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000080)=0x7fff, 0x1000, 0x1)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)

4m56.29548063s ago: executing program 3 (id=2957):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05f7ffffff00000000006b00000008000300", @ANYRES32=r2], 0x28}}, 0x0)

4m55.312996708s ago: executing program 3 (id=2963):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x2251b000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c099}, 0x24040000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

4m54.335597077s ago: executing program 3 (id=2967):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYBLOB="d9e2f81c20b5ab1f360c1068f219d7d16d4bfe86eebd827261ed2f1a31f74649a3567a6a0e87aa6e2a454b4b2903cdaa902ed3309c198137ed7175ad705c4a7b74ee9198f6c27ebda5c55ec63283c02ef96064a6f86f2943b6e6ab39a470dcf8d595020e1e6f36b279b34a014a08d72d90c365f7ded1fd84a93a001eea1c827778a1eae724b9120583b1d01022055a799750f46d9ea96b6d92fc394bc0323f2bab7932efd5e115612b3db68bcfae28458fb913cf093fcaa678f2810370e71c5285234b8db8e3ca8bd5ad8eac924a61", @ANYRESHEX, @ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0], 0x1, 0x1f6, &(0x7f0000000680)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
listxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x0)

4m53.520108016s ago: executing program 3 (id=2971):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x20, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

4m52.179988351s ago: executing program 3 (id=2976):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x28, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40151}, 0x24000004)

4m50.19623011s ago: executing program 45 (id=2976):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x28, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40151}, 0x24000004)

50.113857209s ago: executing program 0 (id=4095):
r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})
unshare(0x2000400)
signalfd4(r0, &(0x7f0000000080), 0x8, 0x0)

48.741546058s ago: executing program 0 (id=4100):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x3000})

48.198003371s ago: executing program 0 (id=4103):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000004c0)=""/38, 0x26)
getdents(r0, 0x0, 0x58)

47.430755402s ago: executing program 0 (id=4106):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
mount$bind(&(0x7f0000000800)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x29c5006, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)

46.76269005s ago: executing program 0 (id=4111):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x2040400)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)

45.479819307s ago: executing program 0 (id=4119):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

43.315667246s ago: executing program 46 (id=4119):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

17.985797238s ago: executing program 9 (id=4120):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x40020}, 0x20040800)

13.900191117s ago: executing program 9 (id=4238):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000000000)={0xf}, 0x20)

13.299469937s ago: executing program 9 (id=4242):
syz_open_dev$video4linux(&(0x7f00000000c0), 0x45c, 0x40103)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xa48a, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)

12.568001314s ago: executing program 9 (id=4245):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x74)
bind$tipc(r0, 0x0, 0x0)

6.61912006s ago: executing program 2 (id=4262):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

6.064101866s ago: executing program 1 (id=4264):
r0 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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")
r1 = gettid()
kcmp(r0, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)

5.270170644s ago: executing program 8 (id=4267):
r0 = socket(0x10, 0x3, 0x0)
setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0x2710}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)

4.788483987s ago: executing program 6 (id=4268):
recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000d80)=""/204, 0xcc}, {0x0}], 0x2}, 0x64}], 0x1, 0x40010001, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)

4.143939334s ago: executing program 1 (id=4269):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000", @ANYRES32], 0x38}}, 0x10)

4.132163816s ago: executing program 8 (id=4270):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000002340)=0x8)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6e6f64655f0dcbcc28b5ef6f8b2c6a6f75726e616c5f666c7573685f64697361626c65642c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656c696d69745f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c00"], 0x1, 0x5928, &(0x7f0000009d00)="$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")
removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00')

4.007968799s ago: executing program 2 (id=4271):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500070000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

3.230371404s ago: executing program 6 (id=4272):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000000a0a010100"], 0x14}}, 0x0)

2.637838622s ago: executing program 2 (id=4273):
r0 = epoll_create(0xd)
r1 = timerfd_create(0x0, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000006c0)={0x200a})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x300, r1, &(0x7f0000000040)={0x32000000})

2.376979501s ago: executing program 8 (id=4274):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000380)=ANY=[@ANYRES8=0x0], 0x3, 0xa80, &(0x7f0000000fc0)="$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")
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40106e8c, 0x0)

2.202458903s ago: executing program 6 (id=4275):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffff9, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0xf4c, 0x8, 0x2, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x3, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x10006, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x3, 0x42, 0x3], [0x7, 0x40a, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0xb9, 0xce7, 0x1ff, 0x1000002, 0x57, 0x5, 0x3, 0x100, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0xb, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1001]}, 0x45c)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0xa0902)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.037948192s ago: executing program 1 (id=4276):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x0)

1.88943906s ago: executing program 2 (id=4277):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2c, r1, 0xb97534d5fe9704cf, 0x70bd28, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x2c}}, 0x0)

1.697919036s ago: executing program 6 (id=4278):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)

1.391549363s ago: executing program 1 (id=4279):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0)

1.296205578s ago: executing program 8 (id=4280):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

1.228535816s ago: executing program 2 (id=4281):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)={0xffffffff})

1.004189537s ago: executing program 6 (id=4282):
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3, 0x2}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)

771.03842ms ago: executing program 1 (id=4283):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000009c0)={0x1, &(0x7f0000000980)=[{0x6, 0x7f, 0xe6, 0x7}]}, 0x10)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d446c098cfc27eb8549d66e79219c2c3385e4508546e551a0de59631719ba089"}}}}}}}, 0x0)

642.249452ms ago: executing program 8 (id=4284):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001b40)='./file2\x00', 0x143042, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r1, r0, 0x4, r2}, 0x10)

609.012469ms ago: executing program 2 (id=4285):
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r0, 0x720, 0x0)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x9b, 0x200, 0x4f, &(0x7f00000003c0)="4e8ac507481ed7964f3dce4e44eeb894837e6c2dc3e67f8c3e37e6230c92cfc261a15d172c93d6dbbdf236283970221f075eac78679a8a9b4f030d7e96c75fb79cf3da5c5b48cc337d049fb3267d4a"}], 0x1})

401.795824ms ago: executing program 6 (id=4286):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f000000050030000000000005002f00a005000008000300", @ANYRES32=r2], 0x2c}}, 0x0)

177.972729ms ago: executing program 1 (id=4287):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'rti800\x00', [0x401, 0x10, 0x401, 0xa, 0x14000000, 0xfffffffc, 0x9, 0x2, 0xffd, 0xa, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]})
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000})
syz_usb_connect(0x2, 0x40, 0x0, 0x0)

0s ago: executing program 8 (id=4288):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0, 0x0, 0x1}, 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200", @ANYRES32], 0x254}}, 0x0)

kernel console output (not intermixed with test programs):

