last executing test programs:

3m5.579250844s ago: executing program 32 (id=185):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1100, 0x0, 0x0)

3m1.802488426s ago: executing program 33 (id=200):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000000000000000000001701000002000000000000007005baa38d33e2e1650de8f13f421b2d4b60252e76171216e42961c3b08d4d3dacb0a7089ff7cbfd613d46fa95d6e2f6e76ac3266c9b1a531c4bcf0e7071f117cca4e883b4a6eb5dee7a9ab4d05d7ee311ab1c55b817285e0c3714ee6137e3b8553de667701a7c93437583b5f0b285a188098c1ac4ebac40b315ff8db6f736992497879a42b95248fed4d4888970573d0e88ceead26d97e172588a3ad30fbd01b7bbeeaa668e835f7ae3113fe2d949bb47bc0b2c62541714cc0538601ae4bab19d69a5addee134dd447034da6dd89704603d31a3d25b9d5f46cfd43d9e29aac7422920d98e1463256bd4cc929373ad9000000000faf6a95a04ad3b9db9b230f8224a3d6db187a94e5dadfe181d20d3a4bd08e8b0e6eeb79fdee230dd852a36dfc9046d03b8f316b2d460ca5d08c515d914db8ce430ea0237911c440ee750fe787aaffa83b809651c529e4cf68c8219a827ea003c59e3e51b00cd7f9464f37be2eb3e1475819ad37edcc238b85ab205a2b394916815d9cf7bf3f8e3d19a4697756299e21f2afd3ae31e0f09b8153965635216de47156f4e5fc97cb04f9c5e13256be1d9e0a94f9c6387940de1bcd7b532d16ebba216601cf23be6a7c259550bd059a5a7aee85eb558de8201c1d9c7b29e27313f61cf0b07dd790071bdbceabdd32ce2bcc279b1575a1431b03e5dc37307d15a2782175c87dad1a3aadf48b382bea4ae0b423edee0e12ada4c1dacc40bf387630792ab5c7ed6e2ef7e8a77268b0ff8978ccddfa8da4521d24b3fddc70d181c20caa9a584df9b2e"], 0x18}], 0x4924924924924fd, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x5000, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

2m58.854701111s ago: executing program 4 (id=216):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2m58.564836047s ago: executing program 4 (id=217):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, <r2=>r0, 0x2})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2})
close_range(r3, 0xffffffffffffffff, 0x0)

2m58.272493883s ago: executing program 4 (id=220):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xffffff81}, 0x1c)
recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/39, 0x27}, 0x928}], 0x1, 0x1000b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2m57.884534645s ago: executing program 4 (id=223):
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file1\x00', 0x30008c0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x11, 0x301, &(0x7f0000000980)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0)
creat(&(0x7f00000024c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1bd)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84026, 0x0)

2m57.25762911s ago: executing program 4 (id=228):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00')
rename(&(0x7f0000000380)='./file0\x00', &(0x7f0000000780)='./file2\x00')

2m56.744805189s ago: executing program 4 (id=233):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x6f11, 0x0, 0x2, 0x0, 0x0)

2m56.416677427s ago: executing program 34 (id=233):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x6f11, 0x0, 0x2, 0x0, 0x0)

2m27.056965722s ago: executing program 7 (id=409):
syz_open_procfs(0x0, &(0x7f0000002280)='net/ip_mr_cache\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00')
fcntl$setstatus(r0, 0x4, 0x40800)
r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

2m26.816423506s ago: executing program 7 (id=412):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50", 0x4b}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/87, 0x57}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)

2m26.546369811s ago: executing program 7 (id=415):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

2m25.267584432s ago: executing program 7 (id=420):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r0, &(0x7f0000000300)='./file0\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0xa, 0x80000, {r0}}, 0x20)

2m24.858909005s ago: executing program 7 (id=422):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$eJzs28tvG0UYAPBv10lKX8SU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlW0IFSOqBJ3xIEDEn8BJ7gg4ITEFe6oUoV6aeFktPZuYjt2mocTF/z7SdvO7M5q5vPu2DM72QD61kj2TxKxKyJ+j4jhera5wEj9v1s3Lk7/fePidBLV6lt/JbVyN29cnC6KFuftzDOjaUT6aRIH2tQ7f/7C6alKZfZcnh9fOPP++Pz5C8+eOjN1cvbk7NnJY8eOHpl44fnJ57oSZ9amm/s/mju477V3rr4xffzquz9/mxTxt8TRJSMrHXyiWu1ydb21uyGdDPSwIaxJKSKyyzVY6//DUYqlizccr37S08YBm6parVZ3dj58uQr8jyXR6xYAvVH80Gfz32LboqHHHeH6S/UJUBb3rXyrHxmINC8z2DK/7aaRiDh++Z8vsy025zkEAECT77PxzzPtxn9p3N9Q7u58bagcEfdExJ6IuDci9kbEfRG1sg9ExINrrL91kWT5+Ce9tq7AVikb/72Yr201j/+K0V+US3ludy3+weTEqcrs4fwzGY3BbVl+YoU6fnjlt887HWsc/2VbVn8xFszbcW1gW/M5M1MLUxuJudH1jyP2D7SLP1lcCUgiYl9E7F9nHaee+uZgp2O3j38FXVhnqn4V8WT9+l+OlvgLycrrk+N3RWX28HhxVyz3y69X3uxU/4bi74Ls+u9oe/8vxl9OGtdr59dex5U/Pus4p1nd/V+91HhOdv8PJW/X0kP5vg+nFhbOTUQMJa/XG924f3Lp3CJflM/iHz3Uvv/viaVP4kBEZDfxQxHxcEQ8krf90Yh4LCIOrRD/Ty8//t76499cWfwza7r+S4mhaN3TPlE6/eN3TZWW1xJ/dv2P1lKj+Z7VfP+tpl3ru5sBAADgvyeNiF2RpGOL6TQdG6v/vfze2JFW5uYXnj4x98HZmfo7AuUYTIsnXcMNz0Mn8ml9kZ+M+LoxfyR/bvxFaXstPzY9V5npdfDQ53Z26P+ZP0u9bh2w6byvBf1L/4f+pf9D/9L/oX+16f/be9EOYOu1+/2/1IN2AFuvpf9b9oM+Yv4P/Uv/h/6l/0Nfmt8et39JXkJiWSLSO6IZEt1JpBHRtGf5d0W5F19QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/RvAAAA//831udB")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]})
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x10c)

2m24.248658029s ago: executing program 7 (id=428):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x7f79, &(0x7f0000000400)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x100847c0, 0x0, 0x1, 0x0, 0x0)

2m23.725386128s ago: executing program 35 (id=428):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x7f79, &(0x7f0000000400)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x100847c0, 0x0, 0x1, 0x0, 0x0)

2m21.146629963s ago: executing program 6 (id=443):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005dc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_TO={0x8, 0x2, 0x7d}]}}]}, 0x40}}, 0x0)

2m17.10392306s ago: executing program 6 (id=470):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r1, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001140), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001180)={0x1c, r3, 0x515, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c840}, 0x4c890)

2m16.74787573s ago: executing program 6 (id=474):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m16.150784423s ago: executing program 6 (id=477):
dup(0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100))
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)

2m15.541653377s ago: executing program 6 (id=484):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @remote, @local}, 0xc)
r1 = socket(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r2=>0x0})
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback, r2}, 0xc)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66)

2m14.990522298s ago: executing program 6 (id=488):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0", 0x46}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf15", 0x57}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000004c0)=""/91, 0x5b}], 0x2}, 0x0)

2m14.388859192s ago: executing program 36 (id=488):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0", 0x46}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf15", 0x57}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000004c0)=""/91, 0x5b}], 0x2}, 0x0)

2m6.251025828s ago: executing program 0 (id=525):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x101, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4, @local, 0xd8}}}, 0x32)
close(r2)

2m6.087273577s ago: executing program 0 (id=527):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

2m3.525654611s ago: executing program 0 (id=537):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
ptrace(0x420e, r0)

2m2.371093175s ago: executing program 0 (id=541):
syz_mount_image$xfs(&(0x7f0000009580), &(0x7f00000095c0)='./file2\x00', 0x8080, &(0x7f0000009600), 0x1, 0x95b5, &(0x7f0000012bc0)="$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")
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

2m0.67077746s ago: executing program 0 (id=547):
mount(0x0, 0x0, 0x0, 0x10005, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x100)

1m59.257773909s ago: executing program 0 (id=553):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0x3)
r1 = accept4$bt_l2cap(r0, 0x0, 0x0, 0x80000)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16)

1m58.788495666s ago: executing program 37 (id=553):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0x3)
r1 = accept4$bt_l2cap(r0, 0x0, 0x0, 0x80000)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16)

1m50.590189885s ago: executing program 9 (id=605):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)

1m50.362289698s ago: executing program 9 (id=606):
socket$nl_generic(0x11, 0x3, 0x10)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)
fcntl$notify(r0, 0x402, 0x2)
r1 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=<r2=>0x0, &(0x7f0000000a40)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

1m50.106380732s ago: executing program 9 (id=608):
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r1, 0x0, r0, 0x0, 0x6, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff)
fcntl$setstatus(r0, 0x4, 0x7c00)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44010000090601"], 0x144}, 0x1, 0x0, 0x0, 0x40015}, 0x44080)

1m49.702115815s ago: executing program 9 (id=612):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2, &(0x7f0000000000)={[{@norecovery}, {@order_relaxed}, {}, {@order_relaxed}, {@nobarrier}, {@errors_continue}, {@nobarrier}, {@order_relaxed}], [], 0x2c}, 0x3, 0xeec, &(0x7f0000000f40)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x40403, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
syz_mount_image$exfat(0x0, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1380443, 0x0, 0x3, 0x0, &(0x7f0000000000))

1m48.884042601s ago: executing program 9 (id=617):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000001200)='./file0\x00', 0x3000011, &(0x7f0000000080)=ANY=[], 0x1, 0x11e3, &(0x7f0000002440)="$eJzs3E1rY1UYB/CnM2MmTae1vo3ObDzoRjeXmQFduQmSgkxAmZkIM4Jwh6YaEpOam0UiLgruXAl+C3HpThC/QL+FuyKIbrrySpNqbakvtdXU4ffb5CH/k+Q5SThw4J6789pnH3Q3imwjH8WFhYW4tBgRuylSXIiLMbMVL3+y9tOnd+8/uF1vNht3Ulqr37v5akpp5flv3vn4yxe+HS29/dXK15dje/XdnR9ufbd9dfvazs/33u8UqVOk/mCU8vRwMBjlD3vttN4pullKb/XaedFOnX7RHh7KN3qDzc1Jyvvry7XNYbsoUt6fpG57kkaDNBpOUv5e3umnLMvSci04jdYXu2VZRpTlY1GJsizLxajFUlyJ5ViJx2M1nogn46l4Op6Jq/FsPBfXpqPm3TcAAAAAAAAAAAAAAAAAAAA8Wpz/BwAAAAAAAAAAAAAAAAAAgPlz/h8AAAAAAAAAAAAAAAAAAADmz/l/AAAAAAAAAAAAAAAAAAAAmL+79x/crjebjTspVSO+3xq3xq3Z4zSuRkTjRppaPXjVj+Nx6+K0Wnuj2bg5y9Ph/HLU9vNbx+bVeOnFWb6Xvf5m80h+PdZ/12fl+PbdiQAAAAD+hiz95tj9fZb9UT6r9vbvNw7v7xd/HXX90p9+9NKZToR/pJh81M17vfZQceKicrrv8JUr52IW/9OiHhHnoI3zV3y4/6/sLZzuff5i4aj+ywsT/4mDH33enQAAAAAAAAAAAHASZ38R4ueVo8/Me44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzCDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgqgAAAP//+f2KfQ==")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)

1m36.116670416s ago: executing program 9 (id=712):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0x3}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f000000d6c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="26e845c8bd1b81440635d9d750351d50e3e299417a0f59b13b51a29b1c0654dcc47495faabb8608a", 0x28}], 0x1, &(0x7f0000000600)=[{0xc, 0x119, 0xc}], 0xc}}], 0x1, 0x4000000)

1m35.638086332s ago: executing program 38 (id=712):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0x3}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f000000d6c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="26e845c8bd1b81440635d9d750351d50e3e299417a0f59b13b51a29b1c0654dcc47495faabb8608a", 0x28}], 0x1, &(0x7f0000000600)=[{0xc, 0x119, 0xc}], 0xc}}], 0x1, 0x4000000)

7.285323751s ago: executing program 5 (id=1324):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62)
listen(r0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)

7.050171345s ago: executing program 5 (id=1327):
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000008c0)=[{0x6, 0x40003, 0xe, 0x8}]}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f00000008c0)=ANY=[], 0x5b)
sendfile(r0, r1, &(0x7f0000000000), 0x9)

6.848741736s ago: executing program 5 (id=1328):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

5.048423897s ago: executing program 2 (id=1335):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x1000)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x48e, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

4.46928204s ago: executing program 1 (id=1337):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000002c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)

3.912749851s ago: executing program 2 (id=1339):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="f78d9ca38fff48f3be5216a8ffb068858ffbb6817f0011dfb9c669803f1773e9acba55e8304df4221134edd87a577a4b633a592a44", 0x35}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee38", 0x14}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40006)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)

3.653052105s ago: executing program 5 (id=1340):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

3.272716807s ago: executing program 1 (id=1344):
r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
setresuid(0x0, 0xee00, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0)

