last executing test programs:

1m31.69630158s ago: executing program 3 (id=71):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0xf)

1m31.660030142s ago: executing program 3 (id=72):
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20)
syz_open_dev$tty20(0xc, 0x4, 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

1m31.536759077s ago: executing program 3 (id=75):
setns(0xc9, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m28.690037588s ago: executing program 3 (id=89):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
lseek(0xffffffffffffffff, 0x33, 0x0)

1m28.101144416s ago: executing program 3 (id=92):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$bpf(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x8003, &(0x7f0000000580)={[{@mode={'mode', 0x3d, 0xa80}}, {}, {@mode={'mode', 0x3d, 0x4}}, {}]})
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2054)

1m25.809729331s ago: executing program 3 (id=111):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m25.503431806s ago: executing program 32 (id=111):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m7.908170807s ago: executing program 4 (id=298):
r0 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
fcntl$notify(r0, 0x402, 0x8000003b)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
close(r1)

1m7.749476984s ago: executing program 4 (id=299):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x200)
rmdir(&(0x7f0000000180)='./cgroup/../file0\x00')

1m7.591950202s ago: executing program 4 (id=301):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@private2, r1}, 0x14)

1m7.366617032s ago: executing program 4 (id=306):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$eJzs27tvHMUfAPDvrl/xL/lhE8IjD8AQEBYPO054pKCACCSKICFBQWvZThRyiVFsJBJFkCAUKkRDjyj5F6igQYgKiRZ6FClCaZJQHdq7XfvecS5nn5P7fKT1zezOeuZ7u3M3u3MbwMCayv4kEbsi4s+ImKhm6wtMVV9uXr+4cOv6xYUkyuX3/0kq5W5cv7hQFC3225lnptOI9Msk9reod+X8hdPzpdLSuTw/u3rm49mV8xdeOnVm/uTSyaWzh48effnI3GuvHn6lJ3Fmbbqx77PlA3vfSYbfPf51ti4t4m+Io0emOm18tlzucXX99f+adDLcx4ZwR4YiIjtcI5X+PxFDsX7wJuLtL/raOGBTlcvl8s72my+VgftYEvV5XR4GRfFFn13/FkvjIOCNzRt+9N21N6sXQFncN/OlumU40hivpEYarm97aSoiPrz073fZEptzHwIAoM5P2fjnxVbjvzQeqSn3QD43NBkRD0bE7oh4KCL2RMTDEZWyj0bEY3n58Q3W3zhJ0jz+Sa92HdwGZOO/1/O5rfrxX1oUmRyq5MYqY8DJGElOnCotHcrfk+kYGcvycx3q+PmtP75pt612/JctWf3FWDBvx9Xhsfp9FudX5+8m5lrXLkfsG24Vf7I2E5BExN6I2NdlHaee/+FAu223j7+DHswzlb+PeK56/C9FQ/yFpPP85OyOKC0dmi3Oima//X7lvXb131X8PZAd//+1PP/X4p9MaudrV+68jit/fdX2mqbb8380+aCSHs3XfTq/unpuLmI0OV5tdO36w+v7FvmifBb/9MHW/X93rL8T+yMiO4kfj4gnIuLJvO1PRcTTEXGwQ/y/Hnvmo+7j31xZ/It3dPzXE6PRuKZ1Yuj0Lz/WVTrZFP+tDsd/LTWdvzZ//g01xbWRdnV3NgMAAMC9J7u63hVJOrOWTtOZmerv5fdEpKXlldUXTix/cnax+ozAZERa3OmaqLkfOpdf1lfzlyOi+tOCYvuR/L7xt0PjlfzMwnJpsd/Bw4Db2ab/Z/5uvq0G3G88rwWDS/+HwXW7/v/5FrUD2Hrdf/8f2+jvPIFtqkX/169hIIy1/P435ofB0ND/TfvBAGno/zv61Q5g63V//2+0p+0Atp75fxhIK+Nx+4fkOyaK/9Tl7vdtIka2RTM2LRHptmjGtk2M3OP9on+fSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL30XwAAAP//cBbcWg==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x130)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m6.722849422s ago: executing program 4 (id=313):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801)
recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x3)

1m6.186139117s ago: executing program 4 (id=317):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$inet6(r1, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f00000086c0)=[{&(0x7f0000006240)="c1346f2d260685eb57d897465edd4823", 0x10}, {&(0x7f00000062c0)="2977c9c80000000000", 0x9}, {&(0x7f0000006300)="5c711d9c51a0", 0x6}], 0x3}}], 0x1, 0x44051)

1m5.751798136s ago: executing program 33 (id=317):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$inet6(r1, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f00000086c0)=[{&(0x7f0000006240)="c1346f2d260685eb57d897465edd4823", 0x10}, {&(0x7f00000062c0)="2977c9c80000000000", 0x9}, {&(0x7f0000006300)="5c711d9c51a0", 0x6}], 0x3}}], 0x1, 0x44051)

32.74267057s ago: executing program 6 (id=618):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"})
write$tun(r0, &(0x7f0000000180)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36)

32.446293933s ago: executing program 6 (id=622):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)={0x1c, r1, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c085}, 0x4040004)

32.318840119s ago: executing program 6 (id=624):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x18)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

31.940613346s ago: executing program 6 (id=630):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x1, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000000)='./file0/file0\x00', 0x4)

31.798926583s ago: executing program 6 (id=633):
syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000006640)=ANY=[@ANYBLOB='quota,discard=0x000000000020aff9,iocharset=none,iocharset=cp949,errors=remount-ro,grpquota,nointegrity,errors=remount-ro,nodiscard,errors=remount-ro,\x00'], 0x24, 0x62a7, &(0x7f0000006700)="$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")
creat(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0xa63)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0xd)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

31.306310656s ago: executing program 6 (id=638):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x40, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="355cb00ebd0bab3ae7acb614049a6e06"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, '\x00\x00\x00\x00l\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040004)

31.063157047s ago: executing program 34 (id=638):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x40, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="355cb00ebd0bab3ae7acb614049a6e06"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, '\x00\x00\x00\x00l\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040004)

15.912713306s ago: executing program 2 (id=777):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = io_uring_setup(0x5ae4, &(0x7f0000005840))
r1 = epoll_create1(0x0)
r2 = dup3(r1, r0, 0x0)
epoll_pwait2(r2, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0xfffffffffffffc8a)

15.740239184s ago: executing program 2 (id=778):
socket$packet(0x11, 0xa, 0x300)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x2834, 0x7}}}}}}, 0x0)

15.61923366s ago: executing program 2 (id=779):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000002100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150025ff0900a11e0901a1006d08950109309102c0c0"], 0x0}, 0x0)

13.185062392s ago: executing program 2 (id=802):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000)
ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000140))

6.380195585s ago: executing program 1 (id=851):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r0, &(0x7f0000000400)=""/186, 0x110)

4.214165136s ago: executing program 0 (id=867):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r0, 0x90004)
accept4(r0, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0, 0x800)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900", @ANYRES8], 0x16)

3.332546226s ago: executing program 5 (id=873):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x1, 0x0)
write$cgroup_int(r0, &(0x7f0000000300), 0x12)
write$P9_RRENAME(r0, &(0x7f0000000280)={0x7, 0x15, 0x2}, 0x7)

3.076462268s ago: executing program 0 (id=875):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000100)={[{@force}, {@force}, {}]}, 0x81, 0x5c8, &(0x7f00000006c0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==")
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0})

2.802345641s ago: executing program 5 (id=877):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138)
fallocate(r1, 0x10, 0x11000, 0x8000)

2.802050371s ago: executing program 1 (id=878):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc)

2.777188772s ago: executing program 0 (id=880):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100)
close(r0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

2.633835139s ago: executing program 1 (id=881):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)

2.633463139s ago: executing program 0 (id=882):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='./file1\x00', 0xa00004, &(0x7f0000000300)={[{@rootdir={'rootdir', 0x3d, 0x2}}, {@gid_ignore}, {@dmode}, {}, {@nostrict}, {@utf8}, {@uid_ignore}, {}, {@longad}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@undelete}, {@nostrict}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@uid_ignore}]}, 0x5, 0xc87, &(0x7f0000000780)="$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")
write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964dee674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a7986cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25afd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x24b837, 0x0, 0x3, 0x0, &(0x7f0000000240))

2.59998958s ago: executing program 7 (id=883):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvfrom$packet(r0, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14)

2.263471815s ago: executing program 2 (id=884):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xc04, &(0x7f0000000580), 0x3, 0x448, &(0x7f0000000e40)="$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")
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@clear_cache}, {@metadata_ratio}, {@space_cache}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x500, 0x0)
ioctl$FITRIM(r0, 0xc4009420, &(0x7f00000010c0)={0xa, 0xfffffffffffffffd, 0xd8b})

2.263215335s ago: executing program 5 (id=885):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, &(0x7f0000002040))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000340)=0x1)
ioctl$TCGETA(r1, 0x8926, &(0x7f00000029c0))

2.262630155s ago: executing program 1 (id=894):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000070"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

2.258061256s ago: executing program 7 (id=895):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000c80)={0xfc, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x800}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_FLAGS={0x2c}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x78, 0xbe, "4e85d7c754b6063ba59eb739e8a549facdd688752b8466e76e8fd6f5cbf1ff350eb01ec483988bf1d8d50268eac525684af6ef47060f0b7a9e0140ec39603bb9f62bbf422bf3f6707ec6773b6d5bc7a0d85822906bee32ed332a2ac38023ba770ddf0279af7f32b99c4a6af11ed18653eb7e1db2"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_FLAGS2={0x1, 0x43, {0xfffffeff, 0x4}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x885}, 0x0)

1.931703321s ago: executing program 5 (id=886):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @random="f4cc31e5135e", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x1c, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x7, 0xc2, 0x1, 0x0, 0xffd, {[@window={0x3, 0x3, 0x7}, @fastopen={0x22, 0x2}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0)

1.931391011s ago: executing program 7 (id=887):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c000280050001000000000006000340000100000800074000000001"], 0x6c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)

1.930615391s ago: executing program 0 (id=888):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x18000, &(0x7f0000005180), 0x81, 0x50d4, &(0x7f00000051c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148)
fallocate(r0, 0x20, 0x4000, 0x8000)

1.930461831s ago: executing program 1 (id=889):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="394318cd460841f160a6209c50cb4ab9", 0x10)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000047c0)="c1b0a1849b36d2c59b3a120dab082699", 0x10)

1.838523365s ago: executing program 1 (id=890):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)

1.775928908s ago: executing program 7 (id=891):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r1, 0x400454cc, 0x320)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})