r??
[  969.913589][    T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  969.923421][    T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  970.575975][    T9] em28xx 3-1:0.0: chip ID is em2882/3
[  970.783856][    T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  970.817493][    T9] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  970.827940][    T9] em28xx 3-1:0.0: No AC97 audio processor
[  970.906787][    T9] usb 3-1: USB disconnect, device number 15
[  970.918226][    T9] em28xx 3-1:0.0: Disconnecting em28xx
[  970.970555][    T9] em28xx 3-1:0.0: Freeing device
[  971.141321][T14304] loop6: detected capacity change from 0 to 64
[  971.729324][T14309] loop0: detected capacity change from 0 to 1024
[  971.760654][T14309] EXT4-fs: Ignoring removed orlov option
[  971.814342][T14309] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  971.916351][T14309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  972.208226][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  972.218285][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  972.434272][T13948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  973.209300][T14335] loop8: detected capacity change from 0 to 256
[  973.302432][T14335] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  973.314045][T14335] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  973.385781][T14338] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  973.395638][T14338] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off.
[  973.406995][T14338] overlayfs: fs on './file1' does not support file handles, falling back to xino=off.
[  973.423662][T14338] overlayfs: conflicting lowerdir path
[  973.560988][T14335] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  974.557004][T14026] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  975.639619][T14360] loop1: detected capacity change from 0 to 32768
[  975.654099][T14360] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3137 (14360)
[  975.695098][T14026] usb 9-1: Using ep0 maxpacket: 16
[  975.701219][T14360] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  975.715171][T14360] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  975.724284][T14360] BTRFS info (device loop1): using free-space-tree
[  975.751195][T14026] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  975.763729][T14026] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  975.783072][T14026] usb 9-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  975.794841][T14026] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.886776][T14026] usb 9-1: config 0 descriptor??
[  976.270436][T12677] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  976.444784][T14026] playstation 0003:054C:05C4.001A: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.8-1/input0
[  976.623859][T14026] playstation 0003:054C:05C4.001A: Invalid byte count transferred, expected 16 got 0
[  976.634129][T14026] playstation 0003:054C:05C4.001A: Failed to retrieve DualShock4 pairing info: -22
[  976.646553][T14026] playstation 0003:054C:05C4.001A: Failed to get MAC address from DualShock4
[  976.655752][T14026] playstation 0003:054C:05C4.001A: Failed to create dualshock4.
[  976.836027][T14026] playstation 0003:054C:05C4.001A: probe with driver playstation failed with error -22
[  976.917536][T14026] usb 9-1: USB disconnect, device number 6
[  977.550040][T14397] loop0: detected capacity change from 0 to 512
[  977.658232][T14397] EXT4-fs: Ignoring removed bh option
[  977.731302][T14397] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  977.914015][T14397] EXT4-fs (loop0): 1 truncate cleaned up
[  977.930224][T14397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  978.590575][T13948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  979.384347][ T5104] Bluetooth: hci2: command 0x0405 tx timeout
[  980.967049][T14421] loop1: detected capacity change from 0 to 32768
[  981.120795][T14428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  981.135669][T14421] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  981.160845][T14421]   allowing incompatible features above 0.0: (unknown version)
[  981.168983][T14421]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  981.184107][T14421] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  981.192640][T14421] bcachefs (loop1): initializing new filesystem
[  981.220574][T14421] bcachefs (loop1): going read-write
[  981.317023][T14421] bcachefs (loop1): marking superblocks
[  981.375015][T14421] bcachefs (loop1): initializing freespace
[  981.419994][T14421] bcachefs (loop1): done initializing freespace
[  981.442276][T14421] bcachefs (loop1): reading snapshots table
[  981.448944][T14421] bcachefs (loop1): reading snapshots done
[  981.551948][T14421] bcachefs (loop1): done starting filesystem
[  981.956476][T12677] bcachefs (loop1): shutting down
[  981.961710][T12677] bcachefs (loop1): going read-only
[  981.967527][T12677] bcachefs (loop1): finished waiting for writes to stop
[  982.017726][T12677] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  982.350638][T12677] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  982.408502][T12677] bcachefs (loop1): clean shutdown complete, journal seq 4
[  982.422371][    T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:0)
[  982.472584][T12677] bcachefs (loop1): marking filesystem clean
[  982.600245][ T5104] Bluetooth: hci3: link tx timeout
[  982.608589][ T5104] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  982.680511][T12677] bcachefs (loop1): shutdown complete
[  983.431464][T14465] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  983.431464][T14465] The task syz.0.3173 (14465) triggered the difference, watch for misbehavior.
[  983.784122][    T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  983.953894][    T9] usb 3-1: Using ep0 maxpacket: 16
[  984.001259][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  984.013289][    T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  984.022763][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  984.072716][    T9] usb 3-1: config 0 descriptor??
[  984.630480][    T9] mcp2221 0003:04D8:00DD.001B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  984.666341][T12029] Bluetooth: hci3: command 0x0406 tx timeout
[  985.020880][    T9] usb 3-1: USB disconnect, device number 16
[  985.108776][T14479] loop0: detected capacity change from 0 to 256
[  985.156112][T14479] exfat: Deprecated parameter 'namecase'
[  985.175029][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3180'.
[  985.293118][T14479] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  986.759445][T14486] loop6: detected capacity change from 0 to 4096
[  988.528998][T14516] loop0: detected capacity change from 0 to 8
[  990.161335][T14538] loop0: detected capacity change from 0 to 1024
[  990.194443][T14538] EXT4-fs: Ignoring removed oldalloc option
[  990.200694][T14538] EXT4-fs: Ignoring removed bh option
[  990.371912][T14538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  990.563246][   T30] audit: type=1800 audit(1754712745.174:157): pid=14538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3206" name="file2" dev="loop0" ino=16 res=0 errno=0
[  990.776759][T14548] ip6gretap1: entered allmulticast mode
[  991.019177][T13948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  991.790680][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3215'.
[  991.831278][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3215'.
[  991.914011][T14562] block nbd0: server does not support multiple connections per device.
[  991.923442][T14562] block nbd0: shutting down sockets
[  992.612600][T14570] macvtap0: refused to change device tx_queue_len
[  992.963403][T14026] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  993.151015][T14026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  993.165743][T14026] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  993.165802][T14580] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  993.189663][T14026] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  993.204098][T14026] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  993.240153][T14026] usb 7-1: config 0 descriptor??
[  993.760233][T14026] steelseries 0003:1038:12B6.001C: unknown main item tag 0x0
[  993.771834][T14026] steelseries 0003:1038:12B6.001C: unknown main item tag 0x0
[  993.781495][T14026] steelseries 0003:1038:12B6.001C: unknown main item tag 0x0
[  993.790749][T14026] steelseries 0003:1038:12B6.001C: unknown main item tag 0x0
[  993.811045][T14026] steelseries 0003:1038:12B6.001C: unknown main item tag 0x0
[  993.821680][T14026] steelseries 0003:1038:12B6.001C: unknown main item tag 0x0
[  993.832058][T14026] steelseries 0003:1038:12B6.001C: unknown main item tag 0x0
[  993.998621][T14026] steelseries 0003:1038:12B6.001C: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.6-1/input0
[  994.177053][T14595] bridge0: entered promiscuous mode
[  994.183306][T14595] macvtap1: entered promiscuous mode
[  994.198477][T14595] bridge0: port 3(macvtap1) entered blocking state
[  994.217930][T14595] bridge0: port 3(macvtap1) entered disabled state
[  994.225550][T14595] macvtap1: entered allmulticast mode
[  994.231233][T14595] bridge0: entered allmulticast mode
[  994.242194][T14595] macvtap1: left allmulticast mode
[  994.247861][T14595] bridge0: left allmulticast mode
[  994.289617][T14595] bridge0: left promiscuous mode
[  994.339173][T14026] usb 7-1: USB disconnect, device number 18
[  994.682276][T14599] loop8: detected capacity change from 0 to 128
[  994.748300][T14599] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  995.459159][T14610] loop6: detected capacity change from 0 to 512
[  995.487554][T14610] EXT4-fs: Ignoring removed mblk_io_submit option
[  995.526389][T14610] EXT4-fs (loop6): failed to initialize system zone (-117)
[  995.579887][T14610] EXT4-fs (loop6): mount failed
[  996.397422][T14626] sch_tbf: burst 0 is lower than device macvlan1 mtu (1514) !
[  996.624874][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3248'.
[  996.791758][T14629] loop1: detected capacity change from 0 to 2048
[  996.951949][T14629] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  997.253404][   T30] audit: type=1804 audit(1754712751.854:158): pid=14629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3247" name="/newroot/144/file0/bus" dev="loop1" ino=1367 res=1 errno=0
[  998.911685][T14634] loop6: detected capacity change from 0 to 65536
[  998.984075][T14634] XFS (loop6): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  999.011862][T14650] loop8: detected capacity change from 0 to 164
[  999.100593][T14648] loop1: detected capacity change from 0 to 1024
[  999.167586][T14634] XFS (loop6): Ending clean mount
[  999.190583][T14634] XFS (loop6): Quotacheck needed: Please wait.
[  999.232570][T14648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  999.296409][T14634] XFS (loop6): Quotacheck: Done.
[  999.416513][T13026] XFS (loop6): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  999.512940][T14648] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.3256: Allocating blocks 385-513 which overlap fs metadata
[  999.597792][T14646] EXT4-fs (loop1): pa ffff8881239f4d20: logic 16, phys. 129, len 24
[  999.608947][T14646] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  999.789235][T14666] loop8: detected capacity change from 0 to 64
[  999.903616][T12677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1001.973199][T14691] tun0: tun_chr_ioctl cmd 2147767520
[ 1003.385520][T14707] overlayfs: upper fs does not support file handles, falling back to index=off.
[ 1003.395553][T14707] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[ 1003.452206][T14709] loop1: detected capacity change from 0 to 512
[ 1003.638036][T14704] loop0: detected capacity change from 0 to 4096
[ 1003.673070][T14709] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.3281: corrupted in-inode xattr: invalid ea_ino
[ 1003.688350][T14709] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3281: couldn't read orphan inode 15 (err -117)
[ 1003.705042][T14709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1003.950159][T14704] ntfs3(loop0): ino=1a, mi_enum_attr
[ 1003.959991][T14704] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[ 1004.205955][T12677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1004.660715][T14724] loop6: detected capacity change from 0 to 64
[ 1005.205007][T13026] hfs: node 4:3 still has 1 user(s)!
[ 1006.230581][    T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1006.469129][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1006.480758][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1006.491969][    T9] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1006.507843][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1006.584492][    T9] usb 9-1: config 0 descriptor??
[ 1006.939633][T14758] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1007.504538][    T9] uclogic 0003:256C:006D.001D: failed retrieving Huion firmware version: -71
[ 1007.514416][    T9] uclogic 0003:256C:006D.001D: failed probing parameters: -71
[ 1007.535899][    T9] uclogic 0003:256C:006D.001D: probe with driver uclogic failed with error -71
[ 1007.595541][    T9] usb 9-1: USB disconnect, device number 7
[ 1007.629059][T14763] sctp: [Deprecated]: syz.0.3304 (pid 14763) Use of int in maxseg socket option.
[ 1007.629059][T14763] Use struct sctp_assoc_value instead
[ 1009.420622][T14796] loop8: detected capacity change from 0 to 128
[ 1009.506630][T14796] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1009.552074][T14796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1009.585412][T14797] loop0: detected capacity change from 0 to 512
[ 1009.700161][T14797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1009.714143][T14797] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1009.952491][T14797] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.3320: path /61/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[ 1010.108683][T14797] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 4: comm syz.0.3320: path /61/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1
[ 1010.172479][T14797] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 12: comm syz.0.3320: path /61/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[ 1010.264451][T14797] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.3320: path /61/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[ 1010.354098][   T30] audit: type=1326 audit(1754712764.974:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14808 comm="syz.2.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711a38ebe9 code=0x7ffc0000
[ 1010.472059][   T30] audit: type=1326 audit(1754712765.044:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14808 comm="syz.2.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711a38ebe9 code=0x7ffc0000
[ 1010.818640][T13948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1011.068562][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3327'.
[ 1011.359235][T14824] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1011.917092][T14834] loop1: detected capacity change from 0 to 64
[ 1012.072068][T14834] syz.1.3334: attempt to access beyond end of device
[ 1012.072068][T14834] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64
[ 1012.088733][T14834] buffer_io_error: 5 callbacks suppressed
[ 1012.088820][T14834] Buffer I/O error on dev loop1, logical block 512, async page read
[ 1012.103723][T14834] syz.1.3334: attempt to access beyond end of device
[ 1012.103723][T14834] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64
[ 1012.120948][T14834] Buffer I/O error on dev loop1, logical block 56576, async page read
[ 1012.201477][T14840] loop8: detected capacity change from 0 to 128
[ 1012.870568][T14839] loop6: detected capacity change from 0 to 4096
[ 1013.027633][T14839] NILFS (loop6): invalid segment: Checksum error in segment payload
[ 1013.036110][T14839] NILFS (loop6): trying rollback from an earlier position
[ 1013.272454][T14839] NILFS (loop6): recovery complete
[ 1013.419417][T14847] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1013.476801][T14843] loop0: detected capacity change from 0 to 32768
[ 1013.632509][T14843] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=yes,norecovery,nojournal_transaction_names,read_only