3.088192417s ago: executing program 1 (id=1345):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
sendmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000000000001a01"], 0x10}}], 0x1, 0xc040)

3.086404267s ago: executing program 5 (id=1346):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
read$hidraw(r1, &(0x7f0000002340)=""/147, 0x93)
syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000400)='0y\a')

2.906068837s ago: executing program 3 (id=1347):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000140)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@void, {0x8100, 0x3, 0x1}}, {@generic={0x88f7}}}}, 0x12)

2.874783589s ago: executing program 2 (id=1348):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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")
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000002180)=ANY=[], 0xff, 0x247, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$FS_IOC_RESVSP(r0, 0x80106f05, &(0x7f00000000c0)={0x0, 0x4, 0x32, 0x100000000})

2.814443332s ago: executing program 1 (id=1349):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf254, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x4, 0x0, 0x1ff, 0x8000, 0x3ff, 0x4, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x0, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x4], [0x6, 0x1e, 0x3, 0x8003, 0xfffffffe, 0x3, 0x0, 0x5, 0x75, 0xfffffffc, 0x4, 0x7ffd, 0x72c, 0x1c32, 0x3, 0x9, 0x10100, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x4000000, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x2, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xb, 0x3, 0x379, 0x9, 0xc, 0x5, 0x7, 0x6, 0x2, 0x1, 0x3, 0x8, 0x6, 0x200, 0x3], [0x401, 0x3, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x0, 0x8, 0x10, 0x7, 0x9, 0xe8a, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0x7, 0xe55, 0x10, 0x80000001, 0x4, 0x101, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xd, 0x47, 0x2, 0x3, 0x4, 0x7, 0x5, 0x40, 0x6, 0x8001, 0xbf23, 0x6, 0x8, 0x956, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x6, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xd, 0x402, 0x800, 0xfffffffc, 0x1000, 0x7f, 0x5, 0x9, 0x4, 0x8e8, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x7, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffffa, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0x80e, 0xf, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

2.573928635s ago: executing program 8 (id=1351):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
r1 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r1, &(0x7f0000000140)={0x11, 0x1b, 0x0, 0x1, 0xf9, 0x6, @remote}, 0x14)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)

2.514506039s ago: executing program 1 (id=1352):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
wait4(r0, 0x0, 0x0, 0x0)
getpriority(0x0, r0)

2.451018102s ago: executing program 3 (id=1353):
r0 = socket(0x1, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20)
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}, 0x4000}], 0x1, 0x0, 0x0)

2.225953615s ago: executing program 3 (id=1354):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4048aecb, &(0x7f0000001440))
close_range(r0, 0xffffffffffffffff, 0x0)

2.225736065s ago: executing program 8 (id=1355):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x414, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYBLOB="70394a6152d778f79edb12fcb619bedee7bfb06ab69e485f1b2eda5535869acbc66b18c54918584a97a21e5f9e4c3d2ea74a03d20b06476d3bfa1b996187c32d007717b0cf28c403104ce7d7684a3c8722e534855fb70d2dc3a28e46653b34f9fd34100dfab242f24ad1fa247885f17ae27c4fdf32da59f749dccdf2ae3ecbcb1b337eefb62a51d30ed857e7183f897ad1a6f706d9492d38fdd611c99eed8596af618f1b433d2e045341c271d8afe196cfaa9702b9d93aac8ead84b057a9c0f6cd439e070c01c820a3aa56db4d34b7f4a1", @ANYRESHEX=0x0], 0x1, 0x2b0, &(0x7f0000000440)="$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")
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x4800000000000000, 0xeeef0000, 0xb, 0x3, 0xb})

1.875773815s ago: executing program 3 (id=1356):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1.648973027s ago: executing program 8 (id=1357):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

1.59628385s ago: executing program 3 (id=1358):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f00000000c0)={[0x1]})

1.200665743s ago: executing program 3 (id=1359):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'adq12b\x00', [0x2f00, 0x5, 0xd09d, 0xfff7ffff, 0x2d6, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1001, 0x9, 0x1, 0xfffc, 0x6, 0x8, 0x40000009, 0x830, 0x30000, 0xf4, 0x2, 0x800, 0xe2db, 0x2, 0xd, 0x7, 0x3, 0x4, 0x5, 0x70f]})
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4})

1.148749136s ago: executing program 2 (id=1360):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8041, 0x104)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
lseek(r0, 0x0, 0x0)

934.215898ms ago: executing program 1 (id=1361):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200000c, &(0x7f0000005880)={[{@nodiscard}, {@noacl}, {@discard_unit_section}, {@noquota}, {@alloc_mode_def}, {@discard_unit_segment}, {@atgc}, {@inline_dentry}, {@fsync_mode_posix}, {@alloc_mode_def}, {@adaptive_mode}, {@two_active_logs}, {@disable_ext_identify}, {@noacl}]}, 0x1, 0x5505, &(0x7f0000000340)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x145142, 0x0)
writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000400)='D', 0x1}], 0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[])

863.480891ms ago: executing program 8 (id=1362):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000003c0)=r1, 0x4)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

817.848954ms ago: executing program 5 (id=1363):
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x4)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000340000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x8000, &(0x7f0000001380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})

744.661928ms ago: executing program 2 (id=1364):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15)

495.639742ms ago: executing program 2 (id=1365):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

442.245275ms ago: executing program 8 (id=1366):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[], 0x8b, 0x2cb, &(0x7f00000004c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f00000002c0)='./bus\x00', r0, &(0x7f0000000300)='./file0\x00', 0x0)

0s ago: executing program 8 (id=1367):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0xde106, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x81657b94fb2d95c8, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xfc, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x0, "d25e6fa6"}, @global=@item_012={0x1, 0x1, 0x0, "1c"}]}}, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