1.774935228s ago: executing program 5 (id=892):
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000c41, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0x1, 0x62d0, &(0x7f0000002ec0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000001d00)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="edc6b53b75971c8fc20289c17197fd861c803de9d86b08a3b20e54d7fae25399a9940c8c0e9f246d221821dd47b30934234b04ede1c214c7a9f0c6cb914ea4eaea2e7ac3ff4159781d71dd47dcd1379803db170821310c5fde227eeea37c3abb3573eb9b979210cd8e", @ANYRES16, @ANYRES32, @ANYBLOB="ac2d5b5b8945d57e7869648ebe10b8d2719763b4bf3f6667bf8f722606d2b3593f26218e9a5fba2e7d4166787da71737b380045fb0a682e2915271f214c0112961b73c4638e7ba68deb34826d7682ace7549c83bf52bd9142b6c5adebf82155270d33204c09c07ed4ca2fc932af48646c9624e3e3544d68f61a2b073fb85332599b299a4f441a8e2f74c57aa38b5b596238280c1693bba97ff258679ab84485970b60f81093dda6501baba18a7790ca3e6fcfa12898b9fff3faf613d71f9d64dbd5c2edad8e774fb0da39e532d92164e2d34aff7cae32f3cd7aa9aace000f136323e4808d0c66c0828942def38deb2e1d847555fe0d5ba8084babb3169f9f06246ecd5327758448c9c7e4591da12ff1b084e757d05af4f0f0444ecfcc0c4d2067a98d49fe52412218380bb75e21cd2372404ea0b116b9a1c1e3350b3e6f17c5bd1f1adb4ce1d03d5b30eb0690340708f06dfca5c9d74a7c140cabddd0f37d8bcf15e578dde85d7c28ccb1c9633ceeb54bb278d5a097220ca53a2ea4781aca2b70189199938afba9a700a610225311fe8316794ca0ae139a50dbd34d572d6165eaaa94844620045e615d51f5e19c29aadad3539490961135851f15bbfd0604f3926877583d85c45a04c6f155ad6e1966d2004ab6ab51f9beb82dbcdcaaab886564cbf81b581da397eba4fc8fe430ef93ed613cd588e399669b9f4b63481163e6c2b74112538192be9551ca400bc2b947a535fccbc567a68a3ab94554385bb1f2a0e2146310113102a9ffbcbbf44d30e076d363d6201faecf8bbbbc9d7fcd38195860bbc85ee3f5f9b2c990164abc3a7674ab2a631147d708585f52694a46b681cbc623b53a272f21f2aa5597beec8094954541316cc45ec9751fef12369e7272b7bdcb527bac4a19e0bba1b68ef98e3563705e9ca40bb914cece2fd75c2375b81a06dadcdb1c54a175855e30c3d9ca58ca873e43d703b1471526fb3dfe12e140b81df3afae6104e5ffa4e8585b456a7199c75c5abc7afeca743fce310df09062f20b9a99fac5d019338d98606805f4faad9cc81ebf03b7239a340c973828b676af4e594d796689f9823730c5ead8dba256925869ab0d7196a99b75a15f9927852d7813aa5a4cb76764749e882d59c094c5ebd1911153150e8d53aa8abbf360a4045b63e0e296d03158de8aa02b5aeb459dcdc6b9d5aa8c0e455e7cb6a5d9b26ee5420e41d89590a0c04ca8701a6a386716a32e04102f281f66317a21940c0cf83e128f4f83bdf6770170d74d43f3b1f4c0bb5e8c69254e0bfd15c6d02596bf3b547e5b9b8e84390455a9c4b00b633c661616aca4a4158868be21633f343155996eaff00c2c347fea03c6f06e7adcd83cf320e3a446d07dba202e5960632560da8a3b60efe5a814a5cb2a4ff0842fff23897b583b381e5030e506caef8dc97bef9532111e3eb3621870ec39fe2351d3814a02d2f9e38aac1f0897f32ddbffdc6e0acdea95ff7f67865daae1130f68f00985682ecefc43fb6f8521514923b5cf3560be0739aeb4eb00b389d39ebb9b974e054120fcd48c0d6bc09441c2c19f41bdfceed01a3b686921500fae88795f216794d21dd3a98f2fdb5a1590e0cbdc5cd9593b164e255131c21f22ed7e7ed4ec83db91f8bf5f327d7222be1e470a7c0d0a657c73ad606f2ef0c59d3c118c601d23d67ee16ce3658c9153b8131f06c1e4f83c49dbe6dbc3478b1313b9221bc4c5eadebfd16cd07afde509f2e926fcfd5f8feabe836f4080ea5e65c1e4d859f16ac45ad8c804eb9ecce363faf19c1409d8192a644823578ccfd5b643478eb948223676d375f811fffa874f7c2a281104a28baf4da2716ae870abb3e0f05e63466176356728a700fe39ebb62bdbff139fdbf21520022984dc6d3eed1d81b94f28a07cc238ccb64d65e87534c0111bb76212368c6e8e9a536e758fa2f16a2cab9d31984055488b27bcff12bcc5a0fe21a0e44edfb87c681060e6944ff89dce4a9c7122c53acc27913a5fbf15c9ada971df88f0df3f82eb563f63c640ad6e39a1f5c1aad83c364957ec6d645f4243d1fb4ecef275d4c0ca0284064cde0c282d793f290bab5a4dec15f3e2adcc9d455d2e28bd040d6e0f651ac6f20f55d1303d2aaef2104b393afc849e9cd7743ca20a6f092cbf42a67446892493128d38bb0d0f507ffe3fd718ec48eff58df729728bc01ee180d676dfa22c81da0e4e3fda94f4f94195bc82e1f941d8a290ca0d416373d420eba196470e4f25940506061c601f12b3656d6d6b3a47e50d5235b7fd0f82bb0835aee3470b69bf7e59616ece447d9af36c396f687214ff7d7e27961f461c780b4c563aeb47fa9f335cbdade8a06711ba79b6fe8778ac1bc06bb59131c17409c1d1d0cc746aec8c3b1348f9585945192d8e32002c676753ab246a92702fc8e3a3ce89b84661b1b10dcd73fddacd311ca663d483b87a59225f60627eecf409d6188236b198633d47c5f1c0ba0bb4321aac88a6061d5e97883914cd74284ab937b9579ccee6ab5bb39f6274a04e3e7a8c3d033e340357bc15c5f6daa047b1cee448ac380bbde4bf806b0891a04b9e408609b040b7d3a02d2a76d4013756d79244792c543fe2327a3c371852bed5ab54de987bc4699b32ad1c08f7fff7a23069e722f5d78742d622d4ccbc1a7bddc9a590b2c707bac3957d46b657a4e17f1914db58fb6436bdd58b86df491016a2b9ebe0c35a859b216f17f4828c8dee30a38ed1fc36347af978999d0c404313cf99c9281c45194abd79475a80ea1486840aad72b1c0c4f17fe35a150fcb574fa9fcc09a7fc5dcd34e15d4bf1bccfa8bf423d2437e2eb0d3ca9324fbfc7e256b862c50ebc8db3fb69f69003d37807af8ddccf2d929ad9d06ebbb7e538d93bb0b7bc828e1639e0b5e89c22badca307ad28183c3083e87c917feb4c882397d397ea2e7ff0e05ebb252940302cdc0f0f7efe40685f7c3e8923e3795d70d69c70d9a071e401cee771f29dcb5316471768464c4659f2c76d11713ab44f4c944a4819deb1248b02457403e9630aaf4a180e9e55bb4d291e9a2bc85a1ed17f906d54935c7e5e8b707ead56284fda0208bd88ab5c3259bd5329c0d26653eb07b6856ad799fd6fa8d2111da3970ff8509bc2ef3a8813d04f36001526b70757646ed4bf25a256751b8ec714f2e62dea19e82aacec389195532bf7f335afae4351adb93c846e22f1f2a3e0d620d81688bd5530e389f2284b3c997d4abab7c30aac1b141425cd9aa315dc5a5e8b04fd503d79896b1494d8be48048c7392fc92c325b76bde4496c49da34c9ff95969bec8f95c356239d5336907957383b12c512fff6d797097a26a5aee9251bae940ef1a19b3f746396300d3baeb476b023f740ed7c1da92fdbf1834c3a882a6079885b933333d0e194cc1f25a06c3a2d370936886cb385d9861d6762c7416a1db5275228b6499cdef9767fb998d43251b963bc4477b2c051b70a0317de5f6ec3158914145bd036ff194df9722d2a3d2ac2397891b573a34ad16236cdc7ca77bc15f0fdbc3cae923d61633a42bab450a80cf3ee6580e792b1617d74fa189d450a64ca12d8c797698208ea61010b6072885b762af598159621f838ebacc00ea11f5924b39b2bbbc5c7d667871ce32e9aa75893a9fa13a2ffe66b360e266446259a8745addb4e186139d86d4e8d48537ac35029b0d87c03e8c1a9b9a422594496feda8bc5502777428fe737198ed896c2128a4f7d552f2eea8fef6e68feaf3cbfd549e622eea7bc988bb16fc49b7ab241426f2e40edcca07d4f947ccb1d3b8c2e9cb14a0c04495dbb75bd9c935f36bfe398455b0e5f927d5726e617c69ca81fe36c3e6ea510c5fe4735161c992f9ebf66727e5a7ded590061d4da3b86b996846a6bb102e47d33465d88a68644c8a76a770d5e0318e6c301e7c7f5575bf15a9589b32cfaa41ee15972488497195a2cb49a6b6f937a8e311e34d311dfd4fe222d3abc095b0b24a1b7193eb3353def0cc1511c8fce9b0a7867ae2fed4db93009646dc91a3745387cbe61b37f749b40d5d38970856b7ab8b6e1e0b81c078c68cb55c57854b8b5863b7a4c87f42e6d6dca2de0326b1b26970168c99f59816877448e7f72626f5354fdb5e033cd6b42e9476665efae66287e656590d1f80b3a09557a57d7de4bade6a122d40a92db1d347463b74151d44a02dbe067259c633b8c84425e77a736fca99f06d0fd66e35365511ec017537f4c212e7f2e23369958c3a7b92feffad9edb12139f1f690f9512725c0a1a164e78b4130c91fd3961df91c1a11783c24b03bcf305fd0e14e6510f4d58cf73326e94f2bc1b1ab295297bee7a98b77afe483a7d66e780d5e111b4202285f580ce571ecc0985501faa0e9f2f5b9848d770d8d8ad7b90a951f83279073e45a0c7abcf89cd6200f7fc320e46ea3de2addee3a984432501063f9928d0897d93dde20fe8ebe4dabc1ac34b0efdb3d7c7b4d49571ea64252d7209ff6d0ae5b95ef35d8160c5976f7ed9c4b69db81a73f6d00fd254c417696d6af694f3688826cc04db8019f2419fa99e47dc436fd76890b5291cd2724717a1e604e6cb5e214235664e8c7148c2bd87996c05bcfe1f29200f40a0d766df3ddc6faef82fb34d385f90b8f0e4bb7ba519e7986735c169cb3546d62fb70fbd49eec4edd70397d2fcbfdb9cd87331fce3c9786b7090501b904c8f925a1dbfa151a18e6c145ebb74da7100de60a627100d6c04ce789a7d4e88692cb090fd9ff2006e5ddb870f5b2aa502081eb7a26744de9a0d29a66ef18eb097e1d396561078e3f9258046a3a3e9b5878964d71b526755084f385d9777b2ab503f9d77c09a46004b5005f69eedee80edd87dd17f2292eba00f71dedb010b7b003a8400f6b44d63559a10bc0052c678ac8ed9658aff4f858778ebb60cbaf53d82248a260c7255f943711e8ac31a4b7a4694dcdace3be25ea43bdc9dfd52d369292d8d7581a6979d1b8ad543baeb9296907e0926025f4c3597e98e2eacd048a5dedd0e9dabc3268ed35a91c6180908af07a95bf374573c7b4f611eb30bbb5f1721a6550f483dcaed51d84fdaa5c6a52d7c4d04ca4edfd2884483c2d5aaebf6f06c6fff8bff813923ac8c6edd0eadefab938442ff09b1b3ff926c963d67a01cccbd86cb69bb5e5a4adca82110f87d3ee7800b14412b48cd94feacbaa9c1921e816d0287ad1198b94fd6de314912b79938a0d00ef5968ca4cb506afa1496ce4886c8c44955a92c9d2395f108a357e240511cc7e6548ac4174e5b52cc1f03ea8fa8268a7283e9cd25518cc71114869537891b64337222f04c111407bc2c8777f1132e1b294ec533610fd1ae3b4aa7e20c315d87aeed3a19151677e04173fbd55e88669f515dea19c8b99f8d7e829734f615a9b95e278fec62cf2d1a37d535ef71996530c62e65bb6fde625447e9122cfd947d7032c7580bfa5286bdde0bd9c4f0c63cbceddc302e1daef7f27bf289f72456802560e4477b27520b45f3a39e787824f169b3fa0ec7fba1c37f4499d43a9cdca7595f3e9ab74223c34819b260130d8a7613653101cc9a6e236ac01965356c90814c632ed421a62654a457ccc66040026451610b94898d13292cf2096fc1744b8fe67cebbcee0a3830be987694e593d732f05e3c6503a71173dc9870c3eca017318b628dd651232ea1c424a98b394188c8b8dbf30d69f1976219fd5b1975f8deebabeca970581f011f428c164bb35e0d6be187a5a2887d6bb0889c41c5c24d0b173f05db5d3a9e50318b448b3c8c53e8afceede4caf8850d585d4134559a6abbee463da46f316c3faeffa30fec0b35fff3f320b99e805fa2d3d179fe0d9a40e8b5a3df3d5fea5e743163c8a21eb10b84046c95b735e5c727336666c9922041490702d1e17c8b", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESDEC, @ANYRES8], 0xd, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)