[ 1013.632653][T14843]   allowing incompatible features above 0.0: (unknown version)
[ 1013.632861][T14843]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 1013.681752][T14843] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[ 1013.691133][T14843] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 1013.699936][T14843] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[ 1013.699936][T14843]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[ 1013.775582][T14843] bcachefs (loop0): btree node read error at btree alloc level 0/0
[ 1013.775694][T14843]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[ 1013.775815][T14843]   loop0 node offset 0/24: got wrong btree node: got
[ 1013.775900][T14843]   btree=alloc level=0 seq 98dc7e261 1
[ 1013.775976][T14843]   min: POS_MIN
[ 1013.776042][T14843]   max: SPOS_MAX
[ 1013.776111][T14843]   loop0 btree validate error
[ 1013.776185][T14843]   flagging btree alloc lost data
[ 1013.776263][T14843]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[ 1013.776360][T14843]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[ 1013.776460][T14843]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[ 1013.776568][T14843]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[ 1013.776665][T14843]   ret btree_node_read_err_bad_node
[ 1013.885563][T14843] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[ 1013.920200][T14843] bcachefs (loop0): btree node read error at btree lru level 0/0
[ 1013.920310][T14843]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key 0:196608:0 durability: 1 ptr: 0:28:0 gen 0
[ 1013.920423][T14843]   loop0 node offset 0/16: incorrect min_key: got POS_MIN should be 0:196608:0
[ 1013.920512][T14843]   loop0 btree validate error
[ 1013.920586][T14843]   flagging btree lru lost data
[ 1013.920681][T14843]   ret btree_node_read_err_bad_node
[ 1013.974323][T14843] bcachefs (loop0): error reading btree root btree=lru level=0: btree_node_read_error, fixing
[ 1013.995502][T14843] bcachefs (loop0): btree node read error at btree freespace level 0/0
[ 1013.995616][T14843]   u64s 11 type btree_ptr_v2 36591746972385279:U64_MAX:U32_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0
[ 1013.995745][T14843]   loop0 node offset 0/32 bset u64s 0: incorrect max key SPOS_MAX
[ 1013.995829][T14843]   loop0 btree validate error
[ 1013.995905][T14843]   flagging btree freespace lost data
[ 1013.995988][T14843]   ret btree_node_read_err_bad_node
[ 1014.045771][T14843] bcachefs (loop0): error reading btree root btree=freespace level=0: btree_node_read_error, fixing
[ 1014.074971][T14843] bcachefs (loop0): check_topology... done
[ 1014.089911][T14843] bcachefs (loop0): accounting_read... done
[ 1014.101075][T14843] bcachefs (loop0): alloc_read... done
[ 1014.109474][T14843] bcachefs (loop0): snapshots_read... done
[ 1014.114832][T14850] syz.2.3341 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1014.118256][T14843] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[ 1014.120950][T14843] bcachefs (loop0): done starting filesystem
[ 1014.253226][T14843] bcachefs (loop0): error going rw: -2267
[ 1014.388088][T13948] bcachefs (loop0): shutting down
[ 1014.519726][T13948] bcachefs (loop0): shutdown complete
[ 1016.596126][T14883] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3357'.
[ 1017.676290][T14900] could not allocate digest TFM handle _!5����(��i����HP,�om�x��*�71U"~����2.�>�~e���>/y��
[ 1018.147724][T14908] loop8: detected capacity change from 0 to 256
[ 1018.163379][T14904] loop1: detected capacity change from 0 to 256
[ 1018.216213][T14907] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3368'.
[ 1018.321768][T14908] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[ 1018.397295][T14904] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1018.565610][T14912] loop0: detected capacity change from 0 to 512
[ 1018.639991][   T30] audit: type=1800 audit(1754712773.264:161): pid=14913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3366" name="file1" dev="loop1" ino=1048770 res=0 errno=0
[ 1018.707933][T14912] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1018.925593][T14912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1018.939768][T14912] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1019.047869][T14918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3370'.
[ 1019.277479][T14921] team0: Device gtp0 is of different type
[ 1019.315754][T14922] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3371'.
[ 1019.734584][T14926] loop1: detected capacity change from 0 to 512
[ 1019.821396][T13948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1019.837388][T14926] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1019.870514][T14922] bridge_slave_1: left allmulticast mode
[ 1019.876939][T14922] bridge_slave_1: left promiscuous mode
[ 1019.884005][T14922] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1019.980636][T14926] FAT-fs (loop1): FAT read failed (blocknr 1568)
[ 1020.724927][T14939] loop0: detected capacity change from 0 to 128
[ 1020.767292][T14937] syzkaller0: tun_chr_ioctl cmd 1074025672
[ 1020.773767][T14937] syzkaller0: ignored: set checksum disabled
[ 1020.882348][T14939] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1020.889471][T14943] loop6: detected capacity change from 0 to 256
[ 1020.921724][T14939] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1021.003923][T14943] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1021.015083][T14943] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[ 1021.263128][T14943] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1021.425583][T13948] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1022.341865][ T4953] tipc: Subscription rejected, illegal request
[ 1022.606495][T14967] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3392'.
[ 1023.154278][T14977] loop6: detected capacity change from 0 to 512
[ 1023.165705][T14977] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1023.375222][T14981] loop0: detected capacity change from 0 to 64
[ 1023.972574][T14988] Set syz0 is full, maxelem 0 reached
[ 1024.708424][T14999] netlink: 'syz.6.3407': attribute type 25 has an invalid length.
[ 1024.717396][T14999] netlink: 'syz.6.3407': attribute type 7 has an invalid length.
[ 1024.830722][T15001] loop1: detected capacity change from 0 to 512
[ 1024.894868][T15001] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 1024.932415][T15001] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[ 1024.946173][T15001] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[ 1024.956119][T15001] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3408: Failed to acquire dquot type 1
[ 1025.089528][T15001] EXT4-fs (loop1): 1 truncate cleaned up
[ 1025.098166][T15001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1025.308669][T15001] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[ 1025.355228][T15001] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 8
[ 1025.381571][T15012] loop0: detected capacity change from 0 to 64
[ 1025.578188][   T30] audit: type=1800 audit(1754712780.204:162): pid=15012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3412" name="file0" dev="loop0" ino=8 res=0 errno=0
[ 1025.590964][T15011] Trying to free block not in datazone
[ 1025.638011][T15011] Trying to free block not in datazone
[ 1025.655217][T15011] Trying to free block not in datazone
[ 1025.986331][T12677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1027.259083][T15033] loop8: detected capacity change from 0 to 1024
[ 1028.299863][ T5860] kernel write not supported for file /snd/pcmC0D0p (pid: 5860 comm: kworker/1:2)
[ 1028.589142][T15052] loop8: detected capacity change from 0 to 256
[ 1028.630930][T15050] netlink: 'syz.6.3428': attribute type 10 has an invalid length.
[ 1030.527627][T15064] loop6: detected capacity change from 0 to 32768
[ 1030.576741][T15064] find_entry called with index = 0
[ 1031.883184][ T5860] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1032.100869][ T5860] usb 9-1: Using ep0 maxpacket: 16
[ 1032.144728][ T5860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1032.157060][ T5860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1032.170943][ T5860] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice=1a.00
[ 1032.181202][ T5860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1032.267552][ T5860] usb 9-1: config 0 descriptor??
[ 1032.805072][ T5860] lua 0003:1E7D:2C2E.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.8-1/input0
[ 1032.984419][    T9] usb 9-1: USB disconnect, device number 8
[ 1033.033757][T15100] program syz.0.3453 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1033.649697][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1033.656916][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1036.387495][ T5860] kernel read not supported for file /dsp (pid: 5860 comm: kworker/1:2)
[ 1036.581177][T15140] loop1: detected capacity change from 0 to 256
[ 1036.633062][T15140] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1036.647347][T15140] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[ 1036.795514][T15140] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1036.928437][T15144] loop0: detected capacity change from 0 to 64
[ 1037.369005][T15150] loop6: detected capacity change from 0 to 256
[ 1038.678607][T15168] sctp: [Deprecated]: syz.1.3482 (pid 15168) Use of int in max_burst socket option deprecated.
[ 1038.678607][T15168] Use struct sctp_assoc_value instead
[ 1038.906480][T15169] loop8: detected capacity change from 0 to 1024
[ 1038.962276][T15173] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3485'.
[ 1039.050361][   T30] audit: type=1326 audit(1754712793.684:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15172 comm="syz.0.3487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bf678ebe9 code=0x0
[ 1039.072854][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1040.240706][T15192] loop1: detected capacity change from 0 to 512
[ 1040.373989][T15192] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1040.536661][T15192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1040.550025][T15192] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1040.867201][T12677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1040.867545][T15196] loop0: detected capacity change from 0 to 4096
[ 1041.123436][T15205] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1041.272261][T15196] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[ 1041.295395][T15207] program syz.6.3499 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1041.327541][T15196] Remounting filesystem read-only
[ 1043.430202][T15242] loop8: detected capacity change from 0 to 256
[ 1043.449869][T15243] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[ 1043.489420][T15242] exfat: Deprecated parameter 'utf8'
[ 1043.622424][T15242] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[ 1044.229740][T15250] loop1: detected capacity change from 0 to 256
[ 1045.080498][T15251] loop6: detected capacity change from 0 to 32768
[ 1045.276661][T15251] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[ 1045.307812][T15251] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1045.392604][T15251] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid bg_blkno of 4278207136
[ 1045.417759][T15251] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1045.418032][T15253] loop0: detected capacity change from 0 to 32768
[ 1045.432703][T15251] OCFS2: File system is now read-only.
[ 1045.442500][T15251] (syz.6.3517,15251,0):ocfs2_search_chain:1817 ERROR: status = -30
[ 1045.450859][T15251] (syz.6.3517,15251,0):ocfs2_search_chain:1940 ERROR: status = -30
[ 1045.459337][T15251] (syz.6.3517,15251,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[ 1045.468343][T15251] (syz.6.3517,15251,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[ 1045.477764][T15251] (syz.6.3517,15251,0):ocfs2_claim_new_inode:2298 ERROR: status = -30
[ 1045.486431][T15251] (syz.6.3517,15251,0):ocfs2_claim_new_inode:2313 ERROR: status = -30
[ 1045.495111][T15251] (syz.6.3517,15251,0):ocfs2_mknod_locked:641 ERROR: status = -30
[ 1045.503308][T15251] (syz.6.3517,15251,0):ocfs2_mknod:388 ERROR: status = -30
[ 1045.518367][T15251] (syz.6.3517,15251,0):ocfs2_mknod:505 ERROR: status = -30
[ 1045.528124][T15251] (syz.6.3517,15251,0):ocfs2_create:678 ERROR: status = -30
[ 1045.741118][T15250] FAT-fs (loop1): Directory bread(block 64) failed
[ 1045.748267][T15250] FAT-fs (loop1): Directory bread(block 65) failed
[ 1045.756508][T15250] FAT-fs (loop1): Directory bread(block 66) failed
[ 1045.763404][T15250] FAT-fs (loop1): Directory bread(block 67) failed
[ 1045.770518][T15250] FAT-fs (loop1): Directory bread(block 68) failed
[ 1045.777405][T15250] FAT-fs (loop1): Directory bread(block 69) failed
[ 1045.784686][T15250] FAT-fs (loop1): Directory bread(block 70) failed
[ 1045.791431][T15250] FAT-fs (loop1): Directory bread(block 71) failed
[ 1045.798526][T15250] FAT-fs (loop1): Directory bread(block 72) failed
[ 1045.805414][T15250] FAT-fs (loop1): Directory bread(block 73) failed
[ 1045.836765][T13026] ocfs2: Unmounting device (7,6) on (node local)
[ 1045.860739][T15250] syz.1.3518: attempt to access beyond end of device
[ 1045.860739][T15250] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256
[ 1045.889449][T15253] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[ 1045.889609][T15253]   allowing incompatible features above 0.0: (unknown version)
[ 1045.889724][T15253]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 1045.944482][T15253] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[ 1045.956605][T15253] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[ 1045.967609][T15253] bcachefs (loop0): Version upgrade required:
[ 1045.967609][T15253] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[ 1045.967609][T15253] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[ 1045.967609][T15253]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[ 1046.041271][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1046.083830][T15253] bcachefs (loop0): dropping and reconstructing all alloc info
[ 1046.255296][T15253] bcachefs (loop0): accounting_read... done
[ 1046.336865][T15253] bcachefs (loop0): alloc_read... done
[ 1046.399784][T15253] bcachefs (loop0): snapshots_read... done
[ 1046.482704][T15253] bcachefs (loop0): check_allocations... done
[ 1046.793110][T15253] bcachefs (loop0): going read-write
[ 1046.798775][T15253] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1
[ 1046.798775][T15253] rw journal devs:
[ 1046.900607][T15253] bcachefs (loop0): done starting filesystem
[ 1047.137480][T13948] bcachefs (loop0): shutting down
[ 1047.143894][T13948] bcachefs (loop0): going read-only
[ 1047.157693][T13948] bcachefs (loop0): finished waiting for writes to stop
[ 1047.228073][T13948] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10
[ 1047.312584][T13948] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10
[ 1047.340299][T13948] bcachefs (loop0): unclean shutdown complete, journal seq 10
[ 1047.383855][T13948] bcachefs (loop0): done going read-only, filesystem not clean
[ 1047.588983][T13948] bcachefs (loop0): shutdown complete
[ 1047.799673][T13234] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1048.020714][T13234] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1048.345831][T13234] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1048.534289][T13234] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1048.830738][T13234] bridge_slave_0: left allmulticast mode
[ 1048.836953][T13234] bridge_slave_0: left promiscuous mode
[ 1048.846447][T13234] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1049.580483][T13234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1049.655097][T13234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1049.687523][T13234] bond0 (unregistering): Released all slaves
[ 1050.457127][T13234] hsr_slave_0: left promiscuous mode
[ 1050.483051][T13234] hsr_slave_1: left promiscuous mode
[ 1050.491432][T13234] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1050.502664][T13234] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1050.548268][T13234] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1050.556328][T13234] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1050.701673][T13234] veth1_macvtap: left promiscuous mode
[ 1050.707876][T13234] veth0_macvtap: left promiscuous mode