ta-data file (ino=3, block-offset=130)
[  182.406747][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  182.502021][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  182.544484][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  182.553291][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  182.569782][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  182.597244][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  182.618025][ T6764] device hsr0 entered promiscuous mode
[  182.625629][ T6321] airspy 9-1:0.0: Board ID: 00
[  182.630449][ T6321] airspy 9-1:0.0: Firmware version: 
[  182.646701][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  182.656521][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'.
[  182.666994][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  182.686477][ T6764] device hsr_slave_0 left promiscuous mode
[  182.695061][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  182.708328][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  182.745837][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  182.756841][ T6764] device hsr_slave_1 left promiscuous mode
[  182.788967][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  182.821491][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  182.861658][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  182.890002][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  182.911444][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  182.928890][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  182.941740][ T6772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.672'.
[  182.961630][ T6772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.672'.
[  182.971917][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  182.999936][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  183.019460][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.672'.
[  183.030922][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.062111][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.083758][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  183.107761][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.124890][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.672'.
[  183.150669][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.189133][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  183.208243][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.273050][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.302987][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  183.328116][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.349000][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.393878][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  183.417244][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.449926][ T6321] airspy 9-1:0.0: usb_control_msg() failed -71 request 0f
[  183.462303][ T6321] airspy 9-1:0.0: Registered as swradio24
[  183.463458][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.481653][ T6321] airspy 9-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  183.507888][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  183.530515][ T6321] usb 9-1: USB disconnect, device number 4
[  183.535379][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.601831][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.623955][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  183.687865][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.725946][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.754095][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  183.805864][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.825970][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.866494][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  183.902615][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.943868][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  183.952636][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  183.994408][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.031174][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.060373][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  184.080583][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.122297][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.164462][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  184.223974][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.234342][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.256370][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  184.276518][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.308503][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.322947][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  184.330924][ T6809] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  184.347551][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.367773][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.412660][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  184.480871][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.524148][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.552945][ T6815] loop2: detected capacity change from 0 to 64
[  184.560828][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  184.594095][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.620023][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.653927][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  184.683330][ T6815] minix_free_block (loop2:3): bit already cleared
[  184.690611][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.724939][ T4352] wlan1: Trigger new scan to find an IBSS to join
[  184.741751][ T6815] minix_free_block (loop2:4): bit already cleared
[  184.752267][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.773361][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  184.806192][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.832690][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.880715][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  184.915052][    C0] blk_print_req_error: 90 callbacks suppressed
[  184.915069][    C0] I/O error, dev loop9, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  184.931440][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  184.991504][    C0] I/O error, dev loop9, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  185.000948][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  185.016573][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  185.065120][    C0] I/O error, dev loop9, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  185.074570][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  185.101360][    C0] I/O error, dev loop9, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  185.110770][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  185.143492][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  185.171753][    C0] I/O error, dev loop9, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  185.181188][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  185.202126][ T6829] loop2: detected capacity change from 0 to 4096
[  185.218566][    C0] I/O error, dev loop9, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  185.228016][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  185.252697][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  185.282426][    C0] I/O error, dev loop9, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  185.292104][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  185.344529][    C0] I/O error, dev loop9, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  185.354056][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  185.379231][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  185.435608][    C0] I/O error, dev loop9, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  185.445032][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  185.473424][    C0] I/O error, dev loop9, sector 264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  185.483222][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  185.520296][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  185.561372][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  185.598404][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  185.634962][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  185.671562][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  185.706964][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  185.733449][ T4282] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  185.750243][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  185.765560][ T4282] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  185.793374][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  185.824265][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  185.833015][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  185.851786][   T36] wlan1: Creating new IBSS network, BSSID 0e:2d:ea:57:00:c2
[  185.903686][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  185.943950][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  185.967192][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.695'.
[  185.993909][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  186.025190][ T6846] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  186.034110][ T6846] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  186.042864][ T6846] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  186.051761][ T6846] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  186.066688][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  186.114064][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  186.122826][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  186.165575][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  186.197730][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  186.206898][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.695'.
[  186.232743][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  186.250845][ T6832] loop8: detected capacity change from 0 to 32768
[  186.265723][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  186.277056][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  186.299523][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  186.307768][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  186.324063][ T4270] Bluetooth: hci0: command 0x0c1a tx timeout
[  186.335282][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  186.377379][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  186.405288][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  186.414864][ T6321] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  186.462837][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  186.496024][ T6113] NILFS error (device loop9): nilfs_readdir: bad page in #12
[  186.533210][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=130)
[  186.621949][ T6321] usb 4-1: config 0 interface 0 has no altsetting 0
[  186.638446][ T6321] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  186.683871][ T6321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.726552][ T6321] usb 4-1: config 0 descriptor??
[  186.887715][ T6866] netlink: 'syz.2.703': attribute type 1 has an invalid length.
[  187.050232][ T6560] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0)
[  187.092773][ T6560] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0)
[  187.142949][ T6560] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0)
[  187.226039][ T6560] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0)
[  187.264596][ T6560] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0)
[  187.292919][ T6560] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0)
[  187.321135][    T9] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.342796][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0)
[  187.370467][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.706'.
[  187.392717][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0)
[  187.415354][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0)
[  187.440812][ T6113] NILFS (loop9): I/O error reading meta-data file (ino=3, block-offset=0)
[  187.451812][ T6883] loop8: detected capacity change from 0 to 2048
[  187.470414][ T6113] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer
[  187.552068][    T9] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.571852][ T6883] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8802c018, mo2=0082]
[  187.584182][ T4293] loop: Write error at byte offset 9223372036856868863, length 4096.
[  187.643644][    C1] Buffer I/O error on dev loop9, logical block 511, lost sync page write
[  187.652335][ T6113] NILFS (loop9): unable to write superblock: err=-5
[  187.664739][ T4293] loop: Write error at byte offset 9223372036854775807, length 4096.
[  187.686775][ T6883] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  187.703750][    C1] Buffer I/O error on dev loop9, logical block 0, lost sync page write
[  187.712235][ T6113] NILFS (loop9): unable to write superblock: err=-5
[  187.765389][ T6321] radio-keene 4-1:0.0: V4L2 device registered as radio48
[  187.823282][    T9] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.932714][ T5869] EXT4-fs (loop8): unmounting filesystem.
[  187.976995][ T6321] usb 4-1: USB disconnect, device number 2
[  188.003524][    T9] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.752949][ T6905] loop2: detected capacity change from 0 to 8192
[  188.877412][ T6905]  loop2: p1 p3 p4
[  188.881229][ T6905] loop2: partition table partially beyond EOD, truncated
[  188.913944][ T6321] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  188.954210][ T6905] loop2: p1 start 393217 is beyond EOD, truncated
[  188.960709][ T6905] loop2: p3 size 395700 extends beyond EOD, truncated
[  189.008525][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  189.018874][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  189.027115][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  189.028388][ T6905] loop2: p4 start 117571584 is beyond EOD, 
[  189.034983][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  189.043982][ T6905] truncated
[  189.051684][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  189.059127][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  189.105696][ T6321] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.125459][ T6321] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  189.150274][ T6321] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  189.170496][ T6321] usb 6-1: Product: syz
[  189.174873][ T6321] usb 6-1: SerialNumber: syz
[  189.262758][ T6924] input: syz0 as /devices/virtual/input/input18
[  189.396475][ T6925] loop3: detected capacity change from 0 to 4096
[  189.453962][ T6925] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  189.574646][ T6925] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  189.646467][ T4261] udevd[4261]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  190.116866][ T6919] chnl_net:caif_netlink_parms(): no params data found
[  190.218945][ T6321] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42
[  190.233929][ T6321] cdc_ncm 6-1:1.0: setting rx_max = 16384
[  190.421298][ T6321] cdc_ncm 6-1:1.0: setting tx_max = 60
[  190.621037][ T6321] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  190.664554][ T6321] usb 6-1: USB disconnect, device number 8
[  190.687942][ T6919] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.719603][ T6321] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP)
[  190.726694][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.759400][ T6919] device bridge_slave_0 entered promiscuous mode
[  190.806926][ T4270] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  190.818324][ T4270] Bluetooth: hci1: Injecting HCI hardware error event
[  190.827362][ T4270] Bluetooth: hci1: hardware error 0x00
[  190.853014][ T6919] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.860586][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.868989][ T6919] device bridge_slave_1 entered promiscuous mode
[  191.044050][ T4279] Bluetooth: hci4: command 0x0406 tx timeout
[  191.064619][  T125] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  191.121336][ T6919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.131194][ T4277] Bluetooth: hci0: command 0x0409 tx timeout
[  191.135278][ T6963] loop5: detected capacity change from 0 to 512
[  191.151008][ T6963] EXT4-fs: Ignoring removed nobh option
[  191.219296][ T6963] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  191.284482][ T6963] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.287991][  T125] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  191.309554][ T6919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.346348][  T125] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.358228][  T125] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.368324][  T125] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  191.383835][  T125] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  191.403306][  T125] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  191.421656][  T125] usb 9-1: Manufacturer: syz
[  191.428386][  T125] usb 9-1: config 0 descriptor??
[  191.491164][ T6968] loop2: detected capacity change from 0 to 2048
[  191.507003][    T9] device hsr_slave_0 left promiscuous mode
[  191.529224][    T9] device hsr_slave_1 left promiscuous mode
[  191.550473][ T6968] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  191.566379][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.580247][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.599435][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.607882][ T4895] EXT4-fs (loop5): unmounting filesystem.
[  191.646617][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.695844][    T9] device bridge_slave_1 left promiscuous mode
[  191.705327][ T6968] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  191.715438][ T6973] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  191.722942][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.744075][ T4269] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  191.759520][ T6968] Remounting filesystem read-only
[  191.836232][    T9] device bridge_slave_0 left promiscuous mode
[  191.843501][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.854701][  T125] appleir 0003:05AC:8243.000B: unknown main item tag 0x0
[  191.877352][  T125] appleir 0003:05AC:8243.000B: No inputs registered, leaving
[  191.898877][  T125] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0
[  191.933424][  T125] Process accounting resumed
[  191.965702][ T4269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.002487][    T9] device veth1_macvtap left promiscuous mode