1.597733596s ago: executing program 7 (id=893):
r0 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0))
syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)
io_uring_enter(r0, 0x4119, 0x869e, 0xc, 0x0, 0x0)
io_uring_enter(r0, 0x7f9d, 0xf427, 0x8, 0x0, 0x0)

1.30472688s ago: executing program 7 (id=896):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='ccgx-ucsi 0x08\n\x00', 0xf)

426.436181ms ago: executing program 5 (id=897):
chroot(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='atkbd', 0x5)

8.9864ms ago: executing program 2 (id=898):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x1234, 0x0, @mcast1}, 0x1c)

0s ago: executing program 0 (id=908):
r0 = socket$kcm(0x2b, 0x1, 0x0)
close(r0)
socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45)
close(r0)

kernel console output (not intermixed with test programs):

rypted files will use data=ordered instead of data journaling mode
[   81.221644][ T4491] EXT4-fs (loop2): 1 truncate cleaned up
[   81.228657][ T4491] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none.
[   81.276193][ T4476] F2FS-fs (loop0): Found nat_bits in checkpoint
[   81.283299][ T4492] EXT4-fs (loop4): 1 truncate cleaned up
[   81.288991][ T4492] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: none.
[   81.437235][   T26] audit: type=1800 audit(1790060133.904:5): pid=4492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.85" name="file1" dev="loop4" ino=15 res=0 errno=0
[   81.480587][ T4500] loop3: detected capacity change from 0 to 128
[   81.593114][ T4476] F2FS-fs (loop0): Start checkpoint disabled!
[   81.609669][ T4500] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[   81.622020][ T4500] System zones: 1-3, 19-19, 35-36
[   81.628321][ T4500] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback.
[   81.665433][ T4500] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   81.745280][ T4476] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   81.825509][ T4476] attempt to access beyond end of device
[   81.825509][ T4476] loop0: rw=2049, want=45104, limit=40427
[   81.926744][ T4514] attempt to access beyond end of device
[   81.926744][ T4514] loop0: rw=2049, want=45104, limit=40427
[   82.028382][ T4512] Zero length message leads to an empty skb
[   82.177421][ T4192] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[   82.320085][ T4192] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[   82.398841][ T4192] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 1: comm syz-executor: Directory block failed checksum
[   82.456273][  T144] attempt to access beyond end of device
[   82.456273][  T144] loop0: rw=2049, want=40984, limit=40427
[   82.474654][ T4528] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   82.502306][ T4192] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[   82.564446][ T4192] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[   82.595473][ T4526] loop4: detected capacity change from 0 to 8192
[   82.613058][ T4192] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 1: comm syz-executor: Directory block failed checksum
[   82.645449][ T4192] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[   82.687065][ T4192] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[   82.782889][ T4192] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 1: comm syz-executor: Directory block failed checksum
[   82.783875][ T4526] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   82.847488][ T4192] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[   83.231009][   T23] hid-generic 0005:15C2:0009.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa
[   83.319751][ T4553] loop0: detected capacity change from 0 to 512
[   83.469494][ T4553] EXT4-fs (loop0): Ignoring removed nobh option
[   83.508372][ T4553] EXT4-fs (loop0): orphan cleanup on readonly fs
[   83.543239][ T4553] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:984: inode #11: comm syz.0.94: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[   83.606332][ T4553] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.0.94: ea_inode dec ref err=-117
[   83.716899][ T4553] EXT4-fs (loop0): 1 orphan inode deleted
[   83.735784][ T4566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.106'.
[   83.759034][ T4553] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,min_batch_time=0x000000000000000f,init_itable,nobh,lazytime,acl,init_itable=0x0000000000000002,,errors=continue. Quota mode: none.
[   83.959203][ T4574] netlink: 'syz.2.107': attribute type 3 has an invalid length.
[   84.001981][ T4574] netlink: 'syz.2.107': attribute type 7 has an invalid length.
[   84.037982][ T4574] netlink: 'syz.2.107': attribute type 8 has an invalid length.
[   84.070055][ T4574] netlink: 'syz.2.107': attribute type 7 has an invalid length.
[   84.107786][ T4574] netlink: 198948 bytes leftover after parsing attributes in process `syz.2.107'.
[   84.491579][ T4591] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   84.566010][ T4546] loop4: detected capacity change from 0 to 32768
[   84.799937][   T26] audit: type=1400 audit(1790060137.264:6): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="foo" pid=4605 comm="syz.1.115" name="foo" offset=81
[   84.868373][ T4546] XFS (loop4): Mounting V5 Filesystem
[   85.056720][ T4546] XFS (loop4): Ending clean mount
[   85.429932][ T4185] XFS (loop4): Unmounting Filesystem
[   85.599594][ T4645] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   85.745587][ T4647] loop2: detected capacity change from 0 to 2048
[   85.898370][ T4647] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.133718][ T4639] chnl_net:caif_netlink_parms(): no params data found
[   86.348548][ T4639] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.356100][ T4639] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.365048][ T4639] device bridge_slave_0 entered promiscuous mode
[   86.374778][ T4639] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.384282][ T4639] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.392684][ T4639] device bridge_slave_1 entered promiscuous mode
[   86.419485][ T4639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.432350][ T4639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.512980][ T4639] team0: Port device team_slave_0 added
[   86.521242][ T4639] team0: Port device team_slave_1 added
[   86.550147][ T1108] cfg80211: failed to load regulatory.db
[   86.566560][ T4639] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.581602][ T4639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.634266][ T4639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.666531][ T4639] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.691004][ T4639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.748007][    C1] IPv4: Oversized IP packet from 172.20.20.24
[   86.777593][ T4639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.863253][ T4679] loop6: detected capacity change from 0 to 6
[   86.892540][ T4679] Dev loop6: unable to read RDB block 6
[   86.922664][ T4679]  loop6: unable to read partition table
[   86.928561][ T4679] loop6: partition table beyond EOD, truncated
[   86.988573][ T4679] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[   87.037795][ T4687] process 'syz.2.137' launched './file0' with NULL argv: empty string added
[   87.047008][  T309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.207377][ T4693] loop4: detected capacity change from 0 to 512
[   87.302837][ T4693] EXT4-fs (loop4): orphan cleanup on readonly fs
[   87.309249][ T4693] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[   87.323334][ T4697] loop2: detected capacity change from 0 to 64
[   87.430988][ T4693] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   87.506569][ T4258] Bluetooth: hci2: command 0x0409 tx timeout
[   87.522668][ T4693] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.140: attempt to clear invalid blocks 2 len 1
[   87.600660][ T4693] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.140: invalid indirect mapped block 1819239214 (level 0)
[   87.628915][  T309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.735215][ T4708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.153'.
[   87.760628][ T4693] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.140: invalid indirect mapped block 1819239214 (level 1)
[   87.764477][ T4708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'.
[   87.811127][ T4693] EXT4-fs (loop4): 1 truncate cleaned up
[   87.821985][ T4693] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback.
[   87.882162][ T4708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'.
[   87.928074][ T4639] device hsr_slave_0 entered promiscuous mode
[   87.959600][ T4639] device hsr_slave_1 entered promiscuous mode
[   87.979385][ T4693] EXT4-fs error (device loop4): ext4_remount:6062: comm syz.4.140: Abort forced by user
[   88.042128][ T4693] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback.
[   88.061098][ T4639] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.088680][ T4639] Cannot create hsr debugfs directory
[   88.144651][  T309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.199471][ T4722] loop0: detected capacity change from 0 to 512
[   88.352213][ T4722] EXT4-fs (loop0): Ignoring removed bh option
[   88.417239][ T4691] loop1: detected capacity change from 0 to 32768
[   88.456494][  T309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.500169][ T4722] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback.
[   88.513461][ T4722] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.568935][ T4691] XFS (loop1): Mounting V5 Filesystem
[   88.717791][ T4744] loop4: detected capacity change from 0 to 256
[   88.793942][ T4747] loop2: detected capacity change from 0 to 512
[   88.805173][ T4744] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   88.821111][ T4691] XFS (loop1): Ending clean mount
[   88.881499][ T4639] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   88.935266][ T4747] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.152: invalid block
[   88.959296][ T4747] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.152: invalid indirect mapped block 4294967295 (level 1)
[   88.986135][ T4639] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   89.000700][ T4639] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   89.021192][ T4189] XFS (loop1): Unmounting Filesystem
[   89.097530][ T4747] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.152: invalid indirect mapped block 4294967295 (level 1)
[   89.122972][ T4747] EXT4-fs (loop2): 2 truncates cleaned up
[   89.139777][ T4747] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   89.143481][ T4639] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   89.548717][ T4639] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.572202][ T4258] Bluetooth: hci2: command 0x041b tx timeout