[ 1050.720262][T13234] veth1_vlan: left promiscuous mode
[ 1050.736996][T13234] veth0_vlan: left promiscuous mode
[ 1051.315776][T15299] Bluetooth: MGMT ver 1.23
[ 1052.479884][T13167] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1052.727537][T15301] loop6: detected capacity change from 0 to 32768
[ 1052.764001][T13167] usb 2-1: Using ep0 maxpacket: 32
[ 1052.822559][T13167] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1052.835034][T13167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1052.846699][T13167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1052.858353][T13167] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1052.868149][T13167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.130697][T13234] team0 (unregistering): Port device team_slave_1 removed
[ 1053.185226][T13167] usb 2-1: config 0 descriptor??
[ 1053.211030][T15303] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1053.242569][T12029] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1053.242651][T13234] team0 (unregistering): Port device team_slave_0 removed
[ 1053.345451][T12029] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1053.355570][T12029] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1053.368541][T13167] hub 2-1:0.0: USB hub found
[ 1053.419012][T12029] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1053.447856][T12029] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1053.731030][T15301] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[ 1053.731199][T15301]   allowing incompatible features above 0.0: (unknown version)
[ 1053.731285][T15301]   features: lz4
[ 1053.754297][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1053.757266][T13167] hub 2-1:0.0: 2 ports detected
[ 1053.798643][T15301] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[ 1053.814510][T15301] bcachefs (loop6): initializing new filesystem
[ 1053.840017][T15301] bcachefs (loop6): going read-write
[ 1054.104846][T15301] bcachefs (loop6): marking superblocks
[ 1054.117222][T13167] hub 2-1:0.0: hub_hub_status failed (err = -71)
[ 1054.117357][T13167] hub 2-1:0.0: config failed, can't get hub status (err -71)
[ 1054.140463][T13167] usbhid 2-1:0.0: can't add hid device: -71
[ 1054.147678][T13167] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1054.349630][T15301] bcachefs (loop6): initializing freespace
[ 1054.383631][T13167] usb 2-1: USB disconnect, device number 17
[ 1054.408807][T15301] bcachefs (loop6): done initializing freespace
[ 1054.454473][T15301] bcachefs (loop6): reading snapshots table
[ 1054.460804][T15301] bcachefs (loop6): reading snapshots done
[ 1054.679689][T15301] bcachefs (loop6): done starting filesystem
[ 1054.789562][T15301] syz.6.3535 (15301) used greatest stack depth: 784 bytes left
[ 1055.080600][T13026] bcachefs (loop6): shutting down
[ 1055.086584][T13026] bcachefs (loop6): going read-only
[ 1055.092026][T13026] bcachefs (loop6): finished waiting for writes to stop
[ 1055.172121][T13026] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3
[ 1055.216066][T15307] chnl_net:caif_netlink_parms(): no params data found
[ 1055.353918][T15332] loop1: detected capacity change from 0 to 512
[ 1055.409309][T13026] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3
[ 1055.491153][T15334] loop0: detected capacity change from 0 to 256
[ 1055.501674][T13026] bcachefs (loop6): clean shutdown complete, journal seq 4
[ 1055.511774][T13026] bcachefs (loop6): marking filesystem clean
[ 1055.546880][T12029] Bluetooth: hci2: command tx timeout
[ 1055.562121][T15334] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1055.573717][T15334] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[ 1055.591990][T15332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1055.605431][T15332] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1055.621625][T15334] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1055.668958][T13026] bcachefs (loop6): shutdown complete
[ 1056.904685][T15307] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1056.912524][T15307] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1056.920652][T15307] bridge_slave_0: entered allmulticast mode
[ 1056.931363][T15307] bridge_slave_0: entered promiscuous mode
[ 1057.022584][T15307] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1057.030595][T15307] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1057.038749][T15307] bridge_slave_1: entered allmulticast mode
[ 1057.048986][T15307] bridge_slave_1: entered promiscuous mode
[ 1057.313064][T12677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1057.541716][T15307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1057.625112][T12029] Bluetooth: hci2: command tx timeout
[ 1057.656476][T15307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1057.927218][T15307] team0: Port device team_slave_0 added
[ 1057.988561][T15307] team0: Port device team_slave_1 added
[ 1058.097846][T15361] loop0: detected capacity change from 0 to 1024
[ 1058.399440][T15364] loop1: detected capacity change from 0 to 1024
[ 1058.447244][T15307] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1058.454763][T15307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1058.483280][T15307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1058.591104][ T4166] hfsplus: b-tree write err: -5, ino 4
[ 1058.653671][T15307] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1058.660928][T15307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1058.687326][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1058.698400][T15307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1059.088834][ T4075] hfsplus: bad catalog file entry
[ 1059.218817][T15307] hsr_slave_0: entered promiscuous mode
[ 1059.246123][T15307] hsr_slave_1: entered promiscuous mode
[ 1059.704359][T12029] Bluetooth: hci2: command tx timeout
[ 1059.733382][T15375] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[ 1059.764403][T15374] loop0: detected capacity change from 0 to 512
[ 1059.875559][T15374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1060.420778][T13948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1061.349293][T15307] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1061.521874][T15307] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1061.595866][T15307] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1061.629135][T15307] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1061.794791][T12029] Bluetooth: hci2: command tx timeout
[ 1062.259244][T15408] bond0: option ad_select: unable to set because the bond device is up
[ 1062.858903][T15307] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1062.891253][T15412] No control pipe specified
[ 1063.132248][T15307] 8021q: adding VLAN 0 to HW filter on device team0
[ 1063.262697][ T4953] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1063.270362][ T4953] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1063.386607][ T4953] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1063.394527][ T4953] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1063.581862][T15418] loop6: detected capacity change from 0 to 512
[ 1063.682533][T15418] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1063.885434][T15418] EXT4-fs (loop6): 1 truncate cleaned up
[ 1063.894043][T15418] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1064.124597][T15418] fscrypt (loop6, inode 18): Direct key flag not allowed with different contents and filenames modes
[ 1064.543148][T13026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1065.764973][T15429] loop0: detected capacity change from 0 to 32768
[ 1065.846553][T15429] (syz.0.3576,15429,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1065.861921][T15429] (syz.0.3576,15429,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1065.902420][T15429] (syz.0.3576,15429,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[ 1065.930255][T15429] JBD2: Ignoring recovery information on journal
[ 1066.168068][T15429] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 1066.361739][T15429] (syz.0.3576,15429,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[ 1066.465554][T15429] (syz.0.3576,15429,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[ 1066.466333][T15437] loop6: detected capacity change from 0 to 256
[ 1066.482274][T15429] (syz.0.3576,15429,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[ 1066.509028][T15429] (syz.0.3576,15429,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[ 1066.523449][T15429] (syz.0.3576,15429,1):ocfs2_quota_read:201 ERROR: status = -5
[ 1066.531310][T15429] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 5
[ 1066.541222][T15429] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[ 1066.553651][T15429] (syz.0.3576,15429,1):ocfs2_acquire_dquot:890 ERROR: status = -5
[ 1066.562108][T15429] (syz.0.3576,15429,1):ocfs2_symlink:1894 ERROR: status = -5
[ 1066.570055][T15429] (syz.0.3576,15429,1):ocfs2_symlink:2080 ERROR: status = -5
[ 1066.674880][T15307] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1066.782024][T13948] ocfs2: Unmounting device (7,0) on (node local)
[ 1067.497164][ T5860] IPVS: starting estimator thread 0...
[ 1068.319577][T15443] loop6: detected capacity change from 0 to 32768
[ 1068.395988][T15444] IPVS: using max 192 ests per chain, 9600 per kthread
[ 1068.430366][T15443] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1068.681998][T13026] ocfs2: Unmounting device (7,6) on (node local)
[ 1069.583950][ T9538] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1069.811882][ T9538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1069.823630][ T9538] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1069.833118][ T9538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1069.933940][ T9538] usb 3-1: config 0 descriptor??
[ 1070.266516][ T9538] usbhid 3-1:0.0: can't add hid device: -71
[ 1070.273699][ T9538] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1070.375847][ T9538] usb 3-1: USB disconnect, device number 17
[ 1070.628781][T15307] veth0_vlan: entered promiscuous mode
[ 1070.750526][T15307] veth1_vlan: entered promiscuous mode
[ 1070.835556][ T9538] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1070.916209][T15463] loop6: detected capacity change from 0 to 1024
[ 1070.961923][T15463] EXT4-fs: Ignoring removed orlov option
[ 1071.039278][T15307] veth0_macvtap: entered promiscuous mode
[ 1071.064428][ T9538] usb 3-1: Using ep0 maxpacket: 32
[ 1071.086576][T15463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1071.088025][ T9538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1071.115321][ T9538] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[ 1071.126501][ T9538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1071.140306][ T9538] usb 3-1: config 0 descriptor??
[ 1071.151938][T15307] veth1_macvtap: entered promiscuous mode
[ 1071.159823][ T9538] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1071.173692][ T9538] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1071.359381][T15307] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1071.389023][ T9538] usb 3-1: USB disconnect, device number 18
[ 1071.444664][ T9538] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[ 1071.539942][T14026] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0
[ 1071.540120][T15307] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1071.551308][T14026] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0
[ 1071.564528][T14026] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0
[ 1071.672285][T14026] hid-generic 0003:0004:0000.001F: hidraw0: USB HID v0.00 Device [syz0] on syz1
[ 1071.697610][ T2131] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1071.746688][ T2131] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1071.788066][ T4075] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1071.837380][ T4075] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1071.865198][T13026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1072.282576][T15475] veth1_to_batadv: entered promiscuous mode
[ 1072.299420][T15475] veth1_to_batadv: left promiscuous mode
[ 1073.262087][T15490] dlm: Unknown command passed to DLM device : 9
[ 1073.262087][T15490] 
[ 1076.569099][T15524] loop1: detected capacity change from 0 to 512
[ 1076.716330][T15524] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3608: casefold flag without casefold feature
[ 1076.736494][T15524] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3608: couldn't read orphan inode 15 (err -117)
[ 1076.785247][T15524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1076.935382][T15524] fscrypt (loop1, inode 18): Direct key flag not allowed with different contents and filenames modes
[ 1077.395976][T12677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1077.703736][T15540] loop6: detected capacity change from 0 to 1024
[ 1079.112516][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3621'.
[ 1079.141077][T15560] vlan3: entered allmulticast mode
[ 1080.180884][ T4075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1080.189224][ T4075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1080.392408][ T9538] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1080.553149][ T4075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1080.561426][ T4075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1080.603964][ T9538] usb 2-1: Using ep0 maxpacket: 32
[ 1080.667428][ T9538] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1080.677014][ T9538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1080.685362][ T9538] usb 2-1: Product: syz
[ 1080.689755][ T9538] usb 2-1: Manufacturer: syz
[ 1080.695039][ T9538] usb 2-1: SerialNumber: syz
[ 1080.783816][ T9538] usb 2-1: config 0 descriptor??
[ 1080.811748][ T9538] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1081.284441][T15578] loop6: detected capacity change from 0 to 64
[ 1081.700635][ T9538] gspca_stk1135: reg_w 0x5 err -71
[ 1081.707233][ T9538] gspca_stk1135: serial bus timeout: status=0x00
[ 1081.714891][ T9538] gspca_stk1135: Sensor write failed
[ 1081.720425][ T9538] gspca_stk1135: serial bus timeout: status=0x00
[ 1081.727176][ T9538] gspca_stk1135: Sensor write failed
[ 1081.732702][ T9538] gspca_stk1135: serial bus timeout: status=0x00
[ 1081.739562][ T9538] gspca_stk1135: Sensor read failed
[ 1081.745142][ T9538] gspca_stk1135: serial bus timeout: status=0x00
[ 1081.751642][ T9538] gspca_stk1135: Sensor read failed
[ 1081.766778][ T9538] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1081.776471][ T9538] gspca_stk1135: serial bus timeout: status=0x00
[ 1081.784340][ T9538] gspca_stk1135: Sensor read failed
[ 1081.789831][ T9538] gspca_stk1135: serial bus timeout: status=0x00
[ 1081.796566][ T9538] gspca_stk1135: Sensor read failed
[ 1081.802042][ T9538] gspca_stk1135: serial bus timeout: status=0x00
[ 1081.808868][ T9538] gspca_stk1135: Sensor write failed
[ 1081.814750][ T9538] gspca_stk1135: serial bus timeout: status=0x00
[ 1081.821355][ T9538] gspca_stk1135: Sensor write failed
[ 1081.827295][ T9538] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71
[ 1082.081843][ T9538] usb 2-1: USB disconnect, device number 18
[ 1082.386633][T15588] loop0: detected capacity change from 0 to 512
[ 1082.695844][T15588] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3634: bg 0: block 248: padding at end of block bitmap is not set
[ 1082.798704][T15588] Quota error (device loop0): write_blk: dquota write failed
[ 1082.811042][T15588] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[ 1082.821690][T15588] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3634: Failed to acquire dquot type 1
[ 1082.937014][T15588] EXT4-fs (loop0): 1 truncate cleaned up
[ 1082.945700][T15588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1082.961645][T15588] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1083.140453][T15588] EXT4-fs (loop0): shut down requested (2)
[ 1083.379813][T15607] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1083.387397][T15607] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1083.469749][T13948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1084.043177][T15617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3644'.
[ 1084.711903][T15627] @: renamed from vlan0 (while UP)
[ 1085.605266][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3652'.
[ 1086.150362][T15639] loop6: detected capacity change from 0 to 512