[  192.008674][    T9] device veth0_macvtap left promiscuous mode
[  192.025552][    T9] device veth1_vlan left promiscuous mode
[  192.031397][    T9] device veth0_vlan left promiscuous mode
[  192.037737][ T4269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.084616][ T4269] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  192.133852][ T4269] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  192.142960][ T4269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.201021][ T4269] usb 4-1: config 0 descriptor??
[  192.378438][  T125] usb 9-1: USB disconnect, device number 5
[  192.677845][ T4269] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd
[  192.714513][ T4269] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  192.883965][ T4270] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  193.204092][ T4270] Bluetooth: hci0: command 0x041b tx timeout
[  193.604485][ T7000] loop2: detected capacity change from 0 to 131072
[  193.626737][ T4269] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  193.640095][ T7000] F2FS-fs (loop2): invalid crc value
[  193.727928][   T22] usb 4-1: USB disconnect, device number 3
[  193.736705][ T7000] F2FS-fs (loop2): Found nat_bits in checkpoint
[  193.801272][ T7000] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  193.949604][ T7016] fido_id[7016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  194.089208][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  194.095602][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  194.424405][    T9] team0 (unregistering): Port device team_slave_1 removed
[  194.564204][  T128] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  194.578619][    T9] team0 (unregistering): Port device team_slave_0 removed
[  194.705957][ T7020] loop8: detected capacity change from 0 to 32768
[  194.749196][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.763941][  T128] usb 6-1: Using ep0 maxpacket: 8
[  194.770856][  T128] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  194.780773][ T7020] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode.
[  194.814006][  T128] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  194.824341][  T128] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  194.834703][  T128] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  194.845182][  T128] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  194.858962][  T128] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  194.868285][  T128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.005361][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.057911][ T5869] ocfs2: Unmounting device (7,8) on (node local)
[  195.098394][  T128] usb 6-1: GET_CAPABILITIES returned 0
[  195.104257][  T128] usbtmc 6-1:16.0: can't read capabilities
[  195.284268][ T4279] Bluetooth: hci0: command 0x040f tx timeout
[  195.438826][ T7031] usbtmc 6-1:16.0: usb_control_msg returned -71
[  195.445491][ T4269] usb 6-1: USB disconnect, device number 9
[  195.483131][ T7051] usb 6-1: usbtmc_ioctl_clear_in_halt returned -19
[  196.416003][    T9] bond0 (unregistering): Released all slaves
[  196.694903][ T7085] bridge0: port 3(vlan2) entered blocking state
[  196.703613][ T7085] bridge0: port 3(vlan2) entered disabled state
[  196.712145][ T7085] device vlan2 entered promiscuous mode
[  196.735354][ T7085] bridge0: mtu less than device minimum
[  196.755527][ T7027] netlink: 'syz.2.743': attribute type 30 has an invalid length.
[  196.795165][ T6919] team0: Port device team_slave_0 added
[  196.875429][ T6919] team0: Port device team_slave_1 added
[  196.987374][ T6919] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.994794][ T4269] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  197.034237][ T6919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.128678][ T7098] loop8: detected capacity change from 0 to 1024
[  197.153827][ T6919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.194047][ T4269] usb 6-1: Using ep0 maxpacket: 8
[  197.202719][ T6919] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.211760][ T4269] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  197.263981][ T7098] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  197.293162][ T6919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.339909][ T4269] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.369989][   T26] audit: type=1800 audit(1769478843.895:61): pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.764" name="file1" dev="loop8" ino=15 res=0 errno=0
[  197.392562][ T4279] Bluetooth: hci0: command 0x0419 tx timeout
[  197.395442][ T4269] usb 6-1: Product: syz
[  197.413908][ T4269] usb 6-1: Manufacturer: syz
[  197.460365][ T4269] usb 6-1: SerialNumber: syz
[  197.493595][ T6919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.512694][ T4269] usb 6-1: config 0 descriptor??
[  197.539718][ T4269] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  197.605549][ T5869] EXT4-fs (loop8): unmounting filesystem.
[  197.683727][ T6919] device hsr_slave_0 entered promiscuous mode
[  197.730451][ T6919] device hsr_slave_1 entered promiscuous mode
[  197.769246][ T6919] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.779583][ T4269] gspca_sonixj: reg_r err -71
[  197.784680][ T4269] sonixj: probe of 6-1:0.0 failed with error -71
[  197.803559][ T6919] Cannot create hsr debugfs directory
[  197.828775][ T4269] usb 6-1: USB disconnect, device number 10
[  197.859370][ T7116] loop8: detected capacity change from 0 to 1024
[  198.720569][   T26] audit: type=1326 audit(1769478845.245:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.2.774" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9658d9aeb9 code=0x0
[  199.132828][    C1] Unknown status report in ack skb
[  199.437383][ T7158] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input20
[  199.870215][ T6919] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  199.919318][ T7179] device batadv_slave_1 entered promiscuous mode
[  199.941638][ T7179] device veth1_virt_wifi entered promiscuous mode
[  199.976584][ T7178] device veth1_virt_wifi left promiscuous mode
[  200.014151][ T7178] device batadv_slave_1 left promiscuous mode
[  200.020449][ T6919] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  200.085415][ T6919] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  200.106952][ T6919] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  200.440632][ T6919] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.502369][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  200.518213][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  200.617600][ T6919] 8021q: adding VLAN 0 to HW filter on device team0
[  200.656653][ T7203] netlink: 148 bytes leftover after parsing attributes in process `syz.3.793'.
[  200.697963][ T7203] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  200.745660][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  200.764729][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  200.780954][ T7207] loop5: detected capacity change from 0 to 128
[  200.787736][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.794874][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.826281][ T7207] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  200.840239][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  200.853673][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  200.865525][ T7207] hpfs: filesystem error: improperly stopped
[  200.874549][ T7207] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  200.893023][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.900188][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.908159][ T7207] hpfs: You really don't want any checks? You are crazy...
[  200.933254][ T7207] hpfs: hpfs_map_sector(): read error
[  200.952702][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  200.981735][ T7207] hpfs: code page support is disabled
[  201.017440][ T7207] hpfs: hpfs_map_4sectors(): unaligned read
[  201.023705][ T7207] hpfs: hpfs_map_4sectors(): unaligned read
[  201.030939][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  201.053947][ T7207] hpfs: filesystem error: unable to find root dir
[  201.066074][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  201.094721][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  201.120916][ T7207] hpfs: hpfs_map_4sectors(): unaligned read
[  201.161490][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  201.180722][ T7207] hpfs: hpfs_map_sector(): read error
[  201.191059][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  201.226418][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  201.254611][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  201.295305][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  201.327544][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  201.359541][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  201.399588][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  201.442302][ T6919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  202.154037][ T7255] loop3: detected capacity change from 0 to 512
[  202.197783][ T7250] loop2: detected capacity change from 0 to 8192
[  202.315629][ T7255] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  202.344063][ T7255] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.479260][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  202.514776][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  202.547277][ T6919] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.640987][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  202.659557][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  202.686807][ T6403] EXT4-fs (loop3): unmounting filesystem.
[  202.717904][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  202.732978][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  202.755202][ T6919] device veth0_vlan entered promiscuous mode
[  202.763013][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  202.789582][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  202.818476][ T6919] device veth1_vlan entered promiscuous mode
[  202.909347][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  202.928013][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  202.949136][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  202.976340][ T4885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  202.987671][ T6919] device veth0_macvtap entered promiscuous mode
[  203.016016][ T6919] device veth1_macvtap entered promiscuous mode
[  203.081410][ T6919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.113956][ T6919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.144647][ T6919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.173109][ T6919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.193501][ T6919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.213813][ T6919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.253521][ T6919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.271216][ T6919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.293610][ T6919] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.329544][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  203.344730][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  203.373297][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  203.407846][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  203.451036][ T6919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.479872][ T6919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.511795][ T6919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.538921][ T6919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.554223][ T6919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.565213][ T6919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.575338][ T6919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.586615][ T6919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.599537][ T6919] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.612211][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  203.631862][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  203.666284][ T6919] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.690134][ T6919] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.718438][ T6919] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.733952][ T6919] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.774013][ T4331] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  203.872483][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.896719][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.936660][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  203.952820][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.965898][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.979561][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  203.985956][ T4331] usb 6-1: Using ep0 maxpacket: 16
[  203.999182][ T4331] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  204.024485][ T4331] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  204.046431][ T4331] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  204.073182][ T4331] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  204.124218][ T4331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.134723][ T4331] usb 6-1: Product: syz
[  204.139398][ T4331] usb 6-1: Manufacturer: syz
[  204.152785][ T4331] usb 6-1: SerialNumber: syz
[  204.236937][ T7275] loop3: detected capacity change from 0 to 32768
[  204.269238][ T7275] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.811 (7275)
[  204.387975][ T7275] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  204.443918][ T7275] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  204.484656][ T7275] BTRFS info (device loop3): using free space tree
[  204.584860][ T4331] usb 6-1: 0:2 : does not exist
[  204.715726][ T7305] 9pnet: p9_errstr2errno: server reported unknown error �è
[  204.876260][ T7275] BTRFS info (device loop3): enabling ssd optimizations
[  205.043394][   T26] audit: type=1800 audit(1769478851.565:63): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.811" name="bus" dev="loop3" ino=263 res=0 errno=0
[  205.210770][ T7328] netlink: 'syz.8.821': attribute type 1 has an invalid length.
[  205.233905][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.8.821'.
[  205.389325][ T6403] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  205.421710][ T4331] usb 6-1: USB disconnect, device number 11
[  205.862405][ T7339] loop8: detected capacity change from 0 to 1024
[  205.968444][ T7339] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  205.998501][ T7339] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.140914][ T7339] EXT4-fs error (device loop8): ext4_map_blocks:745: inode #15: comm syz.8.826: lblock 0 mapped to illegal pblock 0 (length 6)
[  206.214728][ T7339] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  206.294095][ T7339] EXT4-fs (loop8): This should not happen!! Data will be lost
[  206.294095][ T7339] 
[  206.379309][ T7350] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #15: comm syz.8.826: lblock 0 mapped to illegal pblock 0 (length 1)
[  206.413120][ T7353] loop3: detected capacity change from 0 to 1024
[  206.459009][ T7350] EXT4-fs error (device loop8): ext4_ext_remove_space:2930: inode #15: comm syz.8.826: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  206.514635][ T7353] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  206.544953][ T7359] loop5: detected capacity change from 0 to 2048
[  206.564893][ T7353] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  206.615263][ T7350] EXT4-fs error (device loop8) in ext4_setattr:5676: Corrupt filesystem
[  206.665159][ T7335] loop1: detected capacity change from 0 to 32768
[  206.672968][ T7335] XFS: attr2 mount option is deprecated.
[  206.707770][ T7359] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  206.755877][ T7359] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  206.787861][ T7335] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  206.804425][ T7260] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  206.838003][ T7335] XFS (loop1): Mounting V5 Filesystem
[  206.872930][ T5869] EXT4-fs (loop8): unmounting filesystem.
[  206.955569][ T7335] XFS (loop1): Ending clean mount
[  207.005290][ T7335] XFS (loop1): Quotacheck needed: Please wait.
[  207.014321][ T6403] EXT4-fs (loop3): unmounting filesystem.
[  207.105060][ T4895] EXT4-fs (loop5): unmounting filesystem.
[  207.118849][ T7378] loop8: detected capacity change from 0 to 256
[  207.149790][ T7335] XFS (loop1): Quotacheck: Done.
[  207.227304][ T7378] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  207.249620][   T26] audit: type=1804 audit(1769478853.775:64): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.825" name="/newroot/3/file0/file1" dev="loop1" ino=6150 res=1 errno=0
[  207.386163][ T7378] exFAT-fs (loop8): error, invalid access to FAT free cluster (entry 0x00000008)
[  207.419403][ T6919] XFS (loop1): Unmounting Filesystem
[  207.852980][ T7397] loop8: detected capacity change from 0 to 16
[  207.949272][ T7397] erofs: (device loop8): mounted with root inode @ nid 36.
[  208.053973][  T125] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  208.219395][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.8.844'.
[  208.264182][  T125] usb 4-1: Using ep0 maxpacket: 8
[  208.271727][  T125] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  208.313090][  T125] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  208.330797][  T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.391905][  T125] usb 4-1: config 0 descriptor??
[  208.433589][  T125] gspca_main: vc032x-2.14.0 probing 046d:0892
[  208.466853][ T7416] Bluetooth: MGMT ver 1.22
[  208.586793][ T7422] loop5: detected capacity change from 0 to 164
[  208.684355][ T7422] rock: directory entry would overflow storage
[  208.709509][ T7422] rock: sig=0x66, size=4, remaining=3
[  208.767659][ T7422] rock: directory entry would overflow storage
[  208.793828][ T7422] rock: sig=0x66, size=4, remaining=3
[  209.338860][ T7430] loop5: detected capacity change from 0 to 8192
[  209.364600][ T7430] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  209.472450][ T7430] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  209.482306][ T7430] REISERFS (device loop5): using ordered data mode
[  209.489598][ T7430] reiserfs: using flush barriers
[  209.528771][ T7430] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  209.548725][ T7430] REISERFS (device loop5): checking transaction log (loop5)
[  209.559069][ T7430] REISERFS (device loop5): Using r5 hash to sort names