syzkaller
syzkaller login: [   89.685611][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   89.712589][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   89.794580][ T4639] 8021q: adding VLAN 0 to HW filter on device team0
[   89.845411][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   89.873105][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   89.917101][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.924273][ T4275] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.010105][ T4778] loop2: detected capacity change from 0 to 128
[   90.081189][ T4778] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   90.109881][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   90.120359][ T4778] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   90.132985][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   90.165146][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   90.199276][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.206424][ T4275] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.252553][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   90.351444][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   90.362207][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   90.381591][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   90.442441][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   90.476937][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   90.549833][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   90.568805][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   90.589322][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   90.608515][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   90.627960][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   90.651387][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   91.020759][ T4763] loop0: detected capacity change from 0 to 40427
[   91.115872][ T4763] F2FS-fs (loop0): invalid crc value
[   91.159616][ T4777] loop1: detected capacity change from 0 to 32768
[   91.174231][ T4763] F2FS-fs (loop0): Found nat_bits in checkpoint
[   91.201670][  T309] device hsr_slave_0 left promiscuous mode
[   91.245336][  T309] device hsr_slave_1 left promiscuous mode
[   91.295176][  T309] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.313188][  T309] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.354035][  T309] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.361496][  T309] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.379487][ T4763] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   91.424178][  T309] device bridge_slave_1 left promiscuous mode
[   91.478239][  T309] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.556749][  T309] device bridge_slave_0 left promiscuous mode
[   91.582053][ T4186] attempt to access beyond end of device
[   91.582053][ T4186] loop0: rw=2049, want=45104, limit=40427
[   91.600930][  T309] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.652047][ T4227] Bluetooth: hci2: command 0x040f tx timeout
[   91.663636][  T309] device veth1_macvtap left promiscuous mode
[   91.670115][  T309] device veth0_macvtap left promiscuous mode
[   91.693283][  T309] device veth1_vlan left promiscuous mode
[   91.699423][  T309] device veth0_vlan left promiscuous mode
[   92.137317][ T4814] loop4: detected capacity change from 0 to 32768
[   92.636702][  T309] team0 (unregistering): Port device team_slave_1 removed
[   92.677816][  T309] team0 (unregistering): Port device team_slave_0 removed
[   92.722863][  T309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.786866][  T309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.899468][  T309] bond0 (unregistering): Released all slaves
[   92.990980][ T4822] bond0: option arp_interval: invalid value ( )
[   92.998534][ T4822] bond0: option arp_interval: allowed values 0 - 2147483647
[   93.078360][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   93.096032][ T4835] loop1: detected capacity change from 0 to 512
[   93.132145][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   93.194518][ T4639] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.305391][ T4843] loop2: detected capacity change from 0 to 256
[   93.341771][ T4835] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,nogrpid,usrquota,,errors=continue. Quota mode: writeback.
[   93.362672][ T4835] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.503899][   T26] audit: type=1800 audit(1790060145.974:7): pid=4843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.184" name="file1" dev="loop2" ino=5 res=0 errno=0
[   93.595804][ T4835] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 91 vs 96 free clusters
[   93.652420][ T4835] Quota error (device loop1): write_blk: dquota write failed
[   93.660368][ T4835] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[   93.719113][ T4862] loop0: detected capacity change from 0 to 128
[   93.754670][ T4227] Bluetooth: hci2: command 0x0419 tx timeout
[   93.823168][ T4835] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.190: Failed to acquire dquot type 0
[   93.889231][ T4862] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   93.956786][ T4862] hpfs: filesystem error: improperly stopped
[   94.011256][ T4862] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   94.056570][ T4862] hpfs: You really don't want any checks? You are crazy...
[   94.091455][ T4862] hpfs: Code page index out of array
[   94.111371][ T4862] hpfs: code page support is disabled
[   94.113425][ T4878] loop2: detected capacity change from 0 to 512
[   94.159228][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   94.163131][ T4878] EXT4-fs (loop2): Ignoring removed bh option
[   94.174086][ T4862] hpfs: hpfs_map_4sectors(): unaligned read
[   94.181178][ T4862] hpfs: hpfs_map_4sectors(): unaligned read
[   94.199628][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   94.244094][ T4862] hpfs: filesystem error: unable to find root dir
[   94.268155][ T4878] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   94.284943][ T4639] device veth0_vlan entered promiscuous mode
[   94.299856][ T4639] device veth1_vlan entered promiscuous mode
[   94.307180][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   94.321307][ T4878] EXT4-fs (loop2): 1 truncate cleaned up
[   94.342053][ T4878] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none.
[   94.382418][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   94.441300][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   94.460837][ T4883] loop4: detected capacity change from 0 to 4096
[   94.488206][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   94.514928][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   94.620266][ T4639] device veth0_macvtap entered promiscuous mode
[   94.629150][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   94.700264][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   94.758116][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   94.769981][ T4891] netlink: 'syz.0.195': attribute type 3 has an invalid length.
[   94.793893][ T4892] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.831585][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   94.940878][ T4639] device veth1_macvtap entered promiscuous mode
[   95.045705][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.117002][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.175624][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.200337][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.216303][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.232288][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.249065][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.261368][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.279232][ T4639] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.289186][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   95.322703][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   95.361439][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   95.394141][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.456059][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.531897][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.551895][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.561761][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.641269][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.691900][ T4639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.731899][ T4639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.743930][ T4639] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.752577][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   95.771555][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   95.845283][ T4639] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.874006][ T4639] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.901004][ T4639] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.928330][ T4639] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.139333][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.159356][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.169764][ T4929] loop1: detected capacity change from 0 to 1024
[   96.231311][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   96.304567][ T3060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.315501][ T3060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.340402][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   96.437731][ T4929] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: none.
[   96.452321][ T4929] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.531664][ T4929] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 3: comm syz.1.210: lblock 3 mapped to illegal pblock 3 (length 3)
[   96.615592][ T4929] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   96.644221][ T4908] loop2: detected capacity change from 0 to 32768
[   96.657666][ T4940] syz.4.211 (4940) used greatest stack depth: 21056 bytes left
[   96.672398][ T4929] EXT4-fs (loop1): This should not happen!! Data will be lost
[   96.672398][ T4929] 
[   96.713591][ T4908] 
[   96.713591][ T4908]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   96.713591][ T4908] 
[   96.823485][ T4908] ERROR: (device loop2): diWrite: ixpxd invalid
[   96.823485][ T4908] 
[   96.883037][ T4908] ERROR: (device loop2): txCommit: 
[   96.883037][ T4908] 
[   96.883927][ T4700] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:8: lblock 8 mapped to illegal pblock 8 (length 5)
[   96.931679][ T4911] loop0: detected capacity change from 0 to 32768
[   96.953896][ T4908] 
[   96.953896][ T4908]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   96.953896][ T4908] 
[   96.967954][ T4700] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117
[   97.019353][ T4908] 
[   97.019353][ T4908]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   97.019353][ T4908] 
[   97.070096][ T4700] EXT4-fs (loop1): This should not happen!! Data will be lost
[   97.070096][ T4700] 
[   97.156515][ T4700] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm kworker/u4:8: bg 0: block 112: padding at end of block bitmap is not set
[   97.208593][ T4955] loop4: detected capacity change from 0 to 1024
[   97.249746][ T4700] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[   97.282428][ T4700] EXT4-fs (loop1): This should not happen!! Data will be lost
[   97.282428][ T4700] 
[   97.351293][ T4700] EXT4-fs (loop1): Total free blocks count 0
[   97.378291][ T4700] EXT4-fs (loop1): Free/Dirty block details
[   97.398171][ T4959] loop5: detected capacity change from 0 to 256
[   97.432019][ T4700] EXT4-fs (loop1): free_blocks=0
[   97.437066][ T4700] EXT4-fs (loop1): dirty_blocks=64
[   98.197442][ T4983] loop0: detected capacity change from 0 to 2048
[   98.315286][ T4353]  loop0: p3 < > p4 < >
[   98.319528][ T4353] loop0: partition table partially beyond EOD, truncated
[   98.328350][   T26] audit: type=1800 audit(1790060150.794:8): pid=4995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.229" name="b_vendor_code" dev="configfs" ino=35377 res=0 errno=0
[   98.408247][ T4353] loop0: p3 start 4284289 is beyond EOD, truncated
[   98.523786][ T4983]  loop0: p3 < > p4 < >
[   98.526220][ T5000] rnbd_client L211: map_device: Parameters missing
[   98.528116][ T4983] loop0: partition table partially beyond EOD, truncated
[   98.592125][ T5003] loop1: detected capacity change from 0 to 1024
[   98.609102][ T4983] loop0: p3 start 4284289 is beyond EOD, truncated
[   98.787752][ T5011] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   98.928532][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   99.052307][ T5021] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[   99.095002][ T5021] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[   99.355036][ T5038] loop0: detected capacity change from 0 to 256
[   99.485112][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   99.498182][   T26] audit: type=1800 audit(1790060151.964:9): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.248" name="file1" dev="loop0" ino=1048608 res=0 errno=0
[   99.523663][ T5046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.251'.
[   99.561130][ T5047] netlink: 14 bytes leftover after parsing attributes in process `syz.5.250'.
[   99.870557][ T5054] loop4: detected capacity change from 0 to 4096
[   99.917008][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   99.934407][ T5063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'.
[   99.964426][ T5063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.256'.
[  100.082875][ T5070] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  100.092111][ T5071] IPVS: stopping backup sync thread 5070 ...
[  100.152559][   T21] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  100.172987][ T5072] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  100.284379][ T4174] hid-generic 0005:0C45:0008.0003: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa
[  100.533170][   T21] usb 2-1: too many configurations: 181, using maximum allowed: 8
[  100.609250][ T5096] loop0: detected capacity change from 0 to 128
[  100.622139][   T21] usb 2-1: unable to read config index 0 descriptor/start: -71
[  100.636163][   T21] usb 2-1: can't read configurations, error -71
[  100.890020][ T5105] loop4: detected capacity change from 0 to 256
[  100.968966][ T5107] device bond0 entered promiscuous mode
[  101.002087][ T5107] device bond_slave_0 entered promiscuous mode
[  101.046790][ T5107] device bond_slave_1 entered promiscuous mode
[  101.089021][ T5107] device bond0 left promiscuous mode
[  101.116328][ T5107] device bond_slave_0 left promiscuous mode
[  101.135494][ T5107] device bond_slave_1 left promiscuous mode
[  101.223997][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'.
[  101.394305][ T5127] block2mtd: parameter too long