[ 1086.293646][T15639] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.3654: casefold flag without casefold feature
[ 1086.406281][T15639] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3654: couldn't read orphan inode 15 (err -117)
[ 1086.535517][T15639] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1087.237724][T13026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1087.439640][T15653] loop1: detected capacity change from 0 to 1024
[ 1087.590710][T15653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1087.686469][T15660] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3664'.
[ 1087.733683][T12029] block nbd0: Receive control failed (result -32)
[ 1087.760802][   T30] audit: type=1800 audit(1754712842.394:164): pid=15653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3660" name="file1" dev="loop1" ino=839 res=0 errno=0
[ 1087.871410][T15664] loop8: detected capacity change from 0 to 64
[ 1089.120378][   T30] audit: type=1326 audit(1754712843.744:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15680 comm="syz.0.3673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bf678ebe9 code=0x0
[ 1090.140832][ T9538] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1090.366945][ T9538] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1090.375774][ T9538] usb 9-1: config 0 has no interface number 0
[ 1090.382107][ T9538] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1090.393357][ T9538] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1090.403626][ T9538] usb 9-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1090.416920][ T9538] usb 9-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[ 1090.426389][ T9538] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1090.450633][T15702] overlayfs: invalid origin (0000)
[ 1090.655601][ T9538] usb 9-1: config 0 descriptor??
[ 1091.371451][ T9538] input: HID 28bd:0042 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0042.0020/input/input32
[ 1091.545364][ T9538] uclogic 0003:28BD:0042.0020: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.8-1/input1
[ 1091.641787][ T9538] usb 9-1: USB disconnect, device number 9
[ 1092.654145][T15725] loop6: detected capacity change from 0 to 1764
[ 1092.680933][T15725] iso9660: Unknown parameter 'mode�0x0000000000000001'
[ 1092.856389][T15725] tmpfs: Unexpected value for 'quota'
[ 1094.201870][T15752] loop0: detected capacity change from 0 to 2048
[ 1094.395649][T15752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1094.492416][T15752] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1094.638157][T15763] loop6: detected capacity change from 0 to 16
[ 1094.672397][   T30] audit: type=1800 audit(1754712849.304:166): pid=15752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3706" name="file1" dev="loop0" ino=15 res=0 errno=0
[ 1094.710155][T15763] erofs (device loop6): mounted with root inode @ nid 36.
[ 1094.750547][T15748] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.3706: bit already cleared for inode 15
[ 1094.820700][T15763] erofs (device loop6): corrupted dir block 8200 @ nid 36
[ 1094.860814][T15763] erofs (device loop6): readahead error at folio 26 @ nid 36
[ 1094.878964][T15763] erofs (device loop6): readahead error at folio 25 @ nid 36
[ 1094.892128][T15763] erofs (device loop6): readahead error at folio 24 @ nid 36
[ 1094.900062][T15763] erofs (device loop6): readahead error at folio 23 @ nid 36
[ 1094.908906][T15763] erofs (device loop6): readahead error at folio 22 @ nid 36
[ 1094.919264][T15763] erofs (device loop6): readahead error at folio 21 @ nid 36
[ 1094.927134][T15763] erofs (device loop6): readahead error at folio 20 @ nid 36
[ 1094.935203][T15763] erofs (device loop6): readahead error at folio 18 @ nid 36
[ 1094.945704][T15763] erofs (device loop6): readahead error at folio 16 @ nid 36
[ 1094.954087][T15763] erofs (device loop6): readahead error at folio 12 @ nid 36
[ 1094.962207][T15763] syz.6.3710: attempt to access beyond end of device
[ 1094.962207][T15763] loop6: rw=524288, sector=720, nr_sectors = 16 limit=16
[ 1094.985823][T15763] syz.6.3710: attempt to access beyond end of device
[ 1094.985823][T15763] loop6: rw=524288, sector=525144, nr_sectors = 16 limit=16
[ 1095.003164][T15763] syz.6.3710: attempt to access beyond end of device
[ 1095.003164][T15763] loop6: rw=524288, sector=16, nr_sectors = 8 limit=16
[ 1095.020135][T15763] syz.6.3710: attempt to access beyond end of device
[ 1095.020135][T15763] loop6: rw=524288, sector=13716630376, nr_sectors = 8 limit=16
[ 1095.089558][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1095.097140][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1095.430336][T13948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1095.953228][ T9538] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1096.163094][ T9538] usb 7-1: Using ep0 maxpacket: 16
[ 1096.212375][ T9538] usb 7-1: config 1 has an invalid interface number: 105 but max is 0
[ 1096.221227][ T9538] usb 7-1: config 1 has no interface number 0
[ 1096.228013][ T9538] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1096.238359][ T9538] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1096.248964][ T9538] usb 7-1: config 1 interface 105 has no altsetting 0
[ 1096.385526][ T9538] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 1096.395434][ T9538] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1096.411167][ T9538] usb 7-1: Product: syz
[ 1096.418409][ T9538] usb 7-1: Manufacturer: syz
[ 1096.423810][ T9538] usb 7-1: SerialNumber: syz
[ 1096.464581][T15774] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1096.472723][T15774] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1097.004064][T15774] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1097.058754][T15774] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1097.492969][ T9538] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[ 1097.554322][ T9538] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[ 1097.602865][ T9538] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[ 1097.646225][ T9538] aqc111 7-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d6:c0:fd:34:34:63
[ 1097.798442][ T9538] usb 7-1: USB disconnect, device number 19
[ 1097.808351][ T9538] aqc111 7-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[ 1098.018412][ T9538] aqc111 7-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1098.028917][ T9538] aqc111 7-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1098.046076][ T9538] aqc111 7-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[ 1099.343542][ T9538] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1099.534791][ T9538] usb 7-1: Using ep0 maxpacket: 16
[ 1099.565733][ T9538] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1099.583389][ T9538] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1099.597217][ T9538] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1099.607644][ T9538] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1099.618127][ T9538] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1099.635293][T15823] netlink: 277 bytes leftover after parsing attributes in process `syz.8.3737'.
[ 1099.659901][ T9538] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1099.669853][ T9538] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1099.684673][ T9538] usb 7-1: Manufacturer: syz
[ 1099.718188][ T9538] usb 7-1: config 0 descriptor??
[ 1100.413664][ T9538] rc_core: IR keymap rc-hauppauge not found
[ 1100.419791][ T9538] Registered IR keymap rc-empty
[ 1100.425726][ T9538] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1100.438183][T15815] loop6: detected capacity change from 0 to 1764
[ 1100.514115][ T9538] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1100.543992][ T9538] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[ 1100.558941][ T9538] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input33
[ 1100.679499][ T9538] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1100.811847][ T9538] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1100.833604][ T9538] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1100.855255][ T9538] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1100.884630][ T9538] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1100.922217][ T9538] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1100.960688][T15837] loop1: detected capacity change from 0 to 64
[ 1100.965133][ T9538] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1100.995919][ T9538] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1101.048505][ T9538] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1101.079023][ T9538] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 1101.193571][ T9538] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1101.203409][ T9538] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1101.333732][ T9538] usb 7-1: USB disconnect, device number 20
[ 1103.101432][T15853] loop0: detected capacity change from 0 to 4096
[ 1103.442195][T15862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3753'.
[ 1103.701719][T15858] loop1: detected capacity change from 0 to 32768
[ 1103.842008][T15858] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[ 1103.842180][T15858]   allowing incompatible features above 0.0: (unknown version)
[ 1103.842277][T15858]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 1103.893759][T15858] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[ 1103.903309][T15858] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[ 1103.913140][T15858] bcachefs (loop1): Version upgrade required:
[ 1103.913140][T15858] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[ 1103.913140][T15858] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[ 1103.913140][T15858]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[ 1104.001976][T15858] bcachefs (loop1): dropping and reconstructing all alloc info
[ 1104.064486][T15858] bcachefs (loop1): accounting_read... done
[ 1104.117426][T15858] bcachefs (loop1): alloc_read... done
[ 1104.128243][T15858] bcachefs (loop1): snapshots_read... done
[ 1104.146598][T15858] bcachefs (loop1): check_allocations... done
[ 1104.381477][T15858] bcachefs (loop1): going read-write
[ 1104.394846][T15858] bcachefs (loop1): insufficient writeable journal devices available: have 0, need 1
[ 1104.394846][T15858] rw journal devs:
[ 1104.514581][T15858] bcachefs (loop1): done starting filesystem
[ 1104.808559][T12677] bcachefs (loop1): shutting down
[ 1104.814006][T12677] bcachefs (loop1): going read-only
[ 1104.820317][T12677] bcachefs (loop1): finished waiting for writes to stop
[ 1104.885291][T12677] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10
[ 1104.933448][T12677] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10
[ 1104.963375][T12677] bcachefs (loop1): unclean shutdown complete, journal seq 10
[ 1105.045397][T12677] bcachefs (loop1): done going read-only, filesystem not clean
[ 1105.124900][T15873] loop6: detected capacity change from 0 to 4096
[ 1105.182037][T12677] bcachefs (loop1): shutdown complete
[ 1107.384654][ T5104] Bluetooth: hci3: command 0x0406 tx timeout
[ 1107.576927][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3769'.
[ 1108.435027][T15918] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1108.703860][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3774'.
[ 1108.716113][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3774'.
[ 1110.443293][ T9538] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1110.648893][ T9538] usb 7-1: Using ep0 maxpacket: 16
[ 1110.708944][ T9538] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1110.721097][ T9538] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1110.721349][ T9538] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[ 1110.721497][ T9538] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1110.773513][ T9538] usb 7-1: config 0 descriptor??
[ 1110.839736][T15945] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1111.316799][ T9538] playstation 0003:054C:0DF2.0021: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0
[ 1111.436512][ T9538] playstation 0003:054C:0DF2.0021: Invalid reportID received, expected 9 got 184
[ 1111.446524][ T9538] playstation 0003:054C:0DF2.0021: Failed to retrieve DualSense pairing info: -22
[ 1111.466630][ T9538] playstation 0003:054C:0DF2.0021: Failed to get MAC address from DualSense
[ 1111.478678][ T9538] playstation 0003:054C:0DF2.0021: Failed to create dualsense.
[ 1111.609131][ T9538] playstation 0003:054C:0DF2.0021: probe with driver playstation failed with error -22
[ 1111.724392][ T9538] usb 7-1: USB disconnect, device number 21
[ 1112.529049][T15968] loop8: detected capacity change from 0 to 128
[ 1112.875907][T15968] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1113.054282][T15968] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1113.319104][T15967] loop1: detected capacity change from 0 to 32768
[ 1113.530573][T15967] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[ 1113.530751][T15967]   allowing incompatible features above 0.0: (unknown version)
[ 1113.530844][T15967]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 1113.580638][T15967] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[ 1113.589347][T15967] bcachefs (loop1): initializing new filesystem
[ 1113.612281][T15967] bcachefs (loop1): going read-write
[ 1113.694715][T15967] bcachefs (loop1): marking superblocks
[ 1113.768592][T15967] bcachefs (loop1): initializing freespace
[ 1113.798607][T15967] bcachefs (loop1): done initializing freespace
[ 1113.828486][T15967] bcachefs (loop1): reading snapshots table
[ 1113.834941][T15967] bcachefs (loop1): reading snapshots done
[ 1114.018943][T15967] bcachefs (loop1): done starting filesystem
[ 1114.079423][T15990] loop0: detected capacity change from 0 to 512
[ 1114.089957][T15990] EXT4-fs: Ignoring removed oldalloc option
[ 1114.122141][T15307] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1114.183773][T15990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1114.197699][T15990] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1114.391241][T12677] bcachefs (loop1): shutting down
[ 1114.397466][T12677] bcachefs (loop1): going read-only
[ 1114.403171][T12677] bcachefs (loop1): finished waiting for writes to stop
[ 1114.417776][T12677] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[ 1114.543708][T15990] EXT4-fs error (device loop0): ext4_empty_dir:3081: inode #12: comm syz.0.3796: invalid size
[ 1114.735555][T12677] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[ 1114.773862][T12677] bcachefs (loop1): clean shutdown complete, journal seq 4
[ 1114.784963][T12677] bcachefs (loop1): marking filesystem clean
[ 1114.840895][T15998] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[ 1114.925684][T12677] bcachefs (loop1): shutdown complete
[ 1115.020863][T13948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1115.465021][T16000] loop8: detected capacity change from 0 to 4096
[ 1115.508095][T16000] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512).
[ 1115.829152][T16000] ntfs3(loop8): Failed to initialize $Extend/$ObjId.
[ 1117.632815][T16019] loop0: detected capacity change from 0 to 32768
[ 1117.728305][T16019] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1118.075114][T16019] XFS (loop0): Ending clean mount
[ 1118.090865][T16019] XFS (loop0): Quotacheck needed: Please wait.
[ 1118.168814][T16019] XFS (loop0): Quotacheck: Done.
[ 1118.350196][T13948] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1118.684468][T14026] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1118.893714][T14026] usb 9-1: Using ep0 maxpacket: 8
[ 1118.910190][T14026] usb 9-1: config 0 has an invalid interface number: 31 but max is 0
[ 1118.921504][T14026] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1118.938300][T14026] usb 9-1: config 0 has no interface number 0
[ 1119.053736][T14026] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1119.066156][T14026] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1119.075026][T14026] usb 9-1: Product: syz
[ 1119.079406][T14026] usb 9-1: Manufacturer: syz
[ 1119.084605][T14026] usb 9-1: SerialNumber: syz
[ 1119.144230][T14026] usb 9-1: config 0 descriptor??
[ 1119.427950][ T9538] usb 9-1: USB disconnect, device number 10
[ 1119.708792][T16047] team0: No ports can be present during mode change
[ 1120.358308][T16056] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3821'.