[  209.574715][ T7430] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  209.643012][  T125] gspca_vc032x: reg_w err -71
[  209.650372][  T125] vc032x: probe of 4-1:0.0 failed with error -71
[  209.693690][ T7441] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3669, free_space(entry_count) 2
[  209.717498][  T125] usb 4-1: USB disconnect, device number 4
[  209.778899][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.8.857'.
[  209.792909][ T7441] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  209.819709][ T7445] loop2: detected capacity change from 0 to 1024
[  209.832537][ T7441] REISERFS (device loop5): Remounting filesystem read-only
[  209.874754][ T7448] syz.1.858 sent an empty control message without MSG_MORE.
[  209.884287][ T7441] REISERFS error (device loop5): vs-5350 reiserfs_delete_solid_item: i/o failure occurred trying to delete [-1 2 0x1 IND]
[  209.934353][ T7445] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  209.994046][ T7441] REISERFS warning (device loop5): clm-6006 reiserfs_dirty_inode: writing inode 2 on readonly FS
[  210.103093][ T7445] EXT4-fs error (device loop2): ext4_xattr_set_entry:1616: inode #15: comm syz.2.856: corrupted xattr entries
[  210.188032][ T7445] EXT4-fs error (device loop2): ext4_xattr_block_set:2161: inode #15: comm syz.2.856: bad block 113
[  210.467718][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  210.538342][ T7472] loop1: detected capacity change from 0 to 1024
[  210.606894][ T7472] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  210.762913][ T7472] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.864: inode #1684960047: comm syz.1.864: iget: illegal inode #
[  210.834532][ T7472] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.864: error while reading EA inode 1684960047 err=-117
[  210.914643][ T7472] EXT4-fs error (device loop1): ext4_xattr_block_set:2161: inode #15: comm syz.1.864: bad block 113
[  211.099789][ T6919] EXT4-fs (loop1): unmounting filesystem.
[  211.414453][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.876'.
[  211.477401][ T7504] netlink: 'syz.3.876': attribute type 10 has an invalid length.
[  211.628323][ T7504] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  211.729031][ T7479] loop5: detected capacity change from 0 to 32768
[  211.861659][ T7525] loop2: detected capacity change from 0 to 128
[  211.892510][ T7479] XFS (loop5): Mounting V5 Filesystem
[  211.968814][ T7479] XFS (loop5): Ending clean mount
[  212.002289][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.8.882'.
[  212.045424][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.8.882'.
[  212.067888][ T7525] syz.2.883: attempt to access beyond end of device
[  212.067888][ T7525] loop2: rw=2049, sector=145, nr_sectors = 95 limit=128
[  212.324149][ T4895] XFS (loop5): Unmounting Filesystem
[  212.576815][ T7546] loop2: detected capacity change from 0 to 2048
[  212.622341][ T7546] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  212.808939][ T7553] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.888'.
[  213.405353][ T7540] loop1: detected capacity change from 0 to 32768
[  213.456911][ T7540] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.885 (7540)
[  213.478450][ T7574] loop2: detected capacity change from 0 to 512
[  213.530590][ T7540] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  213.560899][ T7540] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  213.582963][ T7574] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  213.595756][ T7540] BTRFS info (device loop1): force clearing of disk cache
[  213.602955][ T7540] BTRFS info (device loop1): enabling auto defrag
[  213.610029][ T7540] BTRFS info (device loop1): enabling ssd optimizations
[  213.617896][ T7574] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.639557][ T7540] BTRFS info (device loop1): max_inline at 0
[  213.664192][ T7540] BTRFS info (device loop1): enabling disk space caching
[  213.699016][ T7540] BTRFS info (device loop1): disk space caching is enabled
[  213.752459][   T26] audit: type=1800 audit(1769478860.275:65): pid=7584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.897" name="bus" dev="loop2" ino=18 res=0 errno=0
[  213.876489][   T26] audit: type=1800 audit(1769478860.325:66): pid=7574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.897" name="bus" dev="loop2" ino=18 res=0 errno=0
[  213.896621][    C1] vkms_vblank_simulate: vblank timer overrun
[  213.938905][ T7540] BTRFS info (device loop1): rebuilding free space tree
[  213.988303][ T7540] BTRFS info (device loop1): disabling free space tree
[  214.007869][ T7540] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  214.064251][ T7540] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  214.129916][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  214.467576][ T6919] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  214.981145][ T7610] loop8: detected capacity change from 0 to 32768
[  215.027671][ T7626] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  215.044659][ T7610] 
[  215.044659][ T7610]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  215.044659][ T7610] 
[  215.160154][ T7610] ERROR: (device loop8): diWrite: ixpxd invalid
[  215.160154][ T7610] 
[  215.242010][ T7610] ERROR: (device loop8): txCommit: 
[  215.242010][ T7610] 
[  215.389435][ T7635] loop3: detected capacity change from 0 to 32768
[  215.405653][ T7635] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.908 (7635)
[  215.429216][ T7635] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  215.439502][ T7635] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  215.448296][ T7635] BTRFS info (device loop3): using free space tree
[  215.458695][ T7626] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  215.468114][ T7626] usb 6-1: config 0 has no interface number 0
[  215.484055][ T7626] usb 6-1: config 0 interface 41 has no altsetting 0
[  215.494422][ T7626] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  215.503521][ T7626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.511768][ T7626] usb 6-1: Product: syz
[  215.516086][ T7626] usb 6-1: Manufacturer: syz
[  215.521220][ T7626] usb 6-1: SerialNumber: syz
[  215.528457][ T7626] usb 6-1: config 0 descriptor??
[  215.564935][ T7635] BTRFS info (device loop3): enabling ssd optimizations
[  215.794825][ T4953] ERROR: (device loop8): diWrite: ixpxd invalid
[  215.794825][ T4953] 
[  215.823798][ T4953] ERROR: (device loop8): txCommit: 
[  215.823798][ T4953] 
[  215.841816][ T4953] jfs_write_inode: jfs_commit_inode failed!
[  215.865633][ T5869] 
[  215.865633][ T5869]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  215.865633][ T5869] 
[  215.912675][ T5869] 
[  215.912675][ T5869]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  215.912675][ T5869] 
[  215.987573][ T6403] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  216.356654][ T7626] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  216.474660][ T7677] loop1: detected capacity change from 0 to 256
[  216.515157][ T7677] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  216.575331][ T7677] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  216.597333][ T7626] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  216.649190][ T7626] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  216.677449][ T7677] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  216.700470][ T7626] CoreChips: probe of 6-1:0.41 failed with error -71
[  216.752211][ T7626] usb 6-1: USB disconnect, device number 12
[  217.001091][ T6919] Trying to write to read-only block-device loop1
[  217.027604][ T6919] Trying to write to read-only block-device loop1
[  217.059206][ T6919] Trying to write to read-only block-device loop1
[  217.258646][ T7698] Invalid ELF header len 1
[  217.351781][ T7700] netlink: 16 bytes leftover after parsing attributes in process `syz.5.922'.
[  217.407085][ T7701] netlink: 'syz.5.922': attribute type 10 has an invalid length.
[  217.466063][ T7701] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  217.759510][ T7336] kernel write not supported for file bpf-prog (pid: 7336 comm: kworker/1:16)
[  217.999365][ T7721] loop8: detected capacity change from 0 to 2048
[  218.098363][ T7692] loop3: detected capacity change from 0 to 40427
[  218.105632][ T7721] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  218.139902][ T7692] F2FS-fs (loop3): invalid crc value
[  218.178324][ T7692] F2FS-fs (loop3): Found nat_bits in checkpoint
[  218.383277][ T7692] F2FS-fs (loop3): Start checkpoint disabled!
[  218.413386][ T7692] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  218.988813][ T7626] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  219.173899][ T7626] usb 2-1: Using ep0 maxpacket: 32
[  219.181217][ T7626] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.217678][ T7626] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.248604][ T7626] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  219.280903][ T7626] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.325625][ T7626] usb 2-1: config 0 descriptor??
[  219.351020][ T7626] hub 2-1:0.0: USB hub found
[  219.407362][ T7755] loop5: detected capacity change from 0 to 4096
[  219.553605][ T7626] hub 2-1:0.0: 1 port detected
[  219.587074][ T7745] loop2: detected capacity change from 0 to 32768
[  219.648666][ T7745] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.937 (7745)
[  219.753660][ T7745] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  219.808948][ T7745] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  219.839258][ T4293] kworker/u4:5: attempt to access beyond end of device
[  219.839258][ T4293] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  219.860473][ T7745] BTRFS info (device loop2): force clearing of disk cache
[  219.888303][ T7745] BTRFS info (device loop2): enabling auto defrag
[  219.922024][ T7745] BTRFS info (device loop2): enabling ssd optimizations
[  219.988995][ T7745] BTRFS info (device loop2): max_inline at 0
[  220.021011][ T7745] BTRFS info (device loop2): enabling disk space caching
[  220.056632][ T7762] ntfs3: loop5: mft corrupted
[  220.063938][ T7745] BTRFS info (device loop2): disk space caching is enabled
[  220.171135][ T7626] hub 2-1:0.0: activate --> -90
[  220.225499][ T7755] ntfs3: loop5: mft corrupted
[  220.500953][ T7745] BTRFS info (device loop2): rebuilding free space tree
[  220.550814][   T26] audit: type=1326 audit(1769478867.075:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff498b9aeb9 code=0x7ffc0000
[  220.579556][ T7626] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  220.584906][   T22] usb 2-1: USB disconnect, device number 4
[  220.615922][ T7745] BTRFS info (device loop2): disabling free space tree
[  220.633904][   T26] audit: type=1326 audit(1769478867.105:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff498b9aeb9 code=0x7ffc0000
[  220.637200][ T7745] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  220.673888][ T7336] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  220.757571][ T7745] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  220.795514][   T26] audit: type=1326 audit(1769478867.105:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7ff498b9aeb9 code=0x7ffc0000
[  220.833606][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.944'.
[  220.881536][ T7336] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  220.906603][ T7336] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  220.921925][   T26] audit: type=1326 audit(1769478867.135:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff498b9aeb9 code=0x7ffc0000
[  220.954869][ T7336] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  220.997186][ T7336] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  221.033332][ T7336] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  221.090092][ T7336] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  221.121815][ T7336] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  221.150497][ T7336] usb 9-1: Product: syz
[  221.155269][ T7336] usb 9-1: Manufacturer: syz
[  221.165710][ T7336] cdc_wdm 9-1:1.0: skipping garbage
[  221.171666][ T7336] cdc_wdm 9-1:1.0: skipping garbage
[  221.179915][ T7336] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  221.194967][ T7336] cdc_wdm 9-1:1.0: Unknown control protocol
[  221.245507][ T4282] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  221.258219][ T7793] device syz_tun left promiscuous mode
[  221.638723][ T7620] usb 9-1: USB disconnect, device number 6
[  222.280579][ T7799] loop3: detected capacity change from 0 to 32768
[  222.419460][ T7799] XFS (loop3): Mounting V5 Filesystem
[  222.553539][ T7799] XFS (loop3): Ending clean mount
[  222.831064][ T6403] XFS (loop3): Unmounting Filesystem
[  222.948150][ T7847] loop5: detected capacity change from 0 to 64
[  223.202532][ T7822] loop8: detected capacity change from 0 to 32768
[  223.227989][ T7822] XFS: noikeep mount option is deprecated.
[  223.241757][ T7822] XFS: ikeep mount option is deprecated.
[  223.378879][ T7822] XFS (loop8): DAX unsupported by block device. Turning off DAX.
[  223.394484][ T7822] XFS (loop8): Mounting V5 Filesystem
[  223.532606][ T7871] loop2: detected capacity change from 0 to 128
[  223.583732][ T7822] XFS (loop8): Ending clean mount
[  223.608176][ T7822] XFS (loop8): Quotacheck needed: Please wait.
[  223.722547][ T7822] XFS (loop8): Quotacheck: Done.
[  223.796212][   T11] kworker/u4:1: attempt to access beyond end of device
[  223.796212][   T11] loop2: rw=1, sector=129, nr_sectors = 1 limit=128
[  223.819289][   T11] Buffer I/O error on dev loop2, logical block 129, lost async page write
[  223.838863][   T11] kworker/u4:1: attempt to access beyond end of device
[  223.838863][   T11] loop2: rw=1, sector=130, nr_sectors = 1 limit=128
[  223.873682][   T11] Buffer I/O error on dev loop2, logical block 130, lost async page write
[  223.894246][   T11] kworker/u4:1: attempt to access beyond end of device
[  223.894246][   T11] loop2: rw=1, sector=131, nr_sectors = 1 limit=128
[  223.928706][   T11] Buffer I/O error on dev loop2, logical block 131, lost async page write
[  223.960870][   T11] kworker/u4:1: attempt to access beyond end of device
[  223.960870][   T11] loop2: rw=1, sector=132, nr_sectors = 1 limit=128
[  224.003432][   T11] Buffer I/O error on dev loop2, logical block 132, lost async page write
[  224.034709][   T11] kworker/u4:1: attempt to access beyond end of device
[  224.034709][   T11] loop2: rw=1, sector=133, nr_sectors = 1 limit=128
[  224.061475][ T5869] XFS (loop8): Unmounting Filesystem
[  224.114492][   T11] Buffer I/O error on dev loop2, logical block 133, lost async page write
[  224.145458][   T11] kworker/u4:1: attempt to access beyond end of device
[  224.145458][   T11] loop2: rw=1, sector=134, nr_sectors = 1 limit=128
[  224.159757][   T11] Buffer I/O error on dev loop2, logical block 134, lost async page write
[  224.201288][   T11] kworker/u4:1: attempt to access beyond end of device
[  224.201288][   T11] loop2: rw=1, sector=135, nr_sectors = 1 limit=128
[  224.217340][   T11] Buffer I/O error on dev loop2, logical block 135, lost async page write
[  224.239790][   T11] kworker/u4:1: attempt to access beyond end of device
[  224.239790][   T11] loop2: rw=1, sector=136, nr_sectors = 24 limit=128
[  224.313981][ T7336] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  224.513900][ T7336] usb 6-1: Using ep0 maxpacket: 16
[  224.520659][ T7336] usb 6-1: config 4 has an invalid interface number: 51 but max is 0
[  224.559342][ T7336] usb 6-1: config 4 has no interface number 0
[  224.565666][ T7336] usb 6-1: config 4 interface 51 has no altsetting 0
[  224.583614][ T7336] usb 6-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b
[  224.623639][ T7336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.637335][ T7336] usb 6-1: Product: syz
[  224.641549][ T7336] usb 6-1: Manufacturer: syz
[  224.647352][ T7336] usb 6-1: SerialNumber: syz
[  224.681898][ T7336] upd78f0730 6-1:4.51: upd78f0730 converter detected
[  224.718044][ T7336] usb 6-1: upd78f0730 converter now attached to ttyUSB0
[  224.900542][ T7336] usb 6-1: USB disconnect, device number 13
[  224.934291][ T7336] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  224.977426][ T7336] upd78f0730 6-1:4.51: device disconnected
[  225.035378][ T7903] netlink: 'syz.1.973': attribute type 3 has an invalid length.
[  225.043088][ T7903] netlink: 'syz.1.973': attribute type 8 has an invalid length.
[  225.107245][ T7903] netlink: 'syz.1.973': attribute type 4 has an invalid length.
[  225.157001][ T7903] netlink: 'syz.1.973': attribute type 7 has an invalid length.
[  225.185242][ T7903] netlink: 199012 bytes leftover after parsing attributes in process `syz.1.973'.
[  225.339501][ T7909] loop2: detected capacity change from 0 to 4096
[  225.379088][ T7909] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  225.526388][ T7890] loop3: detected capacity change from 0 to 32768
[  225.655673][ T7890] XFS (loop3): Mounting V5 Filesystem
[  225.822783][ T7928] loop1: detected capacity change from 0 to 2048
[  225.844543][ T7890] XFS (loop3): Ending clean mount
[  225.988362][   T26] audit: type=1800 audit(1769478872.515:71): pid=7890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.971" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  226.024749][ T7928]  loop1: p3 < > p4 < >
[  226.040387][ T7928] loop1: partition table partially beyond EOD, truncated
[  226.099511][ T7928] loop1: p3 start 4284289 is beyond EOD, truncated
[  226.153021][ T3638]  loop1: p3 < > p4 < >
[  226.183852][ T3638] loop1: partition table partially beyond EOD, truncated
[  226.210454][ T3638] loop1: p3 start 4284289 is beyond EOD, truncated
[  226.234195][ T6403] XFS (loop3): Unmounting Filesystem
[  226.762091][ T7952] loop5: detected capacity change from 0 to 16
[  226.798985][ T7952] erofs: (device loop5): mounted with root inode @ nid 36.
[  226.884031][ T4270] Bluetooth: hci3: command 0x0406 tx timeout
[  227.161378][ T7959] device pim6reg1 entered promiscuous mode
[  227.273993][ T7964] netlink: 'syz.2.992': attribute type 12 has an invalid length.
[  227.306937][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'.
[  227.328298][ T7964] netlink: 'syz.2.992': attribute type 12 has an invalid length.
[  227.424209][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'.
[  227.467285][ T7970] loop8: detected capacity change from 0 to 256
[  227.505680][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.994'.
[  227.529798][ T7970] exfat: Unknown parameter 'âÎa	Ú>f'
[  227.656188][ T7975] input: syz0 as /devices/virtual/input/input21
[  229.541745][ T7983] loop5: detected capacity change from 0 to 65536