[  101.519246][ T5134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'.
[  101.618762][ T5143] loop5: detected capacity change from 0 to 256
[  101.749488][ T5153] loop1: detected capacity change from 0 to 512
[  101.788437][ T5143] FAT-fs (loop5): Directory bread(block 64) failed
[  101.796140][ T5143] FAT-fs (loop5): Directory bread(block 65) failed
[  101.803298][ T5143] FAT-fs (loop5): Directory bread(block 66) failed
[  101.810169][ T5143] FAT-fs (loop5): Directory bread(block 67) failed
[  101.819314][ T5143] FAT-fs (loop5): Directory bread(block 68) failed
[  101.832094][ T5143] FAT-fs (loop5): Directory bread(block 69) failed
[  101.838931][ T5143] FAT-fs (loop5): Directory bread(block 70) failed
[  101.858871][ T5143] FAT-fs (loop5): Directory bread(block 71) failed
[  101.869325][ T5143] FAT-fs (loop5): Directory bread(block 72) failed
[  101.898429][ T5159] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  101.951971][ T5143] FAT-fs (loop5): Directory bread(block 73) failed
[  102.278604][ T5170] device netdevsim0 entered promiscuous mode
[  102.305339][ T5172] loop1: detected capacity change from 0 to 128
[  102.346069][ T5170] device netdevsim0 left promiscuous mode
[  102.436605][ T5172] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  102.457782][ T5172] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  102.866881][ T5201] loop4: detected capacity change from 0 to 512
[  102.949658][ T5201] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  102.976299][   T26] audit: type=1400 audit(1790060155.444:10): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=":" pid=5202 comm="syz.5.308" name=":" offset=33
[  103.008094][ T5198] loop1: detected capacity change from 0 to 8192
[  103.039614][ T5201] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.306: invalid indirect mapped block 9 (level 0)
[  103.126617][ T4353]  loop1: p1 < > p2 p3 < p5 p6 > p4
[  103.132070][ T4353] loop1: partition table partially beyond EOD, truncated
[  103.156111][ T5201] EXT4-fs (loop4): 1 truncate cleaned up
[  103.164543][ T5201] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  103.187004][ T4353] loop1: p1 start 100663296 is beyond EOD, truncated
[  103.216459][ T4353] loop1: p2 size 134217732 extends beyond EOD, truncated
[  103.237297][   T26] audit: type=1326 audit(1790060155.704:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5210 comm="syz.5.309" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38dd088159 code=0x0
[  103.282322][ T4353] loop1: p4 size 14876672 extends beyond EOD, truncated
[  103.320641][ T4353] loop1: p5 size 134217732 extends beyond EOD, truncated
[  103.382566][ T4353] loop1: p6 size 14876672 extends beyond EOD, truncated
[  103.426014][ T4185] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  103.465838][ T5198]  loop1: p1 < > p2 p3 < p5 p6 > p4
[  103.496561][ T5198] loop1: partition table partially beyond EOD, truncated
[  103.512778][ T5198] loop1: p1 start 100663296 is beyond EOD, truncated
[  103.519705][ T5198] loop1: p2 size 134217732 extends beyond EOD, truncated
[  103.551541][ T5198] loop1: p4 size 14876672 extends beyond EOD, truncated
[  103.594731][ T5198] loop1: p5 size 134217732 extends beyond EOD, truncated
[  103.693867][ T5198] loop1: p6 size 14876672 extends beyond EOD, truncated
[  103.937937][    T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.120244][ T5236] loop0: detected capacity change from 0 to 4096
[  104.137426][    T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.250649][    T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.320697][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  104.321037][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  104.339449][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  104.349052][ T4352] udevd[4352]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[  104.363374][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  104.424368][    T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.454061][ T5250] loop5: detected capacity change from 0 to 256
[  104.464427][ T5253] loop1: detected capacity change from 0 to 64
[  104.500570][ T5236] EXT4-fs (loop0): Test dummy encryption mode enabled
[  104.572004][ T5236] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003]
[  104.653057][ T5236] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,min_batch_time=0x0000000000000004,noblock_validity,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,,errors=continue. Quota mode: writeback.
[  104.668021][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  104.688083][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  104.708940][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  104.717817][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  104.751180][ T4352] udevd[4352]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[  104.782630][ T5236] EXT4-fs (loop0): Test dummy encryption mode enabled
[  104.803130][ T5253] Trying to free block not in datazone
[  104.853178][ T5253] Trying to free block not in datazone
[  104.881691][ T5236] EXT4-fs (loop0): re-mounted. Opts: debug,min_batch_time=0x0000000000000004,noblock_validity,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,. Quota mode: writeback.
[  104.981575][ T5266] loop2: detected capacity change from 0 to 2048
[  105.075658][ T5266] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.292207][ T5236] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option
[  105.358729][ T5236] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003]
[  105.407673][ T5236] System zones: 0-5
[  105.419501][ T5236] EXT4-fs (loop0): re-mounted. Opts: journal_ioprio=0x0000000000000001,delalloc,init_itable,grpjquota=,data=writeback,noblock_validity,minixdf,block_validity,acl,max_batch_time=0x0000000000000006,. Quota mode: writeback.
[  105.463175][ T5273] loop1: detected capacity change from 0 to 8192
[  105.591429][ T5285] loop2: detected capacity change from 0 to 1024
[  105.607568][ T5273] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  105.645682][ T5273] REISERFS (device loop1): using ordered data mode
[  105.653779][ T5273] reiserfs: using flush barriers
[  105.715291][ T5273] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  105.779264][ T5273] REISERFS (device loop1): checking transaction log (loop1)
[  105.855158][ T5290] loop0: detected capacity change from 0 to 512
[  105.865722][ T5288] loop5: detected capacity change from 0 to 512
[  105.934581][ T5276] chnl_net:caif_netlink_parms(): no params data found
[  106.001061][ T5290] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.325: corrupted inode contents
[  106.045148][ T5290] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  106.076423][ T5290] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.325: corrupted inode contents
[  106.116640][ T5288] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback.
[  106.140839][ T5288] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.172246][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.179482][ T5276] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.187913][ T5276] device bridge_slave_0 entered promiscuous mode
[  106.197987][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.205275][ T5276] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.213685][ T5276] device bridge_slave_1 entered promiscuous mode
[  106.245670][ T5276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.259682][ T5276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.273750][ T5290] EXT4-fs error (device loop0): ext4_evict_inode:332: inode #15: comm syz.0.325: mark_inode_dirty error
[  106.312395][ T5290] EXT4-fs (loop0): 1 orphan inode deleted
[  106.349101][ T5290] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,init_itable=0x00000000000000ff,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[  106.365326][ T5301] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  106.489350][ T5306] loop2: detected capacity change from 0 to 128
[  106.501729][ T5273] REISERFS (device loop1): Using tea hash to sort names
[  106.529947][ T5276] team0: Port device team_slave_0 added
[  106.570979][ T5273] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  106.620878][ T5306] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  106.644722][ T5276] team0: Port device team_slave_1 added
[  106.672084][ T5306] System zones: 1-3, 19-19, 35-36
[  106.678324][ T5306] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback.
[  106.706862][ T5306] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  106.813503][ T5306] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 12746755 (only 1 groups)
[  106.860823][ T5276] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.913047][ T5276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.970268][ T5276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.064944][ T5320] loop0: detected capacity change from 0 to 128
[  107.127910][ T5320] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  107.140692][ T5320] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.165513][    T9] device hsr_slave_0 left promiscuous mode
[  107.188112][    T9] device hsr_slave_1 left promiscuous mode
[  107.202338][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.210016][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.234440][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.246970][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.282628][    T9] device bridge_slave_1 left promiscuous mode
[  107.290284][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.310164][    T9] device bridge_slave_0 left promiscuous mode
[  107.316831][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.332337][ T4227] Bluetooth: hci0: command 0x0409 tx timeout
[  107.367978][    T9] device veth1_macvtap left promiscuous mode
[  107.399573][    T9] device veth0_macvtap left promiscuous mode
[  107.410300][    T9] device veth1_vlan left promiscuous mode
[  107.418010][    T9] device veth0_vlan left promiscuous mode
[  107.857182][    T9] team0 (unregistering): Port device team_slave_1 removed
[  107.877811][    T9] team0 (unregistering): Port device team_slave_0 removed
[  107.895084][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.911692][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.997868][    T9] bond0 (unregistering): Released all slaves
[  108.074350][ T5276] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.081485][ T5276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.113854][ T5276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.269697][ T5276] device hsr_slave_0 entered promiscuous mode
[  108.309414][ T5276] device hsr_slave_1 entered promiscuous mode
[  108.331496][ T5276] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  108.387209][ T5276] Cannot create hsr debugfs directory
[  108.707994][ T5362] netlink: 'syz.2.345': attribute type 5 has an invalid length.
[  108.810989][ T5366] netlink: 'syz.5.346': attribute type 3 has an invalid length.
[  108.829638][ T5366] netlink: 152 bytes leftover after parsing attributes in process `syz.5.346'.
[  109.177978][ T5378] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  109.219947][ T5378] REISERFS (device loop0): using ordered data mode
[  109.226607][ T5378] reiserfs: using flush barriers
[  109.253810][ T5378] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  109.299218][ T5378] REISERFS (device loop0): checking transaction log (loop0)
[  109.369848][ T5276] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  109.414157][ T4198] Bluetooth: hci0: command 0x041b tx timeout
[  109.424834][ T5276] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  109.468041][ T5276] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  109.536205][ T5276] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  109.634843][ T5378] REISERFS (device loop0): Using tea hash to sort names
[  109.669399][ T5378] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  109.714250][ T5409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.355'.
[  109.847587][ T5276] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.866506][ T5416] tipc: Started in network mode
[  109.871453][ T5416] tipc: Node identity 785634120000000021436587, cluster identity 4711
[  109.920819][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  109.929587][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  109.979195][ T5421] set_capacity_and_notify: 2 callbacks suppressed
[  109.979212][ T5421] loop2: detected capacity change from 0 to 512
[  110.100333][ T5421] FAT-fs (loop2): bogus number of FAT sectors
[  110.122033][ T5421] FAT-fs (loop2): Can't find a valid FAT filesystem
[  110.313574][ T5276] 8021q: adding VLAN 0 to HW filter on device team0
[  110.360189][ T5437] fuse: Bad value for 'fd'
[  110.412495][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  110.432926][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  110.481681][ T4700] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.488828][ T4700] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.563408][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  110.620751][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  110.646451][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  110.751594][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.758768][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.945823][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  111.002924][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  111.099305][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  111.214241][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  111.222679][ T5460] loop5: detected capacity change from 0 to 1024
[  111.384174][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  111.393331][ T5460] netlink: 84 bytes leftover after parsing attributes in process `syz.5.373'.
[  111.470462][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  111.497516][ T1108] Bluetooth: hci0: command 0x040f tx timeout
[  111.562822][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  111.645563][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  111.706118][ T5450] loop1: detected capacity change from 0 to 131072
[  111.715179][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  111.765395][ T5276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  111.799501][ T5276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  111.818818][ T5468] loop2: detected capacity change from 0 to 2048
[  111.829085][ T5450] F2FS-fs (loop1): Test dummy encryption mode enabled
[  111.875646][ T5450] F2FS-fs (loop1): Found nat_bits in checkpoint
[  111.922518][ T5450] F2FS-fs (loop1): sanity_check_inode: corrupted inode ino=3, run fsck to fix.
[  111.932384][ T5450] F2FS-fs (loop1): Failed to read root inode