[ 1121.055114][T16069] loop6: detected capacity change from 0 to 64
[ 1121.132419][T16069] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing
[ 1122.620296][T16079] loop6: detected capacity change from 0 to 4096
[ 1125.256271][T16127] Falling back ldisc for ptm0.
[ 1126.456240][T16137] loop8: detected capacity change from 0 to 1024
[ 1127.568815][T13234] hfsplus: b-tree write err: -5, ino 4
[ 1127.753676][T14026] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[ 1128.052304][T14026] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1128.064362][T14026] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1128.077052][T14026] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1128.086713][T14026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1128.730168][T16154] loop8: detected capacity change from 0 to 512
[ 1128.835939][T16155] netlink: 'syz.6.3865': attribute type 1 has an invalid length.
[ 1128.844353][T16155] netlink: 'syz.6.3865': attribute type 2 has an invalid length.
[ 1128.957790][T16154] EXT4-fs: Ignoring removed oldalloc option
[ 1129.002014][T14026] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[ 1129.015759][T14026] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input34
[ 1129.159303][T16154] EXT4-fs (loop8): 1 truncate cleaned up
[ 1129.172276][T16154] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1129.216561][T14026] input: failed to attach handler kbd to device input34, error: -5
[ 1129.379514][T14026] usb 1-1: USB disconnect, device number 15
[ 1130.335668][T16162] loop1: detected capacity change from 0 to 512
[ 1130.451323][T16162] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1130.655580][T15307] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1130.735626][T16162] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3867: Invalid block bitmap block 0 in block_group 0
[ 1130.894495][T16162] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[ 1131.028713][T16162] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.3867: attempt to clear invalid blocks 983261 len 1
[ 1131.159803][T16162] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.3867: Invalid inode table block 0 in block_group 0
[ 1131.297084][T16162] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[ 1131.457717][T16162] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[ 1131.583267][T16162] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.3867: Invalid inode table block 0 in block_group 0
[ 1131.800398][T16162] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[ 1131.938048][T16162] EXT4-fs error (device loop1): ext4_truncate:4666: inode #11: comm syz.1.3867: mark_inode_dirty error
[ 1132.066352][T16162] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[ 1132.167211][T16162] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.3867: Invalid inode table block 0 in block_group 0
[ 1132.301547][T16162] EXT4-fs (loop1): 1 truncate cleaned up
[ 1132.312583][T16162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1133.515647][T16178] input: syz0 as /devices/virtual/input/input35
[ 1133.599301][T12677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1134.147301][T16190] loop8: detected capacity change from 0 to 256
[ 1135.199495][ T9538] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1135.364002][T16211] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3888'.
[ 1135.424686][ T9538] usb 7-1: Using ep0 maxpacket: 16
[ 1135.457539][ T9538] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1135.468028][ T9538] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1135.477135][ T9538] usb 7-1: Product: syz
[ 1135.481625][ T9538] usb 7-1: Manufacturer: syz
[ 1135.486693][ T9538] usb 7-1: SerialNumber: syz
[ 1135.569409][ T9538] usb 7-1: config 0 descriptor??
[ 1135.666678][T16212] loop8: detected capacity change from 0 to 512
[ 1135.842082][T16212] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1135.855696][T16212] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1135.893571][ T1591] usb 7-1: USB disconnect, device number 22
[ 1136.064933][ T9538] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1136.243279][ T9538] usb 2-1: Using ep0 maxpacket: 32
[ 1136.283455][ T9538] usb 2-1: config 0 has no interfaces?
[ 1136.289384][ T9538] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1136.299671][ T9538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1136.319693][ T9538] usb 2-1: config 0 descriptor??
[ 1136.320177][T15307] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1136.578578][ T9538] usb 2-1: USB disconnect, device number 19
[ 1137.608987][T16241] loop1: detected capacity change from 0 to 256
[ 1137.709893][T16239] loop6: detected capacity change from 0 to 1024
[ 1137.756848][T16239] EXT4-fs: Ignoring removed bh option
[ 1137.763217][T16239] EXT4-fs: Ignoring removed nobh option
[ 1137.776017][T16239] EXT4-fs: inline encryption not supported
[ 1137.993719][T16239] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1138.011506][T16253] loop1: detected capacity change from 0 to 164
[ 1138.051857][T16253] Unable to read rock-ridge attributes
[ 1138.126734][T16253] Unable to read rock-ridge attributes
[ 1138.218427][T16239] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.3900: Allocating blocks 385-513 which overlap fs metadata
[ 1138.370421][T16256] EXT4-fs (loop6): pa ffff888122fa63f0: logic 16, phys. 129, len 24
[ 1138.379059][T16256] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[ 1138.831250][T13026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1139.596593][T14026] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1139.852262][T14026] usb 1-1: Using ep0 maxpacket: 32
[ 1139.878966][T14026] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[ 1139.894468][T14026] usb 1-1: config 0 has no interface number 0
[ 1139.967168][T14026] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1139.980273][T14026] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1139.988943][T14026] usb 1-1: Product: syz
[ 1139.993482][T14026] usb 1-1: Manufacturer: syz
[ 1139.998398][T14026] usb 1-1: SerialNumber: syz
[ 1140.055678][T14026] usb 1-1: config 0 descriptor??
[ 1140.088425][T14026] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1140.306205][T14026] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1140.370174][T16283] loop1: detected capacity change from 0 to 2048
[ 1140.379493][T14026] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1140.589061][T16283] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[ 1140.603918][T16287] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1140.671946][T16283] Remounting filesystem read-only
[ 1140.698996][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1140.713831][T14026] usb 1-1: USB disconnect, device number 16
[ 1140.748032][T14026] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1140.790672][T14026] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1140.804634][T14026] quatech2 1-1:0.51: device disconnected
[ 1141.369237][T16296] loop6: detected capacity change from 0 to 512
[ 1141.404768][T16296] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1141.498870][T16296] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.3924: bad orphan inode 131083
[ 1141.646850][T16296] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1142.161240][T13026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1142.609931][T16313] tap0: tun_chr_ioctl cmd 2147767521
[ 1144.249494][T16334] kvm: kvm [16333]: vcpu1, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008d)
[ 1144.916449][T16343] loop6: detected capacity change from 0 to 64
[ 1145.084816][T16342] Trying to free block not in datazone
[ 1145.270372][T16347] loop1: detected capacity change from 0 to 1024
[ 1145.738583][T16353] netlink: 'syz.6.3948': attribute type 3 has an invalid length.
[ 1145.747301][T16353] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3948'.
[ 1145.935578][ T1154] hfsplus: b-tree write err: -5, ino 4
[ 1146.212475][ T9538] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[ 1146.220549][ T9538] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[ 1146.228581][ T9538] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[ 1146.236494][ T9538] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[ 1146.251399][ T9538] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[ 1146.262154][ T9538] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[ 1146.270009][ T9538] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[ 1146.289925][ T9538] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[ 1146.303081][ T9538] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[ 1146.311027][ T9538] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[ 1146.319121][ T9538] hid-generic 0000:0000:0000.0022: item fetching failed at offset 16/83
[ 1146.338796][ T9538] hid-generic 0000:0000:0000.0022: probe with driver hid-generic failed with error -22
[ 1146.800038][T16357] loop8: detected capacity change from 0 to 4096
[ 1147.018026][T16364] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1147.067703][T16363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3953'.
[ 1147.163170][   T30] audit: type=1800 audit(1754712901.744:167): pid=16357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3950" name="file1" dev="loop8" ino=15 res=0 errno=0
[ 1148.677403][T16387] loop1: detected capacity change from 0 to 1024
[ 1148.705278][T16387] EXT4-fs: Ignoring removed oldalloc option
[ 1148.712033][T16387] EXT4-fs: Ignoring removed orlov option
[ 1148.782009][T16387] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[ 1149.136421][T16387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1149.917283][T12677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1151.132487][T16411] loop8: detected capacity change from 0 to 2048
[ 1151.254059][T16411] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1152.264510][T16431] program syz.8.3979 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1152.294367][ T9538] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1152.499888][ T9538] usb 2-1: Using ep0 maxpacket: 32
[ 1152.556286][ T9538] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1152.607539][ T9538] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1152.624286][ T9538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1152.638516][ T9538] usb 2-1: Product: syz
[ 1152.643283][ T9538] usb 2-1: Manufacturer: syz
[ 1152.648111][ T9538] usb 2-1: SerialNumber: syz
[ 1152.709030][ T9538] usb 2-1: config 0 descriptor??
[ 1153.017386][T16441] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3985'.
[ 1153.176195][ T9538] gs_usb 2-1:0.0: Configuring for 2 interfaces
[ 1153.388156][ T9538] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO)
[ 1153.399748][ T9538] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121
[ 1153.595007][ T9538] usb 2-1: USB disconnect, device number 20
[ 1153.613753][ T1591] kernel read not supported for file /dsp1 (pid: 1591 comm: kworker/0:2)
[ 1155.144395][ T9538] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1155.297401][T12029] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[ 1155.301717][T16470] loop8: detected capacity change from 0 to 1024
[ 1155.308147][T12029] CPU: 1 UID: 0 PID: 12029 Comm: kworker/u9:0 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) 
[ 1155.308342][T12029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1155.308482][T12029] Workqueue: hci5 hci_rx_work
[ 1155.308715][T12029] Call Trace:
[ 1155.308780][T12029]  <TASK>
[ 1155.308844][T12029]  __dump_stack+0x26/0x30
[ 1155.309053][T12029]  dump_stack_lvl+0x1df/0x270
[ 1155.309284][T12029]  dump_stack+0x1e/0x25
[ 1155.309479][T12029]  sysfs_create_dir_ns+0x46c/0x540
[ 1155.309746][T12029]  kobject_add_internal+0xeed/0x1840
[ 1155.310020][T12029]  kobject_add+0x2c1/0x410
[ 1155.310278][T12029]  ? kmsan_get_metadata+0xfb/0x160
[ 1155.310474][T12029]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1155.310689][T12029]  device_add+0xa70/0x1c10
[ 1155.310948][T12029]  hci_conn_add_sysfs+0x15f/0x2f0
[ 1155.311178][T12029]  le_conn_complete_evt+0x1b35/0x21b0
[ 1155.311408][T12029]  hci_le_conn_complete_evt+0x157/0x260
[ 1155.311683][T12029]  hci_le_meta_evt+0x6e8/0x960
[ 1155.311912][T12029]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1155.312197][T12029]  hci_event_packet+0xce2/0x1e40
[ 1155.312419][T12029]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1155.312709][T12029]  hci_rx_work+0x9a8/0x12b0
[ 1155.312952][T12029]  ? __pfx_hci_rx_work+0x10/0x10
[ 1155.313183][T12029]  process_scheduled_works+0xb91/0x1d80
[ 1155.313488][T12029]  worker_thread+0xedf/0x1590
[ 1155.313766][T12029]  kthread+0xd59/0xf00
[ 1155.313929][T12029]  ? __pfx_worker_thread+0x10/0x10
[ 1155.314196][T12029]  ? __pfx_kthread+0x10/0x10
[ 1155.314342][T12029]  ret_from_fork+0x1e3/0x310
[ 1155.314491][T12029]  ? __pfx_kthread+0x10/0x10
[ 1155.314674][T12029]  ret_from_fork_asm+0x1a/0x30
[ 1155.314932][T12029]  </TASK>
[ 1155.318231][T12029] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1155.353708][ T9538] usb 7-1: Using ep0 maxpacket: 16
[ 1155.355919][T12029] Bluetooth: hci5: failed to register connection device
[ 1155.429502][ T9538] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1155.440648][T16470] EXT4-fs: Ignoring removed orlov option
[ 1155.444542][ T9538] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1155.444675][ T9538] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1155.450396][T16470] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1155.621173][ T9538] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1155.632031][ T9538] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1155.640397][ T9538] usb 7-1: Product: syz
[ 1155.644862][ T9538] usb 7-1: Manufacturer: syz
[ 1155.649658][ T9538] usb 7-1: SerialNumber: syz
[ 1155.735435][T16470] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1156.143893][ T9538] usb 7-1: 0:2 : does not exist
[ 1156.387866][T15307] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1156.537272][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1156.544162][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1156.646778][ T9538] usb 7-1: 1:0: cannot get min/max values for control 2 (id 1)
[ 1156.833066][ T9538] usb 7-1: USB disconnect, device number 23
[ 1156.877523][T16489] program syz.2.4006 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1157.004000][T16491] netlink: 'syz.8.4004': attribute type 83 has an invalid length.
[ 1157.068710][T16492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4007'.
[ 1159.235831][T16515] loop6: detected capacity change from 0 to 32768
[ 1159.926374][T16525] loop0: detected capacity change from 0 to 1024
[ 1159.956003][T16525] EXT4-fs: Ignoring removed i_version option
[ 1160.041555][T16528] loop1: detected capacity change from 0 to 128
[ 1160.137273][T16525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1160.212202][T16534] loop8: detected capacity change from 0 to 128
[ 1160.256708][T16528] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1160.306436][T16528] ext4 filesystem being mounted at /303/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1160.407007][T16528] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x17)
[ 1160.556638][T13948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1160.873226][T12677] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1161.154829][T16544] team_slave_0: entered promiscuous mode
[ 1161.160799][T16544] team_slave_1: entered promiscuous mode
[ 1161.189960][T16541] team_slave_0: left promiscuous mode
[ 1161.196264][T16541] team_slave_1: left promiscuous mode
[ 1162.320446][T16559] loop0: detected capacity change from 0 to 512
[ 1162.383861][T16559] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1162.491563][T16559] EXT4-fs (loop0): 1 truncate cleaned up
[ 1162.500335][T16559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1162.644782][T16565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4037'.
[ 1162.679341][T16565] bond0: entered promiscuous mode
[ 1162.684810][T16565] bond_slave_0: entered promiscuous mode
[ 1162.691783][T16565] bond_slave_1: entered promiscuous mode
[ 1162.790767][T16565] bond0: left promiscuous mode
[ 1162.796025][T16565] bond_slave_0: left promiscuous mode
[ 1162.803165][T16565] bond_slave_1: left promiscuous mode
[ 1162.832608][T16559] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1163.251431][T14026] kernel write not supported for file /dsp1 (pid: 14026 comm: kworker/1:1)