[  229.620103][ T8007] loop2: detected capacity change from 0 to 32768
[  229.627878][ T8007] XFS: noikeep mount option is deprecated.
[  229.633805][ T8007] XFS: ikeep mount option is deprecated.
[  229.654041][   T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  229.687965][ T8007] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  229.706233][ T8007] XFS (loop2): Mounting V5 Filesystem
[  229.712571][ T7983] XFS (loop5): Mounting V5 Filesystem
[  229.755838][ T8011] loop1: detected capacity change from 0 to 32768
[  229.843895][   T22] usb 4-1: Using ep0 maxpacket: 16
[  229.867719][   T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  229.949073][   T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  229.997571][   T22] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  230.039555][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.069446][   T22] usb 4-1: Product: syz
[  230.099814][   T22] usb 4-1: Manufacturer: syz
[  230.125898][   T22] usb 4-1: SerialNumber: syz
[  230.142507][ T7983] XFS (loop5): Ending clean mount
[  230.145063][ T8007] XFS (loop2): Ending clean mount
[  230.170639][ T7983] XFS (loop5): Quotacheck needed: Please wait.
[  230.180650][ T8007] XFS (loop2): Quotacheck needed: Please wait.
[  230.306695][ T4259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4259)
[  230.322794][ T8007] XFS (loop2): Quotacheck: Done.
[  230.377034][   T22] usb 4-1: 0:2 : does not exist
[  230.405431][   T22] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  230.432662][ T7983] XFS (loop5): Quotacheck: Done.
[  230.479071][   T22] usb 4-1: USB disconnect, device number 5
[  230.642857][ T4282] XFS (loop2): Unmounting Filesystem
[  230.740736][ T4895] XFS (loop5): Unmounting Filesystem
[  230.755564][ T6319] udevd[6319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  231.669235][ T8070] loop8: detected capacity change from 0 to 512
[  231.690666][ T8070] EXT4-fs: Ignoring removed nobh option
[  231.797196][ T8070] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  231.817105][ T8070] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.854003][  T125] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  232.045918][  T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.071895][ T5869] EXT4-fs (loop8): unmounting filesystem.
[  232.083613][  T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.127970][  T125] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  232.172760][  T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.220638][  T125] usb 2-1: config 0 descriptor??
[  232.666320][  T125] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0
[  232.673689][  T125] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0
[  232.731919][  T125] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.000D/input/input22
[  232.779878][  T125] cm6533_jd 0003:0D8C:0022.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  232.914680][  T125] usb 2-1: USB disconnect, device number 5
[  233.090539][ T8109] fido_id[8109]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  233.499752][ T8106] loop8: detected capacity change from 0 to 40427
[  233.552891][ T8106] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x3ffff
[  233.592009][ T8106] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x35f7
[  233.648808][ T8106] F2FS-fs (loop8): invalid crc value
[  233.689921][ T8106] F2FS-fs (loop8): Found nat_bits in checkpoint
[  233.892553][ T8106] F2FS-fs (loop8): Start checkpoint disabled!
[  233.939026][ T8106] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  234.119638][ T8106] F2FS-fs (loop8) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0x107/0x640
[  234.151579][ T8106] syz.8.1027: attempt to access beyond end of device
[  234.151579][ T8106] loop8: rw=2049, sector=53248, nr_sectors = 176 limit=40427
[  234.416945][ T8122] loop1: detected capacity change from 0 to 32768
[  234.484166][ T4279] Bluetooth: hci5: command 0x1003 tx timeout
[  234.494067][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  234.685987][ T8131] loop5: detected capacity change from 0 to 32768
[  234.728241][ T8142] nbd2: detected capacity change from 0 to 8
[  234.845929][ T8131] XFS (loop5): Mounting V5 Filesystem
[  234.864105][ T8149] block nbd2: shutting down sockets
[  234.920905][ T8131] XFS (loop5): Ending clean mount
[  234.928472][    C1] blk_print_req_error: 31 callbacks suppressed
[  234.928489][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  234.943829][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  234.960012][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  234.969618][   T52] Buffer I/O error on dev nbd2, logical block 0, async page read
[  234.979004][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  234.988101][   T52] Buffer I/O error on dev nbd2, logical block 0, async page read
[  234.996017][ T4259] ldm_validate_partition_table(): Disk read failed.
[  235.002655][ T4259] Dev nbd2: unable to read RDB block 0
[  235.008278][ T4259]  nbd2: unable to read partition table
[  235.014128][ T4259] nbd2: partition table beyond EOD, truncated
[  235.133997][   T26] audit: type=1800 audit(1769478881.655:72): pid=8131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1033" name="file1" dev="loop5" ino=4422 res=0 errno=0
[  235.367888][ T4895] XFS (loop5): Unmounting Filesystem
[  235.582751][ T6324] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  235.617622][    T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  235.793985][ T6324] usb 4-1: Using ep0 maxpacket: 16
[  235.809538][ T6324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.823609][ T6324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.848463][ T6324] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  235.866658][    T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.922923][    T7] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  235.940425][ T6324] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  235.959839][    T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  235.979284][ T6324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.999475][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.038690][ T6324] usb 4-1: config 0 descriptor??
[  236.046056][    T7] usb 2-1: Product: syz
[  236.063300][    T7] usb 2-1: Manufacturer: syz
[  236.075955][    T7] usb 2-1: SerialNumber: syz
[  236.133037][    T7] cdc_mbim 2-1:1.0: skipping garbage
[  236.336530][ T8165] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  236.472562][ T6324] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.000E/input/input23
[  236.581833][ T6324] appleir 0003:05AC:8241.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[  236.761824][ T4331] usb 4-1: USB disconnect, device number 6
[  236.962838][ T8192] fido_id[8192]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  236.977984][ T8165] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  236.992258][    T7] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  237.005800][    T7] cdc_mbim 2-1:1.0: setting rx_max = 2048
[  237.203511][    T7] cdc_mbim 2-1:1.0: setting tx_max = 184
[  237.213400][    T7] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  237.249555][    T7] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 0a:fb:4b:9b:08:03
[  237.429659][ T4331] usb 2-1: USB disconnect, device number 6
[  237.446547][ T4331] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  237.510961][ T8211] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1055'.
[  237.673841][    T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  237.864165][    T7] usb 3-1: Using ep0 maxpacket: 32
[  237.871137][    T7] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  237.893815][    T7] usb 3-1: config 0 has no interface number 0
[  237.915577][    T7] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  237.942605][ T8199] loop5: detected capacity change from 0 to 32768
[  237.953806][    T7] usb 3-1: config 0 interface 85 has no altsetting 0
[  237.979005][    T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  237.988640][ T8199] (syz.5.1051,8199,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options
[  238.018560][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.035486][ T8199] (syz.5.1051,8199,0):ocfs2_fill_super:1176 ERROR: status = -22
[  238.053502][    T7] usb 3-1: Product: syz
[  238.063615][    T7] usb 3-1: Manufacturer: syz
[  238.093827][    T7] usb 3-1: SerialNumber: syz
[  238.111446][    T7] usb 3-1: config 0 descriptor??
[  238.427853][ T8207] loop8: detected capacity change from 0 to 40427
[  238.480770][ T8207] F2FS-fs (loop8): invalid crc value
[  238.525573][ T8207] F2FS-fs (loop8): Found nat_bits in checkpoint
[  238.840757][ T8207] F2FS-fs (loop8): Start checkpoint disabled!
[  238.853908][    T7] appletouch 3-1:0.85: Geyser mode initialized.
[  238.861795][    T7] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input24
[  238.951166][ T8207] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  239.090211][    T7] usb 3-1: USB disconnect, device number 8
[  239.123008][    T7] appletouch 3-1:0.85: input: appletouch disconnected
[  239.349123][ T8230] loop5: detected capacity change from 0 to 32768
[  239.391862][ T8230] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.1060 (8230)
[  239.467111][ T8230] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  239.533206][ T8230] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  239.583672][ T8230] BTRFS warning (device loop5): the 'inode_cache' option is deprecated and has no effect since 5.11
[  239.649348][ T8230] BTRFS info (device loop5): force clearing of disk cache
[  239.691553][ T8230] BTRFS info (device loop5): setting nodatasum
[  239.738855][ T8230] BTRFS info (device loop5): turning on sync discard
[  239.791314][ T8230] BTRFS info (device loop5): allowing degraded mounts
[  239.823967][ T8230] BTRFS info (device loop5): enabling disk space caching
[  239.843255][ T8230] BTRFS info (device loop5): disk space caching is enabled
[  240.071928][ T8230] BTRFS info (device loop5): enabling ssd optimizations
[  240.104100][ T7620] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  240.127316][ T8230] BTRFS info (device loop5): rebuilding free space tree
[  240.228726][ T8230] BTRFS info (device loop5): disabling free space tree
[  240.254010][ T8230] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  240.283825][ T8230] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  240.305696][ T7620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.326902][ T4293] kworker/u4:5: attempt to access beyond end of device
[  240.326902][ T4293] loop8: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  240.364435][ T7620] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  240.434042][ T7620] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  240.443160][ T7620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.519773][ T7620] usb 3-1: config 0 descriptor??
[  240.526455][ T4895] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  240.840617][ T4261] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop5 scanned by udevd (4261)
[  240.952684][ T7620] elecom 0003:056E:00FC.000F: unknown main item tag 0x0
[  240.968743][ T7620] elecom 0003:056E:00FC.000F: unknown main item tag 0x0
[  240.986078][ T7620] elecom 0003:056E:00FC.000F: unknown main item tag 0x0
[  241.006297][ T7620] elecom 0003:056E:00FC.000F: unknown main item tag 0x0
[  241.013310][ T7620] elecom 0003:056E:00FC.000F: unknown main item tag 0x0
[  241.094314][ T7620] elecom 0003:056E:00FC.000F: hidraw0: USB HID v0.00 Device [HID 056e:00fc] on usb-dummy_hcd.2-1/input0
[  241.114695][ T8273] loop3: detected capacity change from 0 to 32768
[  241.243408][ T4269] usb 3-1: USB disconnect, device number 9
[  241.280417][ T8273] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  241.300091][ T8273] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  241.319133][ T8273] BTRFS info (device loop3): turning on sync discard
[  241.334572][ T8273] BTRFS info (device loop3): setting nodatacow, compression disabled
[  241.361079][ T8273] BTRFS info (device loop3): turning off barriers
[  241.378067][ T8273] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  241.395524][ T8287] fido_id[8287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  241.425676][ T8273] BTRFS info (device loop3): trying to use backup root at mount time
[  241.461927][ T8273] BTRFS info (device loop3): metadata ratio 32769
[  241.497008][ T8273] BTRFS info (device loop3): max_inline at 0
[  241.503157][ T8273] BTRFS info (device loop3): using free space tree
[  241.698481][ T8278] loop1: detected capacity change from 0 to 32768
[  241.735853][ T4293] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  241.754595][ T8278] /dev/loop1: Can't open blockdev
[  241.829946][ T8273] BTRFS error (device loop3): failed to load root extent
[  241.859463][ T8273] BTRFS warning (device loop3): try to load backup roots slot 1
[  241.915101][   T36] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  241.976319][ T8273] BTRFS warning (device loop3): couldn't read tree root
[  241.983353][ T8273] BTRFS warning (device loop3): try to load backup roots slot 2
[  242.021042][ T8273] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  242.093933][ T4331] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  242.114481][ T8273] BTRFS warning (device loop3): couldn't read tree root
[  242.121794][ T8273] BTRFS warning (device loop3): try to load backup roots slot 3
[  242.246380][ T8273] BTRFS info (device loop3): enabling ssd optimizations
[  242.257212][ T8273] BTRFS info (device loop3): rebuilding free space tree
[  242.298647][ T4331] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  242.338261][ T4331] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  242.363840][ T4340] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  242.383555][ T8273] BTRFS info (device loop3): checking UUID tree
[  242.400244][ T4331] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  242.430568][ T4331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.565698][ T4340] usb 2-1: Using ep0 maxpacket: 8
[  242.576730][ T4340] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13
[  242.590176][   T26] audit: type=1800 audit(1769478889.115:73): pid=8273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1065" name="file1" dev="loop3" ino=257 res=0 errno=0
[  242.656795][ T4340] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  242.695568][ T4331] usb 6-1: usb_control_msg returned -32
[  242.701217][ T4331] usbtmc 6-1:16.0: can't read capabilities
[  242.715400][ T4340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.723450][ T4340] usb 2-1: Product: syz
[  242.728276][   T26] audit: type=1800 audit(1769478889.255:74): pid=8273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1065" name="file1" dev="loop3" ino=257 res=0 errno=0
[  242.800339][ T4340] usb 2-1: Manufacturer: syz
[  242.815670][ T4340] usb 2-1: SerialNumber: syz
[  242.842573][ T4340] usb 2-1: config 0 descriptor??
[  242.880917][ T4340] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  242.900981][ T6403] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  243.372492][ T8351] loop3: detected capacity change from 0 to 128
[  243.712521][ T8358] loop3: detected capacity change from 0 to 1024
[  243.749362][ T8358] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  243.761969][ T8358] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.831167][ T8358] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: comm syz.3.1080: lblock 0 mapped to illegal pblock 0 (length 6)
[  243.867378][ T8358] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  243.903874][ T4340] gspca_zc3xx: reg_w_i err -71
[  243.942907][ T8358] EXT4-fs (loop3): This should not happen!! Data will be lost
[  243.942907][ T8358] 
[  243.969939][ T8367] bridge0: port 3(syz_tun) entered blocking state
[  243.977434][ T8364] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.1080: lblock 0 mapped to illegal pblock 0 (length 1)
[  244.001490][ T8367] bridge0: port 3(syz_tun) entered disabled state
[  244.030562][ T8364] EXT4-fs error (device loop3): ext4_ext_remove_space:2930: inode #15: comm syz.3.1080: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  244.049515][ T8367] device syz_tun entered promiscuous mode
[  244.056799][ T8367] bridge0: port 3(syz_tun) entered blocking state
[  244.063905][ T8367] bridge0: port 3(syz_tun) entered forwarding state
[  244.153411][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1082'.
[  244.170003][ T8364] EXT4-fs error (device loop3) in ext4_setattr:5676: Corrupt filesystem
[  244.206400][ T8368] bridge0: port 3(syz_tun) entered disabled state
[  244.287927][ T8368] device syz_tun left promiscuous mode
[  244.293533][ T8368] bridge0: port 3(syz_tun) entered disabled state
[  244.340448][ T6403] EXT4-fs (loop3): unmounting filesystem.
[  244.534362][ T4340] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  244.540773][ T4340] gspca_zc3xx: probe of 2-1:0.0 failed with error -71
[  244.579187][ T4340] usb 2-1: USB disconnect, device number 7
[  244.596680][ T4599] udevd[4599]: setting owner of /dev/bus/usb/002/007 to uid=0, gid=0 failed: No such file or directory
[  244.670294][ T8381] vivid-000: disconnect
[  244.742531][ T8377] loop2: detected capacity change from 0 to 4096
[  244.779943][ T8381] vivid-000: reconnect
[  244.799538][ T8377] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  244.879429][ T8385] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1087'.
[  244.891478][ T4331] usb 6-1: USB disconnect, device number 14
[  244.924438][ T8377] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  244.946950][ T8377] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  245.009547][ T8377] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  245.072009][ T8377] ntfs: volume version 3.1.
[  245.458790][ T4282] ntfs: (device loop2): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  246.387663][ T8406] loop3: detected capacity change from 0 to 40427
[  246.421209][ T8406] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  246.441017][ T8439] loop2: detected capacity change from 0 to 512
[  246.446745][ T8406] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  246.501726][ T8439] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1104: inode has both inline data and extents flags
[  246.518941][ T8406] F2FS-fs (loop3): invalid crc value
[  246.554099][ T8439] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1104: couldn't read orphan inode 15 (err -117)
[  246.576381][ T8439] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  246.611141][ T8406] F2FS-fs (loop3): Found nat_bits in checkpoint