[  112.006846][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  112.046095][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  112.163081][ T5468] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,errors=remount-ro,max_dir_size_kb=0x0000000000000004,grpjquota=,. Quota mode: none.
[  112.620349][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  112.629677][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  112.650307][ T5496] loop1: detected capacity change from 0 to 512
[  112.676365][ T5276] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.821004][ T5496] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.382: inode has both inline data and extents flags
[  112.950938][ T5496] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.382: couldn't read orphan inode 15 (err -117)
[  113.027775][ T5496] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  113.139182][ T5513] rnbd_client L599: Mapping device /dev/ram0 on session s., (access_mode: rw, nr_poll_queues: 0)
[  113.208435][ T5513] rtrs_client L2806: pathname cannot contain / and .
[  113.454164][ T5519] loop2: detected capacity change from 0 to 512
[  113.572697][ T4229] Bluetooth: hci0: command 0x0419 tx timeout
[  113.594179][ T5519] EXT4-fs error (device loop2): ext4_orphan_get:1436: comm syz.2.386: bad orphan inode 15
[  113.634263][ T5519] ext4_test_bit(bit=14, block=5) = 0
[  113.639685][ T5519] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none.
[  113.681932][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  113.690851][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  113.737679][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  113.753192][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  113.769987][ T5507] loop0: detected capacity change from 0 to 32768
[  113.795077][ T5472] loop5: detected capacity change from 0 to 40427
[  113.799077][ T5276] device veth0_vlan entered promiscuous mode
[  113.818598][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  113.837743][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  113.870857][ T5276] device veth1_vlan entered promiscuous mode
[  113.949421][ T5507] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.384 (5507)
[  113.976210][ T5472] F2FS-fs (loop5): invalid crc value
[  114.018790][ T5472] F2FS-fs (loop5): Found nat_bits in checkpoint
[  114.118356][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  114.153061][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  114.201741][ T5507] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  114.217972][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  114.264676][ T5507] BTRFS info (device loop0): turning off barriers
[  114.271344][ T5507] BTRFS info (device loop0): turning on async discard
[  114.299335][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  114.327154][ T5507] BTRFS info (device loop0): doing ref verification
[  114.337793][ T5276] device veth0_macvtap entered promiscuous mode
[  114.344659][ T5472] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  114.352572][ T5507] BTRFS info (device loop0): using free space tree
[  114.369751][ T5507] BTRFS info (device loop0): has skinny extents
[  114.408267][ T5276] device veth1_macvtap entered promiscuous mode
[  114.499044][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.510805][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.521274][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.532185][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.546375][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.559998][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.570256][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.581107][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.596890][ T5276] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.606035][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  114.634966][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  114.706889][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  114.730834][ T5507] BTRFS info (device loop0): enabling ssd optimizations
[  114.766536][ T4639] attempt to access beyond end of device
[  114.766536][ T4639] loop5: rw=2049, want=45104, limit=40427
[  114.813013][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  114.875140][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.912033][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.949120][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.000592][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.051960][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.092110][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.152741][ T5276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.201968][ T5276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.262536][ T5276] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.290739][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  115.315803][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  115.364760][ T5276] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.383778][ T5276] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.410311][ T5276] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.450522][ T5276] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.747513][ T4576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.792286][ T4576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.852593][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  115.890790][ T3060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.907502][ T5562] loop2: detected capacity change from 0 to 32768
[  115.972080][ T3060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.992443][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  116.075856][ T5562] (syz.2.390,5562,0):ocfs2_verify_heartbeat:836 ERROR: Heartbeat has to be started to mount a read-write clustered device.
[  116.152526][ T5562] (syz.2.390,5562,1):ocfs2_fill_super:1177 ERROR: status = -22
[  116.201493][ T5563] loop1: detected capacity change from 0 to 32768
[  116.272711][ T5563] XFS: attr2 mount option is deprecated.
[  116.384040][ T5589] netlink: 84 bytes leftover after parsing attributes in process `syz.2.395'.
[  116.585266][ T5563] XFS (loop1): Mounting V5 Filesystem
[  116.754173][ T5563] XFS (loop1): Ending clean mount
[  116.992259][ T4189] XFS (loop1): Unmounting Filesystem
[  117.006465][ T5618] loop6: detected capacity change from 0 to 16
[  117.031282][ T5620] loop2: detected capacity change from 0 to 128
[  117.072558][ T5618] erofs: (device loop6): erofs_superblock_csum_verify: invalid checksum 0x7cda66ab, 0x7bbbea8c expected
[  117.089000][ T5261] udevd[5261]: incorrect erofs checksum on /dev/loop6
[  117.096007][ T5620] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  117.184239][ T5620] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  117.265023][ T5620] ext2 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.381656][ T5630] loop6: detected capacity change from 0 to 2048
[  117.532969][ T5630] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  117.604159][ T5630] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  117.632708][ T5630] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  117.671952][ T5630] UDF-fs: Scanning with blocksize 512 failed
[  117.722530][ T5630] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.757942][ T5645] loop2: detected capacity change from 0 to 256
[  118.140741][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.413'.
[  118.701689][ T5686] loop5: detected capacity change from 0 to 1024
[  118.750107][ T5686] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  118.882805][ T5686] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,nomblk_io_submit,jqfmt=vfsold,,errors=continue. Quota mode: none.
[  119.010631][ T5667] loop6: detected capacity change from 0 to 32768
[  119.057264][ T5686] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.103317][ T5667] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop6 scanned by syz.6.415 (5667)
[  119.167459][ T5667] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  119.219915][ T5667] BTRFS info (device loop6): setting nodatacow, compression disabled
[  119.258783][ T5667] BTRFS info (device loop6): turning on flush-on-commit
[  119.298883][ T5667] BTRFS info (device loop6): using free space tree
[  119.335185][ T5667] BTRFS info (device loop6): has skinny extents
[  119.349369][ T5685] EXT4-fs error (device loop5): ext4_free_blocks:6231: comm syz.5.419: Freeing blocks not in datazone - block = 0, count = 16
[  119.405950][ T5685] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.419: bg 0: block 112: padding at end of block bitmap is not set
[  119.425325][ T5685] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  119.701101][ T5667] BTRFS info (device loop6): enabling ssd optimizations
[  120.647325][ T5765] input: syz1 as /devices/virtual/input/input6
[  120.906728][ T5775] loop6: detected capacity change from 0 to 1024
[  121.626520][ T5814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'.
[  121.644199][ T5808] FAULT_INJECTION: forcing a failure.
[  121.644199][ T5808] name failslab, interval 1, probability 0, space 0, times 1
[  121.656919][ T5808] CPU: 0 PID: 5808 Comm: syz.0.450 Not tainted syzkaller #0
[  121.664246][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  121.674351][ T5808] Call Trace:
[  121.677659][ T5808]  <TASK>
[  121.680614][ T5808]  dump_stack_lvl+0x188/0x250
[  121.685347][ T5808]  ? show_regs_print_info+0x20/0x20
[  121.690592][ T5808]  ? load_image+0x410/0x410
[  121.695142][ T5808]  should_fail+0x383/0x4b0
[  121.699605][ T5808]  should_failslab+0x5/0x20
[  121.704147][ T5808]  slab_pre_alloc_hook+0x51/0xc0
[  121.709116][ T5808]  ? nf_ct_ext_add+0x42e/0x660
[  121.713919][ T5808]  __kmalloc_track_caller+0x69/0x330
[  121.719244][ T5808]  ? nf_ct_ext_add+0x42e/0x660
[  121.724052][ T5808]  krealloc+0x5a/0xf0
[  121.728270][ T5808]  nf_ct_ext_add+0x42e/0x660
[  121.732907][ T5808]  init_conntrack+0x76d/0x1530
[  121.737706][ T5808]  ? get_l4proto+0x670/0x670
[  121.742340][ T5808]  ? early_drop+0x800/0x800
[  121.746912][ T5808]  ? nf_conntrack_find_get+0x640/0x640
[  121.752417][ T5808]  ? __siphash_unaligned+0x286/0x3d0
[  121.757745][ T5808]  nf_conntrack_in+0xd76/0x17b0
[  121.762658][ T5808]  ? nf_ct_pernet+0x240/0x240
[  121.767398][ T5808]  ? __netif_receive_skb_core+0x2f97/0x3670
[  121.773330][ T5808]  ? ipv4_conntrack_defrag+0x284/0x590
[  121.778828][ T5808]  ? ip_sabotage_in+0x53/0x280
[  121.783631][ T5808]  ? rcu_lock_release+0x20/0x20
[  121.788515][ T5808]  nf_hook_slow+0xb9/0x200
[  121.793147][ T5808]  ? ip_rcv_core+0xb30/0xb30
[  121.797770][ T5808]  NF_HOOK+0x1f2/0x390
[  121.801874][ T5808]  ? ip_rcv_core+0xb30/0xb30
[  121.806503][ T5808]  ? ip_local_deliver+0x180/0x180
[  121.811566][ T5808]  ? sock_wfree+0x18c/0x1f0
[  121.816104][ T5808]  ? ip_rcv_core+0xb30/0xb30
[  121.820723][ T5808]  ? ip_rcv_core+0x6a0/0xb30
[  121.825349][ T5808]  ? ip_local_deliver_finish+0x320/0x320
[  121.831015][ T5808]  ? ip_local_deliver_finish+0x320/0x320
[  121.836684][ T5808]  __netif_receive_skb+0xcc/0x290
[  121.841741][ T5808]  ? ktime_get_with_offset+0x2d7/0x320
[  121.847254][ T5808]  netif_receive_skb+0x19e/0x700
[  121.852261][ T5808]  ? __bpf_trace_softirq+0x10/0x10
[  121.857413][ T5808]  ? netif_receive_skb_core+0x210/0x210
[  121.863006][ T5808]  tun_rx_batched+0x606/0x760
[  121.867727][ T5808]  ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0
[  121.873749][ T5808]  ? local_bh_enable+0x20/0x20
[  121.878559][ T5808]  ? __local_bh_enable_ip+0x136/0x1c0
[  121.883967][ T5808]  ? read_lock_is_recursive+0x10/0x10
[  121.889383][ T5808]  ? __local_bh_enable_ip+0x136/0x1c0
[  121.894800][ T5808]  ? _local_bh_enable+0xa0/0xa0
[  121.899690][ T5808]  ? skb_set_owner_w+0x213/0x340
[  121.904678][ T5808]  tun_get_user+0x2bf4/0x3b10
[  121.909431][ T5808]  ? tun_ring_recv+0xc90/0xc90
[  121.914244][ T5808]  ? rcu_lock_release+0x5/0x20
[  121.919047][ T5808]  ? __lock_acquire+0x7b50/0x7b50
[  121.924150][ T5808]  tun_chr_write_iter+0x112/0x1e0
[  121.929221][ T5808]  vfs_write+0x748/0xd70
[  121.933522][ T5808]  ? file_end_write+0x250/0x250
[  121.938428][ T5808]  ? __fget_files+0x402/0x470
[  121.943160][ T5808]  ? __fdget_pos+0x1e2/0x370
[  121.947824][ T5808]  ? ksys_write+0x70/0x260
[  121.952282][ T5808]  ksys_write+0x153/0x260
[  121.956644][ T5808]  ? __ia32_sys_read+0x80/0x80
[  121.961444][ T5808]  ? lockdep_hardirqs_on+0x94/0x140
[  121.966686][ T5808]  do_syscall_64+0x4c/0xa0
[  121.971136][ T5808]  ? clear_bhb_loop+0x30/0x80
[  121.975852][ T5808]  ? clear_bhb_loop+0x30/0x80
[  121.980566][ T5808]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  121.986503][ T5808] RIP: 0033:0x7f30ba21298e
[  121.990950][ T5808] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  122.010586][ T5808] RSP: 002b:00007f30b84a9fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  122.019059][ T5808] RAX: ffffffffffffffda RBX: 00007f30b84aa6c0 RCX: 00007f30ba21298e
[  122.027071][ T5808] RDX: 0000000000000036 RSI: 0000200000000740 RDI: 00000000000000c8
[  122.035083][ T5808] RBP: 00007f30ba2e906b R08: 0000000000000000 R09: 0000000000000000
[  122.043087][ T5808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  122.051088][ T5808] R13: 00007f30ba4da038 R14: 00007f30ba4d9fa0 R15: 00007ffedc2deae8
[  122.059116][ T5808]  </TASK>
[  122.107295][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'.
[  122.660010][ T5839] loop5: detected capacity change from 0 to 256
[  122.729124][ T5844] loop0: detected capacity change from 0 to 256
[  122.786909][ T5844] exfat: Deprecated parameter 'utf8'
[  122.800121][ T5845] device-mapper: table: 248:0: multipath: not enough priority group arguments
[  122.808995][ T5844] exfat: Deprecated parameter 'utf8'
[  122.815048][ T5844] exfat: Deprecated parameter 'utf8'
[  122.892202][ T5845] device-mapper: ioctl: error adding target to table
[  122.910256][ T5844] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  123.658147][ T5835] loop6: detected capacity change from 0 to 32768
[  123.796981][ T5835] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.456 (5835)
[  123.869610][ T5835] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  123.921661][ T5835] BTRFS info (device loop6): setting nodatasum
[  123.946270][ T5835] BTRFS info (device loop6): force zlib compression, level 3
[  123.996970][ T5835] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8)
[  124.047728][ T5835] BTRFS info (device loop6): use lzo compression, level 0
[  124.098381][ T5835] BTRFS info (device loop6): turning on flush-on-commit
[  124.132032][ T5835] BTRFS info (device loop6): enabling auto defrag
[  124.158904][ T5835] BTRFS info (device loop6): max_inline at 4096
[  124.192761][ T5835] BTRFS info (device loop6): using free space tree
[  124.231970][ T5835] BTRFS info (device loop6): has skinny extents
[  124.472085][ T5905] loop5: detected capacity change from 0 to 128