[ 1163.347600][T13948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1163.970231][T16582] loop0: detected capacity change from 0 to 2048
[ 1164.129273][T16582] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1164.657810][T16592] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4049'.
[ 1165.391573][T16607] loop1: detected capacity change from 0 to 64
[ 1165.408496][T16607] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[ 1165.654893][T16598] loop0: detected capacity change from 0 to 4096
[ 1165.695114][T16598] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[ 1166.657735][T16623] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4063'.
[ 1167.256734][T16631] input: syz0 as /devices/virtual/input/input36
[ 1167.352051][T16635] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[ 1167.364909][T16635] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[ 1167.924597][T16639] loop8: detected capacity change from 0 to 1024
[ 1168.057950][T16639] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1168.767425][T16655] loop6: detected capacity change from 0 to 22
[ 1168.877349][T16655] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1170.307443][T16683] loop1: detected capacity change from 0 to 128
[ 1170.354848][T16683] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 1170.580042][T16688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4091'.
[ 1170.589642][T16688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4091'.
[ 1170.599181][T16688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4091'.
[ 1170.611424][T16688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4091'.
[ 1170.620902][T16688] netlink: 'syz.2.4091': attribute type 6 has an invalid length.
[ 1170.648976][T14026] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1170.730974][T16689] loop0: detected capacity change from 0 to 128
[ 1170.795343][T16689] qnx6: Unknown parameter 'mmi_ف�e'k����{���ڟ!N��X��J�!��|�#7^�?��|������YP�?i��`]�s';�YB@�G�Q�;��-��I�h� @���D�'
[ 1170.896239][T14026] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1170.906827][T14026] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1170.917812][T14026] usb 9-1: Product: syz
[ 1170.922208][T14026] usb 9-1: Manufacturer: syz
[ 1170.927399][T14026] usb 9-1: SerialNumber: syz
[ 1171.069377][T14026] usb 9-1: config 0 descriptor??
[ 1171.173910][T16682] loop6: detected capacity change from 0 to 8192
[ 1171.366860][T14026] usb 9-1: USB disconnect, device number 11
[ 1173.527071][T16715] loop0: detected capacity change from 0 to 256
[ 1173.655703][T16715] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1175.879386][ T1154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.057885][T16745] loop6: detected capacity change from 0 to 1024
[ 1176.084034][ T1154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.289324][ T1154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.328977][T16750] hfsplus: request for non-existent node 134217728 in B*Tree
[ 1176.339580][T16750] hfsplus: request for non-existent node 134217728 in B*Tree
[ 1176.411698][T16743] loop8: detected capacity change from 0 to 4096
[ 1176.448216][T16745] hfsplus: hfsplus: Invalid key length: 30878
[ 1176.448871][T16743] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[ 1176.529446][ T1154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.848627][T16743] ntfs3(loop8): ino=19, mi_enum_attr
[ 1176.881885][ T1154] bridge_slave_1: left allmulticast mode
[ 1176.896917][ T1154] bridge_slave_1: left promiscuous mode
[ 1176.906105][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1176.959253][ T1154] bridge_slave_0: left allmulticast mode
[ 1176.965907][ T1154] bridge_slave_0: left promiscuous mode
[ 1176.972627][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1176.976304][T16743] ntfs3(loop8): failed to convert "c46c" to iso8859-7
[ 1177.013399][T16743] ntfs3(loop8): ino=20, mi_enum_attr
[ 1177.846069][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1177.929462][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1177.973155][ T1154] bond0 (unregistering): Released all slaves
[ 1178.685820][ T1154] hsr_slave_0: left promiscuous mode
[ 1178.716391][ T1154] hsr_slave_1: left promiscuous mode
[ 1178.725145][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1178.740222][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1178.810882][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1178.818874][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1179.056589][ T1154] veth1_macvtap: left promiscuous mode
[ 1179.062869][ T1154] veth0_macvtap: left promiscuous mode
[ 1179.075014][ T1154] veth1_vlan: left promiscuous mode
[ 1179.080638][ T1154] veth0_vlan: left promiscuous mode
[ 1179.085376][T12029] Bluetooth: hci2: command 0x0406 tx timeout
[ 1179.409608][T16764] loop6: detected capacity change from 0 to 1024
[ 1179.485574][T12029] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1179.500699][T12029] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1179.514468][T12029] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1179.555887][T12029] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1179.587136][T12029] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1180.431060][ T1154] team0 (unregistering): Port device team_slave_1 removed
[ 1180.531402][ T1154] team0 (unregistering): Port device team_slave_0 removed
[ 1181.704532][T12029] Bluetooth: hci3: command tx timeout
[ 1181.896912][T16771] chnl_net:caif_netlink_parms(): no params data found
[ 1183.717902][T16771] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1183.728345][T16771] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1183.736343][T16771] bridge_slave_0: entered allmulticast mode
[ 1183.752070][T16771] bridge_slave_0: entered promiscuous mode
[ 1183.783629][T12029] Bluetooth: hci3: command tx timeout
[ 1183.961465][T16771] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1183.971904][T16771] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1183.980023][T16771] bridge_slave_1: entered allmulticast mode
[ 1183.989978][T16771] bridge_slave_1: entered promiscuous mode
[ 1184.398939][T16824] loop6: detected capacity change from 0 to 1024
[ 1184.426512][T16771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1184.538556][T16771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1184.628845][T16824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1184.808058][T16771] team0: Port device team_slave_0 added
[ 1184.827071][T16771] team0: Port device team_slave_1 added
[ 1185.235545][T16771] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1185.242962][T16771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1185.271318][T16771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1185.296292][T13026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1185.315828][T16771] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1185.323287][T16771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1185.351385][T16771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1185.863100][T12029] Bluetooth: hci3: command tx timeout
[ 1185.890306][T16771] hsr_slave_0: entered promiscuous mode
[ 1185.910017][T16771] hsr_slave_1: entered promiscuous mode
[ 1185.919490][T16771] debugfs: 'hsr0' already exists in 'hsr'
[ 1185.925585][T16771] Cannot create hsr debugfs directory
[ 1185.995210][T16842] netlink: 'syz.8.4153': attribute type 49 has an invalid length.
[ 1187.320947][T16857] loop1: detected capacity change from 0 to 2048
[ 1187.410277][T16857] udf: Unknown parameter '0000000000000000000000000000000000000000'
[ 1187.966202][T12029] Bluetooth: hci3: command tx timeout
[ 1187.988836][T16771] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1188.025688][T16771] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1188.065349][T16771] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1188.100838][T16771] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1188.162214][T16864] loop6: detected capacity change from 0 to 1024
[ 1188.186340][T16864] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1188.236198][T16864] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1188.246101][T16864] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1188.314244][T16864] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (37511!=20869)
[ 1188.324512][T16864] EXT4-fs (loop6): group descriptors corrupted!
[ 1188.370971][   T30] audit: type=1326 audit(1754712943.004:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.1.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38c38ebe9 code=0x7ffc0000
[ 1188.395514][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1188.405214][   T30] audit: type=1326 audit(1754712943.004:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.1.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fc38c38ebe9 code=0x7ffc0000
[ 1188.427790][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1188.437197][   T30] audit: type=1326 audit(1754712943.004:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.1.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38c38ebe9 code=0x7ffc0000
[ 1188.460223][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1188.474340][   T30] audit: type=1326 audit(1754712943.044:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.1.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38c38ebe9 code=0x7ffc0000
[ 1188.497098][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1188.506749][   T30] audit: type=1326 audit(1754712943.044:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.1.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fc38c38ebe9 code=0x7ffc0000
[ 1188.529409][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1188.538794][   T30] audit: type=1326 audit(1754712943.044:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.1.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38c38ebe9 code=0x7ffc0000
[ 1188.561546][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1188.576222][   T30] audit: type=1326 audit(1754712943.044:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.1.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38c38ebe9 code=0x7ffc0000
[ 1188.602345][   T30] audit: type=1326 audit(1754712943.054:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.1.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fc38c38ebe9 code=0x7ffc0000
[ 1188.628009][   T30] audit: type=1326 audit(1754712943.054:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.1.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38c38ebe9 code=0x7ffc0000
[ 1188.650979][   T30] audit: type=1326 audit(1754712943.054:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.1.4164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38c38ebe9 code=0x7ffc0000
[ 1189.413878][ T9538] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1189.479757][T16771] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1189.644466][ T9538] usb 2-1: Using ep0 maxpacket: 32
[ 1189.665098][T16771] 8021q: adding VLAN 0 to HW filter on device team0
[ 1189.679354][ T9538] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1189.694153][ T9538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1189.764196][ T9538] usb 2-1: config 0 descriptor??
[ 1189.791633][ T9538] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1189.816676][ T2131] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1189.824327][ T2131] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1189.919241][ T2131] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1189.926895][ T2131] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1190.580864][T16883] loop8: detected capacity change from 0 to 512
[ 1190.661089][ T9538] gspca_vc032x: reg_w err -71
[ 1190.667332][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.673145][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.678731][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.684374][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.689853][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.695551][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.701009][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.703321][T16883] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[ 1190.706656][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.729471][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.737749][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.743513][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.749245][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.754974][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.760524][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.766237][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.771881][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.777582][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.783310][ T9538] gspca_vc032x: I2c Bus Busy Wait 00
[ 1190.788806][ T9538] gspca_vc032x: Unknown sensor...
[ 1190.794476][ T9538] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[ 1190.889710][T16883] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e11c, mo2=0002]
[ 1190.952338][T16883] System zones: 1-12
[ 1190.954651][ T9538] usb 2-1: USB disconnect, device number 21
[ 1191.008678][T16883] EXT4-fs (loop8): orphan cleanup on readonly fs
[ 1191.102178][T16883] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4171: bg 0: block 361: padding at end of block bitmap is not set
[ 1191.177339][T16883] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem
[ 1191.241658][T16883] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4171: invalid indirect mapped block 12 (level 1)
[ 1191.283811][T16883] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4171: invalid indirect mapped block 2 (level 2)
[ 1191.344671][T16883] EXT4-fs (loop8): 1 truncate cleaned up
[ 1191.353336][T16883] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[ 1191.448463][T16894] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 1191.617351][T16883] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #2: block 5: comm syz.8.4171: lblock 0 mapped to illegal pblock 5 (length 1)
[ 1191.694347][T16883] EXT4-fs warning (device loop8): dx_probe:791: inode #2: lblock 0: comm syz.8.4171: error -117 reading directory block
[ 1191.774039][T16897] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #2: block 5: comm syz.8.4171: lblock 0 mapped to illegal pblock 5 (length 1)
[ 1191.874580][T16897] EXT4-fs warning (device loop8): dx_probe:791: inode #2: lblock 0: comm syz.8.4171: error -117 reading directory block
[ 1192.243597][T16771] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1192.425506][T15307] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[ 1193.917345][T16916] loop6: detected capacity change from 0 to 4096
[ 1194.087366][T16916] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[ 1194.347337][T16921] loop8: detected capacity change from 0 to 32768
[ 1194.536458][T16771] veth0_vlan: entered promiscuous mode
[ 1194.537432][T16921] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[ 1194.557368][T16921]   allowing incompatible features above 0.0: (unknown version)
[ 1194.565331][T16921]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 1194.580068][T16921] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[ 1194.588686][T16921] bcachefs (loop8): initializing new filesystem
[ 1194.616978][T16921] bcachefs (loop8): going read-write
[ 1194.653160][T16921] bcachefs (loop8): marking superblocks
[ 1194.708823][T16771] veth1_vlan: entered promiscuous mode
[ 1194.710037][T16921] bcachefs (loop8): initializing freespace
[ 1194.748894][T16921] bcachefs (loop8): done initializing freespace
[ 1194.769322][T16921] bcachefs (loop8): reading snapshots table
[ 1194.776071][T16921] bcachefs (loop8): reading snapshots done
[ 1194.884745][T16921] bcachefs (loop8):  loop8: Superblock write was silently dropped! (seq 0 expected 42)
[ 1194.898452][T16921] bcachefs (loop8): done starting filesystem
[ 1195.035226][T16771] veth0_macvtap: entered promiscuous mode
[ 1195.096048][T16771] veth1_macvtap: entered promiscuous mode
[ 1195.162209][T16916] ntfs3(loop6): Failed to initialize $Extend/$Reparse.
[ 1195.467196][T15307] bcachefs (loop8): shutting down
[ 1195.472561][T15307] bcachefs (loop8): going read-only
[ 1195.478635][T15307] bcachefs (loop8): finished waiting for writes to stop
[ 1195.493922][T15307] bcachefs (loop8): flushing journal and stopping allocators, journal seq 2