[  246.730731][ T8406] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  246.751628][ T8406] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  246.816855][ T8453] loop1: detected capacity change from 0 to 512
[  246.837256][ T8453] EXT4-fs: quotafile must be on filesystem root
[  246.920500][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  247.081872][ T8457] input: syz1 as /devices/virtual/input/input25
[  247.533879][  T125] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  247.724674][  T125] usb 3-1: Using ep0 maxpacket: 16
[  247.732266][  T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.754371][  T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.783461][  T125] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  247.819575][  T125] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  247.844558][  T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.868378][  T125] usb 3-1: config 0 descriptor??
[  247.977094][ T8468] loop1: detected capacity change from 0 to 32768
[  248.014961][ T8468] XFS: noikeep mount option is deprecated.
[  248.021015][ T8468] /dev/loop1: Can't open blockdev
[  248.063715][ T8469] loop5: detected capacity change from 0 to 40427
[  248.108350][ T8469] F2FS-fs (loop5): invalid crc value
[  248.144584][ T8469] F2FS-fs (loop5): Found nat_bits in checkpoint
[  248.306306][  T125] HID 045e:07da: Invalid code 65791 type 1
[  248.310905][ T8469] F2FS-fs (loop5): Start checkpoint disabled!
[  248.318847][ T8486] device veth0 entered promiscuous mode
[  248.334894][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1114'.
[  248.346788][  T125] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0010/input/input26
[  248.373889][ T8469] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  248.431482][  T125] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  248.564144][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  248.724414][  T125] usb 3-1: USB disconnect, device number 10
[  248.827398][ T8489] fido_id[8489]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  248.998895][ T4885] kworker/u4:7: attempt to access beyond end of device
[  248.998895][ T4885] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  249.020638][ T4885] kworker/u4:7: attempt to access beyond end of device
[  249.020638][ T4885] loop5: rw=2049, sector=40992, nr_sectors = 8 limit=40427
[  249.104297][  T128] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  249.144036][ T4331] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  249.325240][  T128] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[  249.333487][  T128] usb 4-1: config 0 has no interface number 0
[  249.346907][ T4331] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  249.362384][  T128] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  249.366084][ T4331] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.393016][  T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.420304][  T128] usb 4-1: Product: syz
[  249.440546][  T128] usb 4-1: Manufacturer: syz
[  249.454689][  T128] usb 4-1: SerialNumber: syz
[  249.459720][ T4331] usb 9-1: config 0 descriptor??
[  249.466178][  T128] usb 4-1: config 0 descriptor??
[  249.687271][ T4331] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00
[  249.703969][ T4331] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  249.759247][ T4331] [drm] Initialized udl 0.0.1 20120220 for 9-1:0.0 on minor 2
[  249.777206][ T4331] [drm] Initialized udl on minor 2
[  249.903518][  T128] usb 4-1: Firmware: major: 109, minor: 210, hardware type: UNKNOWN (205)
[  249.924794][ T4331] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  249.945978][ T4331] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  250.105724][  T128] usb 4-1: Read permanent extended address c2:b9:43:00:d6:2f:11:02 from device
[  250.125078][  T128] usb 4-1: atusb_probe: initialization failed, error = -524
[  250.132559][  T128] atusb: probe of 4-1:0.128 failed with error -524
[  250.189685][ T7336] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  250.199542][ T4331] usb 9-1: USB disconnect, device number 7
[  250.238543][ T7336] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  250.260339][ T7336] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  250.344356][  T128] usb 4-1: USB disconnect, device number 7
[  250.841725][ T8534] loop5: detected capacity change from 0 to 4096
[  250.864867][ T8534] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  250.970232][ T8534] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  251.042555][ T8534] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  251.141080][ T8534] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  251.238884][ T8534] ntfs: volume version 3.1.
[  251.516592][ T4895] ntfs: (device loop5): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  251.797044][ T8584] loop2: detected capacity change from 0 to 164
[  251.890282][ T8584] rock: directory entry would overflow storage
[  251.937273][ T8584] rock: sig=0x66, size=4, remaining=3
[  251.954851][   T26] audit: type=1326 audit(1769478898.485:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.1.1135" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58c099aeb9 code=0x0
[  251.964001][ T8584] rock: directory entry would overflow storage
[  252.024677][ T8584] rock: sig=0x66, size=4, remaining=3
[  252.290301][ T8561] loop3: detected capacity change from 0 to 40427
[  252.318995][ T8561] F2FS-fs (loop3): invalid crc value
[  252.378801][ T8561] F2FS-fs (loop3): Found nat_bits in checkpoint
[  252.506576][ T8561] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0
[  252.523828][ T7622] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  252.544077][ T8561] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  252.601854][ T8561] syz.3.1127: attempt to access beyond end of device
[  252.601854][ T8561] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  252.716438][ T7622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.771910][ T7622] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  252.804816][ T7622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.844601][ T7622] usb 6-1: config 0 descriptor??
[  253.060949][ T7622] usbhid 6-1:0.0: can't add hid device: -71
[  253.074334][ T7622] usbhid: probe of 6-1:0.0 failed with error -71
[  253.085084][ T7622] usb 6-1: USB disconnect, device number 15
[  253.289232][ T8619] loop1: detected capacity change from 0 to 128
[  253.323353][ T8619] /dev/loop1: Can't open blockdev
[  253.642442][ T8629] loop2: detected capacity change from 0 to 1024
[  253.682410][ T8629] EXT4-fs: Ignoring removed bh option
[  253.703823][ T7622] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  253.772138][ T8629] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  253.911751][ T8629] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1150: inode #65079: comm syz.2.1150: iget: illegal inode #
[  253.925584][ T7622] usb 6-1: Using ep0 maxpacket: 32
[  253.933253][ T8629] EXT4-fs (loop2): Remounting filesystem read-only
[  253.941036][ T7622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.956548][ T8629] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1150: error while reading EA inode 65079 err=-117
[  253.969687][ T7622] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  253.979182][ T7622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.998672][ T8629] EXT4-fs (loop2): Remounting filesystem read-only
[  254.007233][ T7622] usb 6-1: config 0 descriptor??
[  254.027775][ T7622] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  254.075035][ T7622] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  254.186037][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  254.273028][    C0] ldusb 6-1:0.0: Ring buffer overflow, 8 bytes dropped
[  254.460595][ T8650] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1155'.
[  254.898455][ T8664] loop3: detected capacity change from 0 to 128
[  254.994295][ T8664] syz.3.1159: attempt to access beyond end of device
[  254.994295][ T8664] loop3: rw=2049, sector=145, nr_sectors = 95 limit=128
[  255.047811][ T8647] loop2: detected capacity change from 0 to 32768
[  255.072530][ T8647] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1154 (8647)
[  255.100627][ T8647] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  255.132954][ T8647] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  255.159619][ T8647] BTRFS info (device loop2): using free space tree
[  255.345876][ T8647] BTRFS info (device loop2): enabling ssd optimizations
[  255.528631][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  255.535125][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  255.554244][ T4282] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  255.691629][ T4331] usb 6-1: USB disconnect, device number 16
[  255.736798][ T4331] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  256.393945][ T6321] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  256.585404][ T6321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.616792][ T6321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.643952][ T6321] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  256.671048][ T6321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.699811][ T6321] usb 3-1: config 0 descriptor??
[  257.344789][ T6321] usb 3-1: string descriptor 0 read error: -22
[  257.363917][ T4331] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  257.549859][ T6321] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0011/input/input27
[  257.564228][ T4331] usb 6-1: Using ep0 maxpacket: 32
[  257.571936][ T4331] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.603431][ T4331] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.665532][ T4331] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  257.686673][ T6321] uclogic 0003:256C:006D.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0
[  257.700126][ T4331] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  257.733867][ T4331] usb 6-1: Product: syz
[  257.738111][ T4331] usb 6-1: Manufacturer: syz
[  257.757844][ T4331] hub 6-1:4.0: USB hub found
[  257.774880][ T6321] usb 3-1: USB disconnect, device number 11
[  257.961284][ T8745] fido_id[8745]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  257.977753][ T4331] hub 6-1:4.0: 2 ports detected
[  258.057679][ T7340] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  258.254031][ T7340] usb 2-1: Using ep0 maxpacket: 32
[  258.267614][ T7340] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  258.304652][ T7340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.323026][ T7340] usb 2-1: Product: syz
[  258.333099][ T7340] usb 2-1: Manufacturer: syz
[  258.343200][ T7340] usb 2-1: SerialNumber: syz
[  258.359118][ T7340] usb 2-1: config 0 descriptor??
[  258.379769][ T4331] hub 6-1:4.0: set hub depth failed
[  258.400914][ T4331] usb 6-1: USB disconnect, device number 17
[  258.619531][ T7340] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 008
[  259.039137][ T8779] loop5: detected capacity change from 0 to 128
[  259.149200][ T8779] syz.5.1184: attempt to access beyond end of device
[  259.149200][ T8779] loop5: rw=2049, sector=145, nr_sectors = 95 limit=128
[  259.401232][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1187'.
[  259.423124][ T8787] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.692777][ T8787] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.276560][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801864d800: rx timeout, send abort
[  260.366522][ T8800] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.442649][ T8794] loop8: detected capacity change from 0 to 131072
[  260.462951][ T8794] F2FS-fs (loop8): invalid crc value
[  260.549157][ T8794] F2FS-fs (loop8): Found nat_bits in checkpoint
[  260.588940][ T8794] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2
[  260.664388][ T8794] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  260.705561][ T8800] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.787575][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801864d800: abort rx timeout. Force session deactivation
[  260.839053][ T7622] usb 2-1: USB disconnect, device number 8
[  260.947755][ T8800] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.051319][ T8817] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  261.101313][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1199'.
[  261.234825][ T8800] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.491039][ T8836] loop8: detected capacity change from 0 to 512
[  261.595320][ T8836] EXT4-fs (loop8): 1 orphan inode deleted
[  261.610720][ T8800] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.628565][ T4953] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  261.657879][ T8836] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  261.674141][ T7340] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  261.683313][ T8800] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.691712][ T4953] EXT4-fs error (device loop8): ext4_release_dquot:6871: comm kworker/u4:8: Failed to release dquot type 1
[  261.709997][ T8800] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.718624][ T8836] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.732011][ T8800] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.824019][ T7627] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  261.854339][   T11] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  261.868114][ T7340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  261.885017][   T11] EXT4-fs error (device loop8): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 1
[  261.900780][ T7340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  261.942648][ T7340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  262.010330][ T7340] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  262.025091][ T5869] EXT4-fs (loop8): unmounting filesystem.
[  262.033065][ T7627] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  262.059807][ T7340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.063570][ T7627] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  262.116238][ T7340] usb 3-1: config 0 descriptor??
[  262.131823][ T7627] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  262.142007][ T8834] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  262.163992][ T7627] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.409982][ T7627] usb 2-1: usb_control_msg returned -32
[  262.418521][ T7627] usbtmc 2-1:16.0: can't read capabilities
[  262.566686][ T7340] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd
[  262.586868][ T7340] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  262.621324][ T7340] plantronics 0003:047F:FFFF.0012: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  262.686184][ T8859] input: syz1 as /devices/virtual/input/input29
[  262.734001][ T7627] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  262.803324][ T7340] usb 3-1: USB disconnect, device number 12
[  262.943816][ T7627] usb 4-1: Using ep0 maxpacket: 8
[  262.950793][ T7627] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  262.974576][ T7627] usb 4-1: config 0 has no interface number 0
[  262.994706][ T7627] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  263.024001][ T7627] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  263.038854][ T7627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.065689][ T7627] usb 4-1: config 0 descriptor??
[  263.110376][ T7627] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[  263.224552][ T8872] netlink: 'syz.8.1212': attribute type 12 has an invalid length.
[  263.236395][ T8872] netlink: 'syz.8.1212': attribute type 29 has an invalid length.
[  263.246611][ T8872] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1212'.
[  263.269002][ T8872] netlink: 'syz.8.1212': attribute type 1 has an invalid length.
[  263.338093][ T7627] usb 4-1: USB disconnect, device number 8
[  263.471278][ T8880] loop8: detected capacity change from 0 to 256
[  264.259525][ T8898] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer.
[  264.582036][ T7340] usb 2-1: USB disconnect, device number 9
[  264.702756][ T8920] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1227'.
[  264.784010][   T22] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  264.975618][   T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.016440][   T22] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  265.048400][   T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.090674][   T22] usb 6-1: config 0 descriptor??
[  265.136312][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1232'.
[  265.240261][ T8935] input: syz1 as /devices/virtual/input/input30
[  265.316366][   T22] usbhid 6-1:0.0: can't add hid device: -71
[  265.340644][   T22] usbhid: probe of 6-1:0.0 failed with error -71
[  265.390249][   T22] usb 6-1: USB disconnect, device number 18
[  265.588199][ T8943] loop2: detected capacity change from 0 to 16
[  265.627028][ T8943] erofs: (device loop2): mounted with root inode @ nid 36.
[  265.928000][   T22] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  266.133985][   T22] usb 6-1: Using ep0 maxpacket: 32
[  266.152613][   T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  266.193981][   T22] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  266.253539][   T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.296276][   T22] usb 6-1: config 0 descriptor??
[  266.342114][   T22] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  266.376874][   T22] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  266.415188][ T8961] loop8: detected capacity change from 0 to 1024
[  266.460693][ T8961] EXT4-fs: Ignoring removed nobh option
[  266.499140][ T8961] EXT4-fs: Ignoring removed bh option
[  266.535326][ T8961] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  266.649810][ T8972] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1245'.
[  266.660170][ T8961] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  266.667542][ T8972] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1245'.
[  266.697961][ T8961] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3852: comm syz.8.1242: Allocating blocks 385-513 which overlap fs metadata
[  266.735817][   T22] usb 6-1: USB disconnect, device number 19
[  266.754190][   T22] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  266.907686][ T8976] EXT4-fs (loop8): pa ffff888073f48540: logic 16, phys. 129, len 24
[  266.916540][ T8976] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 8
[  267.045985][ T5869] EXT4-fs (loop8): unmounting filesystem.
[  267.230220][ T8986] input: syz1 as /devices/virtual/input/input31
[  268.131286][ T9016] loop2: detected capacity change from 0 to 2048
[  268.164669][ T9016] EXT4-fs: Ignoring removed bh option