[  124.539374][ T5909] FAULT_INJECTION: forcing a failure.
[  124.539374][ T5909] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  124.660340][ T5905] FAT-fs (loop5): bogus number of reserved sectors
[  124.667852][ T5909] CPU: 1 PID: 5909 Comm: syz.2.474 Not tainted syzkaller #0
[  124.675201][ T5909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  124.685287][ T5909] Call Trace:
[  124.688594][ T5909]  <TASK>
[  124.691556][ T5909]  dump_stack_lvl+0x188/0x250
[  124.696288][ T5909]  ? show_regs_print_info+0x20/0x20
[  124.701528][ T5909]  ? load_image+0x410/0x410
[  124.706068][ T5909]  ? __lock_acquire+0x7b50/0x7b50
[  124.711142][ T5909]  should_fail+0x383/0x4b0
[  124.715646][ T5909]  strncpy_from_user+0x32/0x350
[  124.720635][ T5909]  getname_flags+0xf2/0x4f0
[  124.725191][ T5909]  __se_sys_quotactl+0x1dd/0x6f0
[  124.726490][ T5905] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  124.730166][ T5909]  ? __x64_sys_quotactl+0xa0/0xa0
[  124.730192][ T5909]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  124.730222][ T5909]  ? lock_chain_count+0x20/0x20
[  124.730251][ T5909]  ? lockdep_hardirqs_on+0x94/0x140
[  124.730277][ T5909]  do_syscall_64+0x4c/0xa0
[  124.730298][ T5909]  ? clear_bhb_loop+0x30/0x80
[  124.730322][ T5909]  ? clear_bhb_loop+0x30/0x80
[  124.730346][ T5909]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  124.730370][ T5909] RIP: 0033:0x7fbb1386d159
[  124.730418][ T5909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.730436][ T5909] RSP: 002b:00007fbb11ac5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  124.730461][ T5909] RAX: ffffffffffffffda RBX: 00007fbb13af4fa0 RCX: 00007fbb1386d159
[  124.730477][ T5909] RDX: 000000000000ee00 RSI: 0000200000000040 RDI: ffffffff80000501
[  124.730493][ T5909] RBP: 00007fbb1390406b R08: 0000000000000000 R09: 0000000000000000
[  124.730506][ T5909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.730520][ T5909] R13: 00007fbb13af5038 R14: 00007fbb13af4fa0 R15: 00007ffd13a3da58
[  124.730550][ T5909]  </TASK>
[  124.862668][ T5905] FAT-fs (loop5): Can't find a valid FAT filesystem
[  124.944905][ T5917] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22)
[  125.064562][ T5835] BTRFS info (device loop6): enabling ssd optimizations
[  125.190480][   T26] audit: type=1800 audit(1790060177.654:12): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.456" name="file1" dev="loop6" ino=260 res=0 errno=0
[  125.310019][ T5922] loop0: detected capacity change from 0 to 8192
[  125.386016][ T5922] REISERFS warning (device loop0): super-6515 reiserfs_parse_options: journaled quota format not specified.
[  125.509053][ T5944] Unable to locate . in name.bConfigurationValue
[  125.815000][ T5952] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  126.266929][   T26] audit: type=1800 audit(1790060178.734:13): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.492" name="p_srate" dev="configfs" ino=38561 res=0 errno=0
[  126.407016][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'.
[  126.724261][ T5982] netlink: 'syz.1.495': attribute type 7 has an invalid length.
[  126.772008][ T5982] netlink: 'syz.1.495': attribute type 1 has an invalid length.
[  126.800443][ T5982] netlink: 'syz.1.495': attribute type 4 has an invalid length.
[  126.887551][ T5982] netlink: 'syz.1.495': attribute type 7 has an invalid length.
[  126.942007][ T5982] netlink: 207220 bytes leftover after parsing attributes in process `syz.1.495'.
[  127.203265][ T6004] loop1: detected capacity change from 0 to 128
[  127.350148][ T6009] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7
[  127.455162][ T6016] loop5: detected capacity change from 0 to 256
[  127.760326][   T26] audit: type=1800 audit(1790060180.224:14): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.505" name="file2" dev="loop5" ino=1048619 res=0 errno=0
[  127.775446][ T6029] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  128.075343][ T5989] loop2: detected capacity change from 0 to 32768
[  128.239305][ T5989] XFS (loop2): Mounting V5 Filesystem
[  128.457830][ T5989] XFS (loop2): Ending clean mount
[  128.629038][ T6057] syz.6.518 (6057) used greatest stack depth: 20656 bytes left
[  128.689687][ T4196] XFS (loop2): Unmounting Filesystem
[  129.071412][ T6076] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  129.318005][ T5760] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  129.375640][ T5760] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  129.728372][ T6102] capability: warning: `syz.2.534' uses 32-bit capabilities (legacy support in use)
[  129.949711][ T6105] loop0: detected capacity change from 0 to 4096
[  129.977399][ T6109] netlink: 104 bytes leftover after parsing attributes in process `syz.5.535'.
[  130.258219][ T6118] loop5: detected capacity change from 0 to 256
[  130.330417][ T6088] hid-generic 0000:0000:0000.0004: pid 6088 passed too short report
[  130.361379][ T6118] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  131.466888][ T6153] loop0: detected capacity change from 0 to 2048
[  131.561691][ T6153] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.771311][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'.
[  131.815596][ T6171] loop1: detected capacity change from 0 to 512
[  131.976465][ T6171] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,discard,quota,,errors=continue. Quota mode: writeback.
[  132.002015][ T5760] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  132.080415][ T6143] loop5: detected capacity change from 0 to 40427
[  132.081383][ T6171] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.161463][ T6143] F2FS-fs (loop5): invalid crc value
[  132.210163][ T6143] F2FS-fs (loop5): Found nat_bits in checkpoint
[  132.261983][ T5760] usb 7-1: Using ep0 maxpacket: 8
[  132.392253][ T5760] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  132.400505][ T5760] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  132.453784][ T6143] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  132.464825][  T154] tipc: Subscription rejected, illegal request
[  132.471387][ T5760] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  132.471458][ T5760] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  132.550148][ T5760] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  132.610249][ T5760] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  132.625032][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  132.631377][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  132.653899][ T6143] attempt to access beyond end of device
[  132.653899][ T6143] loop5: rw=2049, want=45104, limit=40427
[  132.667244][ T5760] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.705966][ T6173] loop0: detected capacity change from 0 to 32768
[  132.763241][ T4639] attempt to access beyond end of device
[  132.763241][ T4639] loop5: rw=2049, want=45120, limit=40427
[  132.866824][ T6173] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  132.962058][ T5760] usb 7-1: usb_control_msg returned -32
[  132.967732][ T5760] usbtmc 7-1:16.0: can't read capabilities
[  133.111049][ T6210] loop1: detected capacity change from 0 to 1024
[  133.242709][ T6173] (syz.0.559,6173,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount
[  133.354442][ T6212] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #64 has bitmap size 448 but physical max of 256
[  133.399348][ T6210] hfsplus: xattr searching failed
[  133.444639][ T6212] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  133.478702][ T6212] OCFS2: File system is now read-only.
[  133.541016][ T6212] (syz.0.559,6212,1):ocfs2_test_suballoc_bit:2814 ERROR: read group 64 failed -30
[  133.598928][ T6212] (syz.0.559,6212,0):ocfs2_test_suballoc_bit:2825 ERROR: status = -30
[  133.631800][ T6212] (syz.0.559,6212,0):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -30
[  133.649184][ T6212] (syz.0.559,6212,0):ocfs2_test_inode_bit:2896 ERROR: status = -30
[  133.659955][ T6212] (syz.0.559,6212,0):ocfs2_get_parent:166 ERROR: test inode bit failed -30
[  133.777697][ T4186] ocfs2: Unmounting device (7,0) on (node local)
[  134.208350][ T6251] netlink: 'syz.0.569': attribute type 39 has an invalid length.
[  134.407416][ T6259] loop2: detected capacity change from 0 to 256
[  134.538474][ T6259] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  134.566230][ T6259] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  134.593242][ T6259] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  134.717172][ T4225] usb 7-1: USB disconnect, device number 2
[  134.793806][   T26] audit: type=1804 audit(1790060187.254:15): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.579" name="/newroot/150/bus/0,jqfmt=vfsv1,errors=remount-ro,nobh,grpquota.." dev="loop2" ino=1048620 res=1 errno=0
[  134.890170][ T6277] loop0: detected capacity change from 0 to 128
[  134.986941][ T6277] FAT-fs (loop0): bogus number of reserved sectors
[  135.003042][ T6277] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  135.013305][ T6277] FAT-fs (loop0): Can't find a valid FAT filesystem
[  135.441231][ T6299] loop1: detected capacity change from 0 to 1024
[  135.511816][ T6299] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  135.634222][ T6308] loop0: detected capacity change from 0 to 128
[  135.743195][ T6299] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback.
[  136.157215][ T6325] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  136.225268][ T6287] loop6: detected capacity change from 0 to 32768
[  136.293266][ T6287] xfs: Unknown parameter 'smackfstransmute'
[  136.752014][ T4225] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  136.816962][ T6350] loop1: detected capacity change from 0 to 256
[  136.962758][ T6350] netlink: 'syz.1.608': attribute type 298 has an invalid length.
[  137.022098][ T4225] usb 6-1: Using ep0 maxpacket: 32
[  137.142222][ T4225] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  137.150384][ T4225] usb 6-1: config 0 has no interface number 0
[  137.218697][ T4225] usb 6-1: config 0 interface 12 has no altsetting 0
[  137.412335][ T4225] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  137.421467][ T4225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.466472][ T4225] usb 6-1: Product: syz
[  137.487427][ T4225] usb 6-1: Manufacturer: syz
[  137.508953][ T4225] usb 6-1: SerialNumber: syz
[  137.530980][ T4225] usb 6-1: config 0 descriptor??
[  137.671303][ T6380] loop0: detected capacity change from 0 to 4096
[  137.712874][ T6380] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  137.845487][ T6380] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  137.878295][ T6380] ntfs3: loop0: mft corrupted
[  137.897543][ T6380] ntfs3: loop0: Failed to load $Extend.
[  138.245101][ T6409] loop2: detected capacity change from 0 to 1024
[  138.252630][ T6407] Illegal XDP return value 5, expect packet loss!
[  138.371279][ T6409] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  138.419765][ T6409] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  138.456905][ T6418] vxcan0: tx drop: invalid da for name 0x00000000000000c7
[  138.496196][ T6409] jbd2_journal_init_inode: Cannot locate journal superblock
[  138.531477][ T6409] EXT4-fs (loop2): Could not load journal inode
[  138.663345][ T4225] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  138.712090][ T4225] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  138.728323][ T4225] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  138.772055][ T4225] f81534: probe of 6-1:0.12 failed with error -71
[  138.818721][ T4225] usb 6-1: USB disconnect, device number 2
[  139.619875][ T6455] loop2: detected capacity change from 0 to 4096
[  139.775889][ T6455] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  140.206991][ T4196] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  140.290293][ T6465] chnl_net:caif_netlink_parms(): no params data found
[  140.603744][ T6465] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.610957][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.619567][ T6465] device bridge_slave_0 entered promiscuous mode
[  140.674103][ T6465] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.689928][ T6508] loop5: detected capacity change from 0 to 2048
[  140.712587][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.721057][ T6465] device bridge_slave_1 entered promiscuous mode
[  140.755722][ T6465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.767789][ T6465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.799310][ T6508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  140.893593][ T6465] team0: Port device team_slave_0 added
[  140.951087][ T6465] team0: Port device team_slave_1 added
[  141.057846][ T6465] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.085732][ T6465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.164128][ T6465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.213784][ T6465] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.239863][ T6465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.368506][ T6465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.392486][ T6525] loop5: detected capacity change from 0 to 1024
[  141.423026][ T6484] loop0: detected capacity change from 0 to 40427
[  141.457535][ T6525] EXT4-fs (loop5): Ignoring removed bh option
[  141.486718][ T6484] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  141.521989][ T6484] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  141.550698][ T6484] F2FS-fs (loop0): invalid crc value
[  141.560281][ T6465] device hsr_slave_0 entered promiscuous mode
[  141.577256][ T6465] device hsr_slave_1 entered promiscuous mode
[  141.583788][ T6525] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,mb_optimize_scan=0x0000000000000000,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  141.685438][ T6515] Bluetooth: hci0: command 0x0409 tx timeout
[  141.693860][ T6484] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  141.792148][ T6465] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  141.799772][ T6465] Cannot create hsr debugfs directory
[  141.921011][ T6484] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  141.950441][ T6484] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  142.105520][   T26] audit: type=1800 audit(1790060194.574:16): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.653" name="file1" dev="loop0" ino=10 res=0 errno=0
[  142.132180][   T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  142.170710][   T26] audit: type=1804 audit(1790060194.614:17): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.653" name="/newroot/130/file1/file1" dev="loop0" ino=10 res=1 errno=0
[  142.256194][ T4186] attempt to access beyond end of device
[  142.256194][ T4186] loop0: rw=2049, want=45104, limit=40427