[ 1195.559154][T16771] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1195.678455][T16771] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1195.776694][ T4166] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1195.855722][ T4166] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1195.892131][ T4166] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1195.899232][T15307] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3
[ 1195.981430][ T2131] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1196.009700][T15307] bcachefs (loop8): clean shutdown complete, journal seq 4
[ 1196.019986][T15307] bcachefs (loop8): marking filesystem clean
[ 1196.110321][T15307] bcachefs (loop8): shutdown complete
[ 1196.606960][T16952] loop6: detected capacity change from 0 to 512
[ 1196.678848][T16952] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1196.778250][T16952] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[ 1196.860702][T16952] EXT4-fs (loop6): Errors on filesystem, clearing orphan list.
[ 1196.871533][T16952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1196.981477][T16952] EXT4-fs error (device loop6): ext4_add_entry:2417: inode #2: comm syz.6.4192: Directory hole found for htree leaf block 0
[ 1197.390259][T13026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1201.646023][T17021] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4215'.
[ 1201.953210][ T5860] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1202.155723][ T5860] usb 7-1: Using ep0 maxpacket: 32
[ 1202.168975][ T5860] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[ 1202.182265][ T5860] usb 7-1: config 0 has no interface number 0
[ 1202.238278][ T5860] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1202.250805][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1202.259591][ T5860] usb 7-1: Product: syz
[ 1202.264118][ T5860] usb 7-1: Manufacturer: syz
[ 1202.269018][ T5860] usb 7-1: SerialNumber: syz
[ 1202.376504][ T5860] usb 7-1: config 0 descriptor??
[ 1202.406803][ T5860] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1202.770929][ T5860] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1202.835433][T12242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1202.847022][T12242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1202.877797][ T5860] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1203.020303][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1203.028523][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1203.127443][T17038] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4222'.
[ 1203.183558][    C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1203.198355][ T5860] usb 7-1: USB disconnect, device number 24
[ 1203.226435][T17038] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4222'.
[ 1203.258113][ T5860] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1203.352253][ T5860] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1203.369061][ T5860] quatech2 7-1:0.51: device disconnected
[ 1207.483976][T17056] loop6: detected capacity change from 0 to 8192
[ 1207.751259][   T30] kauditd_printk_skb: 25 callbacks suppressed
[ 1207.751344][   T30] audit: type=1800 audit(1754712962.384:203): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4231" name="file1" dev="loop6" ino=1048798 res=0 errno=0
[ 1207.861480][   T30] audit: type=1800 audit(1754712962.444:204): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4231" name="file1" dev="loop6" ino=1048798 res=0 errno=0
[ 1208.368606][T17078] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4241'.
[ 1208.381484][T17078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1208.389167][T17078] IPv6: NLM_F_CREATE should be set when creating new route
[ 1208.789005][   T57] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1209.049146][   T57] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1209.149392][T17077] sctp: failed to load transform for md5: -2
[ 1209.308620][   T57] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1209.508818][   T57] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1209.823804][   T57] bridge_slave_1: left allmulticast mode
[ 1209.830170][   T57] bridge_slave_1: left promiscuous mode
[ 1209.837095][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1209.853047][   T57] bridge_slave_0: left allmulticast mode
[ 1209.867898][   T57] bridge_slave_0: left promiscuous mode
[ 1209.874814][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1210.585759][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1210.613648][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1210.634529][   T57] bond0 (unregistering): Released all slaves
[ 1211.225180][T17097] loop6: detected capacity change from 0 to 512
[ 1211.448523][   T57] hsr_slave_0: left promiscuous mode
[ 1211.539591][   T57] hsr_slave_1: left promiscuous mode
[ 1211.548845][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1211.557208][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1211.594899][T17097] FAT-fs (loop6): error, corrupted directory (invalid entries)
[ 1211.667806][T17098] loop1: detected capacity change from 0 to 2048
[ 1211.787394][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1211.795644][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1211.919463][T17098] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[ 1211.928700][T17098] UDF-fs: Scanning with blocksize 512 failed
[ 1212.143715][   T57] veth1_macvtap: left promiscuous mode
[ 1212.149721][   T57] veth0_macvtap: left promiscuous mode
[ 1212.156118][   T57] veth1_vlan: left promiscuous mode
[ 1212.161726][   T57] veth0_vlan: left promiscuous mode
[ 1212.265122][T17098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1212.404792][T12029] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1212.415510][T12029] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1212.459240][T12029] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1212.489775][T12029] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1212.535417][T12029] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1213.140506][T17112] loop1: detected capacity change from 0 to 256
[ 1213.491804][T17112] FAT-fs (loop1): Directory bread(block 64) failed
[ 1213.499522][T17112] FAT-fs (loop1): Directory bread(block 65) failed
[ 1213.506617][T17112] FAT-fs (loop1): Directory bread(block 66) failed
[ 1213.513487][T17112] FAT-fs (loop1): Directory bread(block 67) failed
[ 1213.520498][T17112] FAT-fs (loop1): Directory bread(block 68) failed
[ 1213.527454][T17112] FAT-fs (loop1): Directory bread(block 69) failed
[ 1213.534593][T17112] FAT-fs (loop1): Directory bread(block 70) failed
[ 1213.541490][T17112] FAT-fs (loop1): Directory bread(block 71) failed
[ 1213.555129][T17112] FAT-fs (loop1): Directory bread(block 72) failed
[ 1213.561927][T17112] FAT-fs (loop1): Directory bread(block 73) failed
[ 1213.659486][T17118] loop6: detected capacity change from 0 to 512
[ 1213.927802][T17122] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1213.986576][T17118] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1214.000101][T17118] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1214.269046][   T57] team0 (unregistering): Port device team_slave_1 removed
[ 1214.311251][   T57] team0 (unregistering): Port device team_slave_0 removed
[ 1214.743627][T12029] Bluetooth: hci3: command tx timeout
[ 1214.838340][T13026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1215.173816][T17133] loop1: detected capacity change from 0 to 764
[ 1215.247937][T17133] Symlink component flag not implemented
[ 1215.254378][T17133] Symlink component flag not implemented
[ 1215.260782][T17133] Symlink component flag not implemented (129)
[ 1215.270349][T17133] Symlink component flag not implemented (6)
[ 1215.473417][ T5860] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1215.743915][ T5860] usb 3-1: Using ep0 maxpacket: 8
[ 1215.816009][ T5860] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1215.825770][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1215.834263][ T5860] usb 3-1: Product: syz
[ 1215.838956][ T5860] usb 3-1: Manufacturer: syz
[ 1215.846715][ T5860] usb 3-1: SerialNumber: syz
[ 1215.868870][ T5860] usb 3-1: config 0 descriptor??
[ 1215.944567][ T5860] gspca_main: se401-2.14.0 probing 047d:5003
[ 1216.095254][T17105] chnl_net:caif_netlink_parms(): no params data found
[ 1216.377650][ T5860] gspca_se401: ExtraFeatures: 255
[ 1216.383300][ T5860] gspca_se401: Too many frame sizes
[ 1216.440687][T17143] loop1: detected capacity change from 0 to 2048
[ 1216.560736][T17143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1216.602576][ T5860] usb 3-1: USB disconnect, device number 19
[ 1216.680265][T17143] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1216.840473][T12029] Bluetooth: hci3: command tx timeout
[ 1217.352367][T12677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1217.431228][T17105] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1217.453951][T17105] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1217.462096][T17105] bridge_slave_0: entered allmulticast mode
[ 1217.472081][T17105] bridge_slave_0: entered promiscuous mode
[ 1217.528878][T17105] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1217.546026][T17105] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1217.554113][T17105] bridge_slave_1: entered allmulticast mode
[ 1217.567565][T17105] bridge_slave_1: entered promiscuous mode
[ 1217.875009][T17158] netlink: 'syz.2.4271': attribute type 11 has an invalid length.
[ 1217.973067][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[ 1217.979826][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[ 1218.481051][T17105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1218.658242][T17105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1218.903462][T12029] Bluetooth: hci3: command tx timeout
[ 1218.966631][T17105] team0: Port device team_slave_0 added
[ 1219.094899][T17105] team0: Port device team_slave_1 added
[ 1219.188676][T17164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4269'.
[ 1219.410411][T17105] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1219.427610][T17105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1219.454558][T17105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1219.618265][T17105] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1219.625567][T17105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1219.652112][T17105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1220.134272][T17105] hsr_slave_0: entered promiscuous mode
[ 1220.152076][T17105] hsr_slave_1: entered promiscuous mode
[ 1220.163302][T17105] debugfs: 'hsr0' already exists in 'hsr'
[ 1220.169249][T17105] Cannot create hsr debugfs directory
[ 1220.515818][T17181] binder: 17180:17181 ioctl c018620c 200000000040 returned -22
[ 1220.983729][T12029] Bluetooth: hci3: command tx timeout
[ 1221.299064][ T1591] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1221.475756][ T1591] usb 3-1: Using ep0 maxpacket: 8
[ 1221.495256][ T1591] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[ 1221.515569][T17193] =====================================================
[ 1221.526225][T17193] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120
[ 1221.538157][T17193]  _copy_to_user+0xcc/0x120
[ 1221.544452][T17193]  do_insn_ioctl+0x59c/0x6d0
[ 1221.549338][T17193]  comedi_unlocked_ioctl+0xa5e/0x1f60
[ 1221.557791][T17193]  __se_sys_ioctl+0x23c/0x400
[ 1221.559216][ T1591] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1221.563022][T17193]  __x64_sys_ioctl+0x97/0xe0
[ 1221.563150][T17193]  x64_sys_call+0x1cbc/0x3e20
[ 1221.572360][ T1591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1221.577407][T17193]  do_syscall_64+0xd9/0x210
[ 1221.583029][ T1591] usb 3-1: Product: syz
[ 1221.593474][T17193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1221.595350][ T1591] usb 3-1: Manufacturer: syz
[ 1221.598858][T17193] 
[ 1221.598890][T17193] Uninit was created at:
[ 1221.605003][ T1591] usb 3-1: SerialNumber: syz
[ 1221.610040][T17193]  __kmalloc_noprof+0x95f/0x1310
[ 1221.630061][T17193]  do_insn_ioctl+0x108/0x6d0
[ 1221.639246][T17193]  comedi_unlocked_ioctl+0xa5e/0x1f60
[ 1221.646854][T17193]  __se_sys_ioctl+0x23c/0x400
[ 1221.651917][T17193]  __x64_sys_ioctl+0x97/0xe0
[ 1221.659674][T17193]  x64_sys_call+0x1cbc/0x3e20
[ 1221.664846][T17193]  do_syscall_64+0xd9/0x210
[ 1221.669563][T17193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1221.676356][T17193] 
[ 1221.678794][T17193] Bytes 4-583 of 584 are uninitialized
[ 1221.687017][T17193] Memory access of size 584 starts at ffff888043452c00
[ 1221.694243][T17193] 
[ 1221.696699][T17193] CPU: 1 UID: 0 PID: 17193 Comm: syz.1.4287 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) 
[ 1221.708985][T17193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1221.722060][T17193] =====================================================
[ 1221.729392][T17193] Disabling lock debugging due to kernel taint
[ 1221.735941][T17193] Kernel panic - not syncing: kmsan.panic set ...
[ 1221.742532][T17193] CPU: 1 UID: 0 PID: 17193 Comm: syz.1.4287 Tainted: G    B               6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) 
[ 1221.756308][T17193] Tainted: [B]=BAD_PAGE
[ 1221.760671][T17193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1221.770926][T17193] Call Trace:
[ 1221.774427][T17193]  <TASK>
[ 1221.777476][T17193]  __dump_stack+0x26/0x30
[ 1221.782032][T17193]  dump_stack_lvl+0x53/0x270
[ 1221.786881][T17193]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1221.792952][T17193]  dump_stack+0x1e/0x25
[ 1221.797432][T17193]  vpanic+0x361/0xc50
[ 1221.801637][T17193]  panic+0x15d/0x160
[ 1221.805866][T17193]  kmsan_report+0x31c/0x320
[ 1221.810786][T17193]  ? kmsan_internal_check_memory+0x1e1/0x230
[ 1221.817032][T17193]  ? kmsan_copy_to_user+0xf1/0x190
[ 1221.822404][T17193]  ? _copy_to_user+0xcc/0x120
[ 1221.827385][T17193]  ? do_insn_ioctl+0x59c/0x6d0
[ 1221.832470][T17193]  ? comedi_unlocked_ioctl+0xa5e/0x1f60
[ 1221.838358][T17193]  ? __se_sys_ioctl+0x23c/0x400
[ 1221.843426][T17193]  ? __x64_sys_ioctl+0x97/0xe0
[ 1221.848397][T17193]  ? x64_sys_call+0x1cbc/0x3e20
[ 1221.853469][T17193]  ? do_syscall_64+0xd9/0x210
[ 1221.858517][T17193]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1221.865035][T17193]  ? kmsan_internal_unpoison_memory+0x14/0x20
[ 1221.871360][T17193]  ? kmsan_get_metadata+0xfb/0x160
[ 1221.876660][T17193]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1221.882659][T17193]  ? kmsan_get_metadata+0xfb/0x160
[ 1221.888053][T17193]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1221.894108][T17193]  ? kmsan_get_metadata+0xfb/0x160
[ 1221.899400][T17193]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1221.905576][T17193]  ? kmsan_get_metadata+0xfb/0x160
[ 1221.910935][T17193]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1221.916992][T17193]  kmsan_internal_check_memory+0x1e1/0x230
[ 1221.923092][T17193]  kmsan_copy_to_user+0xf1/0x190
[ 1221.928209][T17193]  _copy_to_user+0xcc/0x120
[ 1221.933228][T17193]  do_insn_ioctl+0x59c/0x6d0
[ 1221.938112][T17193]  comedi_unlocked_ioctl+0xa5e/0x1f60
[ 1221.943870][T17193]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1221.949985][T17193]  __se_sys_ioctl+0x23c/0x400
[ 1221.955011][T17193]  __x64_sys_ioctl+0x97/0xe0
[ 1221.960081][T17193]  x64_sys_call+0x1cbc/0x3e20
[ 1221.965086][T17193]  do_syscall_64+0xd9/0x210
[ 1221.969779][T17193]  ? irqentry_exit+0x16/0x60
[ 1221.974719][T17193]  ? clear_bhb_loop+0x40/0x90
[ 1221.979668][T17193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1221.985853][T17193] RIP: 0033:0x7fc38c38ebe9
[ 1221.990493][T17193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1222.010276][T17193] RSP: 002b:00007fc38d115038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1222.018953][T17193] RAX: ffffffffffffffda RBX: 00007fc38c5b5fa0 RCX: 00007fc38c38ebe9
[ 1222.027064][T17193] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003
[ 1222.035175][T17193] RBP: 00007fc38c411e19 R08: 0000000000000000 R09: 0000000000000000
[ 1222.043283][T17193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1222.051483][T17193] R13: 00007fc38c5b6038 R14: 00007fc38c5b5fa0 R15: 00007fffcbacd8f8
[ 1222.059729][T17193]  </TASK>
[ 1222.063329][T17193] Kernel Offset: disabled
[ 1222.067856][T17193] Rebooting in 86400 seconds..