[  268.240052][ T9016] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  268.313021][ T9016] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  268.364457][ T9016] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  268.427846][ T9016] EXT4-fs (loop2): This should not happen!! Data will be lost
[  268.427846][ T9016] 
[  268.511327][ T9016] EXT4-fs (loop2): Total free blocks count 0
[  268.524155][ T9030] loop5: detected capacity change from 0 to 1024
[  268.541957][ T9016] EXT4-fs (loop2): Free/Dirty block details
[  268.569063][ T9016] EXT4-fs (loop2): free_blocks=2415919104
[  268.585305][ T9016] EXT4-fs (loop2): dirty_blocks=16
[  268.627679][ T9030] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  268.628974][ T9016] EXT4-fs (loop2): Block reservation details
[  268.640697][ T8998] loop8: detected capacity change from 0 to 32768
[  268.702884][ T9016] EXT4-fs (loop2): i_reserved_data_blocks=1
[  268.713269][ T9030] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1263: bg 0: block 385: padding at end of block bitmap is not set
[  268.746787][ T9028] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  268.806200][ T8998] XFS (loop8): Mounting V5 Filesystem
[  268.887078][ T8998] XFS (loop8): Ending clean mount
[  268.919386][ T8998] XFS (loop8): Quotacheck needed: Please wait.
[  269.062360][ T4895] EXT4-fs (loop5): unmounting filesystem.
[  269.071298][ T9051] loop3: detected capacity change from 0 to 128
[  269.135338][ T8998] XFS (loop8): Quotacheck: Done.
[  269.205922][ T9051] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  269.246458][ T9051] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.431612][ T5869] XFS (loop8): Unmounting Filesystem
[  269.863437][ T9051] fscrypt (loop3, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)")
[  270.037835][ T6403] EXT4-fs (loop3): unmounting filesystem.
[  270.792762][ T9112] loop2: detected capacity change from 0 to 64
[  271.058828][ T9119] loop1: detected capacity change from 0 to 2048
[  271.086199][ T9112] syz.2.1281: attempt to access beyond end of device
[  271.086199][ T9112] loop2: rw=1, sector=76, nr_sectors = 3 limit=64
[  271.114023][ T9119] /dev/loop1: Can't open blockdev
[  271.728420][ T9102] loop5: detected capacity change from 0 to 32768
[  271.842930][ T9102] XFS (loop5): Mounting V5 Filesystem
[  271.942025][ T9102] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  272.010280][ T9149] loop3: detected capacity change from 0 to 1024
[  272.024454][ T9151] loop2: detected capacity change from 0 to 8192
[  272.059721][ T9149] EXT4-fs: inline encryption not supported
[  272.069374][ T9102] XFS (loop5): Starting recovery (logdev: internal)
[  272.090633][ T9149] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  272.125011][ T9151] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  272.152123][ T9154] loop8: detected capacity change from 0 to 256
[  272.164015][ T9151] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  272.176152][ T9151] REISERFS (device loop2): using ordered data mode
[  272.182897][ T9151] reiserfs: using flush barriers
[  272.195749][ T9102] XFS (loop5): Ending recovery (logdev: internal)
[  272.205141][ T9149] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  272.229604][ T9154] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  272.256097][ T9151] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  272.278756][ T9154] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  272.324769][ T9151] REISERFS (device loop2): checking transaction log (loop2)
[  272.347801][ T9154] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  272.370872][ T9151] REISERFS (device loop2): Using r5 hash to sort names
[  272.396913][ T9151] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  272.427118][ T6403] EXT4-fs (loop3): unmounting filesystem.
[  272.624074][ T4895] XFS (loop5): Unmounting Filesystem
[  272.752772][ T9165] sctp: [Deprecated]: syz.3.1293 (pid 9165) Use of struct sctp_assoc_value in delayed_ack socket option.
[  272.752772][ T9165] Use struct sctp_sack_info instead
[  273.282004][   T26] audit: type=1326 audit(1769478919.805:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9658d9aeb9 code=0x7ffc0000
[  273.373024][   T26] audit: type=1326 audit(1769478919.805:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9658d9aeb9 code=0x7ffc0000
[  273.473995][   T26] audit: type=1326 audit(1769478919.855:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9658d9aeb9 code=0x7ffc0000
[  273.592941][   T26] audit: type=1326 audit(1769478919.855:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9658d9aeb9 code=0x7ffc0000
[  273.712446][   T26] audit: type=1326 audit(1769478919.855:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9658d9aeb9 code=0x7ffc0000
[  273.838564][   T26] audit: type=1326 audit(1769478919.865:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f9658d9aeb9 code=0x7ffc0000
[  273.930758][   T26] audit: type=1326 audit(1769478919.865:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9658d9aeb9 code=0x7ffc0000
[  274.037704][ T9191] loop5: detected capacity change from 0 to 4096
[  274.049866][   T26] audit: type=1326 audit(1769478919.865:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9658d9aeb9 code=0x7ffc0000
[  274.133590][ T9202] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  274.184158][   T26] audit: type=1326 audit(1769478919.865:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f9658d9aeb9 code=0x7ffc0000
[  274.276225][   T26] audit: type=1326 audit(1769478919.925:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.2.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9658d9aeb9 code=0x7ffc0000
[  274.376508][ T9167] loop8: detected capacity change from 0 to 40427
[  274.423511][ T9167] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  274.489295][ T9167] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  274.545595][ T9167] F2FS-fs (loop8): invalid crc value
[  274.600304][ T9167] F2FS-fs (loop8): Found nat_bits in checkpoint
[  274.803788][ T9167] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  274.827106][ T9167] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  275.282915][ T4953] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  275.325659][ T4953] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  275.438538][ T9236] loop1: detected capacity change from 0 to 128
[  275.508621][ T9209] loop3: detected capacity change from 0 to 32768
[  275.575645][ T9209] JBD2: Ignoring recovery information on journal
[  275.628499][ T4261] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  275.741712][ T9209] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  276.102080][ T6403] ocfs2: Unmounting device (7,3) on (node local)
[  276.574190][ T7622] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  276.594102][ T7625] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  276.786271][ T7622] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  276.805788][ T7625] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  276.833843][ T7622] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  276.844467][ T7625] usb 3-1: config 0 interface 0 has no altsetting 0
[  276.851134][ T7625] usb 3-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00
[  276.870316][ T7625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.883094][ T7622] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  276.899200][ T7625] usb 3-1: config 0 descriptor??
[  276.906807][ T7622] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.920284][ T7622] usb 9-1: Product: syz
[  276.928219][ T7622] usb 9-1: Manufacturer: syz
[  276.952715][ T7622] usb 9-1: SerialNumber: syz
[  277.115484][ T6321] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  277.180747][ T7622] usb 9-1: 0:2 : does not exist
[  277.198638][ T7622] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  277.255811][ T7622] usb 9-1: USB disconnect, device number 8
[  277.315596][ T6321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.346210][ T7625] wacom 0003:056A:003F.0013: hidraw0: USB HID v0.06 Device [HID 056a:003f] on usb-dummy_hcd.2-1/input0
[  277.367998][ T6321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.396033][ T6321] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  277.413997][ T6321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.441044][ T6321] usb 4-1: config 0 descriptor??
[  277.551083][ T7625] usb 3-1: USB disconnect, device number 13
[  277.580583][ T4599] udevd[4599]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  277.690327][ T9298] fido_id[9298]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  277.863906][ T6321] logitech 0003:046D:CA04.0014: unbalanced collection at end of report description
[  277.904558][ T6321] logitech 0003:046D:CA04.0014: parse failed
[  277.910659][ T6321] logitech: probe of 0003:046D:CA04.0014 failed with error -22
[  277.941093][ T9302] loop8: detected capacity change from 0 to 64
[  278.065803][ T6321] usb 4-1: USB disconnect, device number 9
[  278.146928][ T5869] hfs: request for non-existent node 131072 in B*Tree
[  278.269685][ T9307] Bluetooth: hci0: too big key_count value 4354
[  278.399027][ T9296] loop1: detected capacity change from 0 to 32768
[  278.483641][ T4261] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  278.638799][ T9316] loop3: detected capacity change from 0 to 128
[  278.650957][ T9316] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  278.678372][ T9316] hpfs: filesystem error: improperly stopped
[  278.713673][ T9316] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  278.731199][ T6321] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  278.748528][ T9316] hpfs: You really don't want any checks? You are crazy...
[  278.830096][ T9316] hpfs: hpfs_map_sector(): read error
[  278.853097][ T9316] hpfs: code page support is disabled
[  278.912621][ T9316] hpfs: hpfs_map_4sectors(): unaligned read
[  278.943863][ T6321] usb 9-1: Using ep0 maxpacket: 16
[  278.955846][ T6321] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  278.977237][ T9316] hpfs: hpfs_map_4sectors(): unaligned read
[  278.983431][ T9316] hpfs: filesystem error: unable to find root dir
[  279.023431][ T6321] usb 9-1: config 0 interface 0 has no altsetting 0
[  279.064555][ T6321] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  279.083846][ T6321] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.119802][ T6321] usb 9-1: config 0 descriptor??
[  279.315993][ T9296] loop1: detected capacity change from 0 to 4096
[  279.549334][ T6321] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0
[  279.675852][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  279.675866][   T26] audit: type=1326 audit(1769478926.205:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.3.1338" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f766d19aeb9 code=0x0
[  280.017932][ T6321] usb 9-1: USB disconnect, device number 9
[  280.101895][ T9335] fido_id[9335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  280.353084][ T9345] loop5: detected capacity change from 0 to 128
[  280.399757][ T9345] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  280.409924][ T9345] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.695901][ T9355] loop8: detected capacity change from 0 to 128
[  280.777639][ T9355] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  280.805150][ T9355] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.876883][ T4895] EXT4-fs (loop5): unmounting filesystem.
[  281.140816][ T5869] EXT4-fs (loop8): unmounting filesystem.
[  281.214093][   T22] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  281.242106][ T9375] input: syz1 as /devices/virtual/input/input35
[  281.403857][   T22] usb 6-1: Using ep0 maxpacket: 16
[  281.410869][   T22] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.483238][   T22] usb 6-1: config 0 interface 0 has no altsetting 0
[  281.507543][   T22] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  281.537220][   T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.568627][   T22] usb 6-1: config 0 descriptor??
[  281.815558][ T9390] loop8: detected capacity change from 0 to 128
[  281.844465][ T9390] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  281.940868][ T9390] FAT-fs (loop8): FAT read failed (blocknr 4128)
[  282.024187][   T22] nzxt-smart2 0003:1E71:2009.0016: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  282.066824][ T9373] loop2: detected capacity change from 0 to 32768
[  282.213800][ T9373] JBD2: Ignoring recovery information on journal
[  282.348219][ T9406] loop8: detected capacity change from 0 to 128
[  282.419505][ T9406] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  282.438487][ T9373] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  282.464466][ T9406] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.471133][ T6321] usb 6-1: USB disconnect, device number 20
[  282.542801][ T9402] fido_id[9402]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  282.806459][ T4282] ocfs2: Unmounting device (7,2) on (node local)
[  283.079485][ T5869] EXT4-fs (loop8): unmounting filesystem.
[  283.275622][ T9429] netlink: 'syz.8.1362': attribute type 29 has an invalid length.
[  283.323841][ T9429] netlink: 'syz.8.1362': attribute type 29 has an invalid length.
[  283.590933][ T9433] loop8: detected capacity change from 0 to 64
[  283.699128][ T9433] hfs: hfs: Invalid key length: 94
[  283.873300][ T4885] ------------[ cut here ]------------
[  283.874556][   T22] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  283.878857][ T4885] kernel BUG at fs/hfs/inode.c:449!
[  283.921286][ T4885] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  283.927412][ T4885] CPU: 0 PID: 4885 Comm: kworker/u4:7 Not tainted syzkaller #0
[  283.935008][ T4885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  283.945085][ T4885] Workqueue: writeback wb_workfn (flush-7:8)
[  283.951158][ T4885] RIP: 0010:hfs_write_inode+0xa1a/0xa20
[  283.956859][ T4885] Code: 87 ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 60 0e 87 ff e9 47 fe ff ff e8 76 23 36 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00
[  283.976495][ T4885] RSP: 0018:ffffc90002fa73a0 EFLAGS: 00010293
[  283.982583][ T4885] RAX: ffffffff824c4efa RBX: ffff888057644918 RCX: ffff88801bb03b80
[  283.990615][ T4885] RDX: 0000000000000000 RSI: ffffffff8cd25220 RDI: 0000000000000000
[  283.998659][ T4885] RBP: ffffc90002fa7530 R08: ffff88801bb03b80 R09: 0000000000000003
[  284.006654][ T4885] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  284.014685][ T4885] R13: 1ffff920005f4e78 R14: 0000000000000000 R15: ffff8880576448d8
[  284.022751][ T4885] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  284.031784][ T4885] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  284.038444][ T4885] CR2: 00007fff9944fff8 CR3: 0000000055df2000 CR4: 00000000003506f0
[  284.046519][ T4885] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  284.054601][ T4885] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  284.062652][ T4885] Call Trace:
[  284.065981][ T4885]  <TASK>
[  284.068970][ T4885]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  284.074012][   T22] usb 3-1: Using ep0 maxpacket: 32
[  284.074474][ T4885]  ? __writeback_single_inode+0x4ae/0x1160
[  284.082430][   T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.085407][ T4885]  ? __rwlock_init+0x140/0x140
[  284.085436][ T4885]  __writeback_single_inode+0x75b/0x1160
[  284.085466][ T4885]  writeback_sb_inodes+0xb30/0x1850
[  284.085502][ T4885]  ? queue_io+0x5a0/0x5a0
[  284.085531][ T4885]  ? rcu_is_watching+0x11/0xa0
[  284.085560][ T4885]  wb_writeback+0x482/0xd50
[  284.125781][ T4885]  ? percpu_ref_tryget+0x250/0x250
[  284.127194][   T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.130999][ T4885]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  284.146767][ T4885]  ? _raw_spin_unlock_irq+0x1f/0x40
[  284.152055][ T4885]  wb_workfn+0x423/0xee0
[  284.156331][ T4885]  ? inode_wait_for_writeback+0x220/0x220
[  284.162084][ T4885]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  284.168109][ T4885]  ? read_lock_is_recursive+0x10/0x10
[  284.173522][ T4885]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  284.179496][ T4885]  ? _raw_spin_unlock+0x40/0x40
[  284.184443][ T4885]  ? _raw_spin_unlock_irq+0x1f/0x40
[  284.189684][ T4885]  ? process_one_work+0x7b0/0x1160
[  284.192103][   T22] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  284.194807][ T4885]  process_one_work+0x8a2/0x1160
[  284.194836][ T4885]  ? worker_detach_from_pool+0x240/0x240
[  284.214593][ T4885]  ? _raw_spin_lock_irq+0xb7/0xf0
[  284.219794][ T4885]  ? _raw_spin_lock_irqsave+0x100/0x100
[  284.225470][ T4885]  ? kthread_data+0x4b/0xc0
[  284.230014][ T4885]  worker_thread+0xaa2/0x1270
[  284.233917][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.234707][ T4885]  ? __kthread_parkme+0x162/0x1c0
[  284.234739][ T4885]  kthread+0x29d/0x330
[  284.251815][ T4885]  ? worker_clr_flags+0x1a0/0x1a0
[  284.256921][ T4885]  ? kthread_blkcg+0xd0/0xd0
[  284.261666][ T4885]  ret_from_fork+0x1f/0x30
[  284.266200][ T4885]  </TASK>
[  284.269255][ T4885] Modules linked in:
[  284.279388][   T22] usb 3-1: config 0 descriptor??
[  284.288020][   T22] hub 3-1:0.0: USB hub found
[  284.416371][ T9423] loop1: detected capacity change from 0 to 40427
[  284.496217][   T22] hub 3-1:0.0: 1 port detected
[  284.818730][ T4885] ---[ end trace 0000000000000000 ]---
[  284.831161][ T4885] RIP: 0010:hfs_write_inode+0xa1a/0xa20
[  284.843277][ T4885] Code: 87 ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 60 0e 87 ff e9 47 fe ff ff e8 76 23 36 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00
[  284.886124][ T4885] RSP: 0018:ffffc90002fa73a0 EFLAGS: 00010293
[  284.899947][ T4885] RAX: ffffffff824c4efa RBX: ffff888057644918 RCX: ffff88801bb03b80
[  284.920818][ T4885] RDX: 0000000000000000 RSI: ffffffff8cd25220 RDI: 0000000000000000
[  284.943421][ T4885] RBP: ffffc90002fa7530 R08: ffff88801bb03b80 R09: 0000000000000003
[  284.966053][ T4885] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  284.982882][ T4885] R13: 1ffff920005f4e78 R14: 0000000000000000 R15: ffff8880576448d8
[  284.998898][ T4885] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  285.018169][ T4885] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  285.033837][ T4885] CR2: 00007fff3ece20d8 CR3: 0000000023aca000 CR4: 00000000003506e0
[  285.053175][ T4885] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  285.072232][ T4885] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  285.091174][ T4885] Kernel panic - not syncing: Fatal exception
[  285.097806][ T4885] Kernel Offset: disabled
[  285.102131][ T4885] Rebooting in 86400 seconds..