[  142.449533][ T6465] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  142.478868][ T6465] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  142.512404][   T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.533475][ T6465] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  142.540945][   T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.587513][   T21] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  142.622266][   T21] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  142.631456][   T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.660427][   T21] usb 6-1: config 0 descriptor??
[  142.684900][ T6465] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  142.697376][   T26] audit: type=1326 audit(1790060195.164:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.671" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb5950159 code=0x7fc00000
[  142.767150][   T26] audit: type=1326 audit(1790060195.164:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.671" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8fb5950159 code=0x7fc00000
[  142.934121][   T26] audit: type=1326 audit(1790060195.164:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.671" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb5950159 code=0x7fc00000
[  143.006428][   T26] audit: type=1326 audit(1790060195.164:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.671" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb5950159 code=0x7fc00000
[  143.074460][ T6465] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.142714][   T26] audit: type=1326 audit(1790060195.164:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.671" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb5950159 code=0x7fc00000
[  143.185598][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  143.215049][   T21] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  143.232628][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  143.243542][ T6465] 8021q: adding VLAN 0 to HW filter on device team0
[  143.293686][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  143.319613][ T6575] Bluetooth: hci0: unsupported parameter 5135
[  143.324070][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  143.334552][   T26] audit: type=1326 audit(1790060195.164:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.671" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb5950159 code=0x7fc00000
[  143.371267][ T6575] Bluetooth: hci0: unsupported parameter 8192
[  143.375049][   T21] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  143.394111][  T309] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.401221][  T309] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.422033][ T6575] Bluetooth: hci0: unsupported parameter 5135
[  143.428170][ T6575] Bluetooth: hci0: unsupported parameter 8192
[  143.431740][   T26] audit: type=1326 audit(1790060195.164:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.671" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb5950159 code=0x7fc00000
[  143.473792][  T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  143.484815][   T21] usb 6-1: USB disconnect, device number 3
[  143.532639][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  143.541518][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  143.565750][   T26] audit: type=1326 audit(1790060195.164:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.1.671" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb5950159 code=0x7fc00000
[  143.611152][ T6578] fido_id[6578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  143.636520][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.643699][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.731946][   T23] Bluetooth: hci0: command 0x041b tx timeout
[  143.775676][  T144] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.856860][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  143.866574][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  143.885908][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  143.902195][ T6593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.680'.
[  143.927540][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  143.949512][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  143.976173][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  143.999601][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  144.040368][  T144] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.100162][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  144.112985][ T6598] ip_tables: iptables: counters copy to user failed while replacing table
[  144.127272][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  144.166800][ T6603] loop0: detected capacity change from 0 to 512
[  144.169560][ T6605] loop5: detected capacity change from 0 to 8
[  144.240076][ T6603] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  144.256259][  T144] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.324801][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  144.334431][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  144.346001][ T6465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  144.374496][ T6603] EXT4-fs (loop0): mount failed
[  144.396640][  T144] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.759922][ T6625] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  145.118525][ T6643] netlink: 'syz.5.694': attribute type 29 has an invalid length.
[  145.138440][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  145.160647][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  145.180892][ T6644] netlink: 'syz.2.695': attribute type 4 has an invalid length.
[  145.218618][ T6465] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.276924][ T6643] netlink: 'syz.5.694': attribute type 29 has an invalid length.
[  145.318149][ T6645] netlink: 'syz.5.694': attribute type 29 has an invalid length.
[  145.382930][ T6646] netlink: 'syz.5.694': attribute type 29 has an invalid length.
[  145.417418][ T6652] netlink: 'syz.5.694': attribute type 29 has an invalid length.
[  145.526795][ T6603] loop0: detected capacity change from 0 to 32768
[  145.571588][ T6603] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.684 (6603)
[  145.673782][ T6603] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  145.701965][ T6603] BTRFS info (device loop0): force clearing of disk cache
[  145.714155][ T6603] BTRFS info (device loop0): metadata ratio 0
[  145.759761][ T6603] BTRFS info (device loop0): enabling disk space caching
[  145.790244][ T6603] BTRFS info (device loop0): disk space caching is enabled
[  145.812270][ T4258] Bluetooth: hci0: command 0x040f tx timeout
[  145.848213][ T6603] BTRFS info (device loop0): has skinny extents
[  145.891003][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'.
[  146.110983][ T6670] team0 (unregistering): Port device team_slave_0 removed
[  146.181450][ T6603] BTRFS info (device loop0): enabling ssd optimizations
[  146.203020][ T6670] team0 (unregistering): Port device team_slave_1 removed
[  146.230067][ T6603] BTRFS info (device loop0): clearing free space tree
[  146.286537][ T6603] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  146.300468][ T6603] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  146.340866][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  146.361280][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  146.424093][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  146.434040][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  146.461349][ T6465] device veth0_vlan entered promiscuous mode
[  146.530120][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  146.546605][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  146.579655][ T6603] BTRFS error (device loop0): balance: invalid convert data profile raid10
[  146.626475][ T6465] device veth1_vlan entered promiscuous mode
[  146.685353][ T6712] netlink: 35 bytes leftover after parsing attributes in process `syz.2.706'.
[  146.722142][ T6712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.706'.
[  146.846995][ T6716] loop5: detected capacity change from 0 to 1024
[  146.975162][ T6716] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  146.988272][ T6716] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  147.084323][ T6716] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,nombcache,nomblk_io_submit,i_version,grpquota,nomblk_io_submit,noinit_itable,inode_readahead_blks=0x0000000000000080,. Quota mode: writeback.
[  147.130231][ T6716] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.175878][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  147.186950][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  147.217026][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  147.231903][   T26] kauditd_printk_skb: 21 callbacks suppressed
[  147.231920][   T26] audit: type=1800 audit(1790060199.694:47): pid=6716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.708" name="file1" dev="loop5" ino=15 res=0 errno=0
[  147.276690][ T3060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  147.334125][ T6465] device veth0_macvtap entered promiscuous mode
[  147.358625][ T6716] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: comm syz.5.708: lblock 0 mapped to illegal pblock 0 (length 6)
[  147.394980][  T144] device hsr_slave_0 left promiscuous mode
[  147.416586][  T144] device hsr_slave_1 left promiscuous mode
[  147.435959][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.450330][ T6716] EXT4-fs (loop5): Remounting filesystem read-only
[  147.460100][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.477379][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.497437][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.511551][  T144] device bridge_slave_1 left promiscuous mode
[  147.527082][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.547177][  T144] device bridge_slave_0 left promiscuous mode
[  147.561604][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.596128][  T144] device veth1_macvtap left promiscuous mode
[  147.607640][  T144] device veth0_macvtap left promiscuous mode
[  147.614311][  T144] device veth1_vlan left promiscuous mode
[  147.620224][  T144] device veth0_vlan left promiscuous mode
[  147.894144][ T4258] Bluetooth: hci0: command 0x0419 tx timeout
[  148.145417][ T6727] loop0: detected capacity change from 0 to 32768
[  148.347723][ T6727] XFS (loop0): Mounting V5 Filesystem
[  148.474949][ T6727] XFS (loop0): Ending clean mount
[  148.623370][ T4186] XFS (loop0): Unmounting Filesystem
[  148.648785][  T144] team0 (unregistering): Port device team_slave_1 removed
[  148.784229][  T144] team0 (unregistering): Port device team_slave_0 removed
[  148.863850][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.909267][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.181196][  T144] bond0 (unregistering): Released all slaves
[  149.248127][ T6465] device veth1_macvtap entered promiscuous mode
[  149.272316][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  149.280553][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  149.299475][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.337249][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.364109][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.386454][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.402219][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.414653][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.435015][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.451945][    T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  149.468521][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.480690][ T6465] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.491451][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  149.505036][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  149.585951][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.649526][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.661632][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.672646][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.701948][    T7] usb 1-1: Using ep0 maxpacket: 32
[  149.707996][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.721070][ T6782] loop5: detected capacity change from 0 to 1024
[  149.727957][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.746107][ T6465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.775196][ T6782] EXT4-fs (loop5): Ignoring removed orlov option
[  149.792238][ T6465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.805399][ T6465] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.814875][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  149.825829][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  149.834448][    T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  149.857563][ T6465] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.874014][ T6782] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  149.918290][ T6465] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.961885][ T6465] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.012295][    T7] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  150.021706][    T7] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  150.039369][ T6465] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.088587][    T7] usb 1-1: Product: syz
[  150.114418][    T7] usb 1-1: Manufacturer: syz
[  150.127737][    T7] usb 1-1: SerialNumber: syz
[  150.184832][    T7] usb 1-1: config 0 descriptor??
[  150.232329][ T6770] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  150.261591][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.278750][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.298963][    T7] hub 1-1:0.0: bad descriptor, ignoring hub
[  150.318698][    T7] hub: probe of 1-1:0.0 failed with error -5
[  150.341153][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  150.455977][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.483142][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.518116][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  150.559718][ T6803] netlink: 52 bytes leftover after parsing attributes in process `syz.5.727'.
[  150.772502][ T6809] FAULT_INJECTION: forcing a failure.
[  150.772502][ T6809] name failslab, interval 1, probability 0, space 0, times 0
[  150.820527][ T6809] CPU: 1 PID: 6809 Comm: syz.2.729 Not tainted syzkaller #0
[  150.827882][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  150.837980][ T6809] Call Trace:
[  150.841315][ T6809]  <TASK>
[  150.844283][ T6809]  dump_stack_lvl+0x188/0x250
[  150.849018][ T6809]  ? show_regs_print_info+0x20/0x20
[  150.854271][ T6809]  ? load_image+0x410/0x410
[  150.858825][ T6809]  ? __might_sleep+0xf0/0xf0
[  150.863467][ T6809]  ? __lock_acquire+0x7b50/0x7b50
[  150.868546][ T6809]  should_fail+0x383/0x4b0
[  150.873023][ T6809]  should_failslab+0x5/0x20
[  150.877575][ T6809]  slab_pre_alloc_hook+0x51/0xc0
[  150.882577][ T6809]  kmem_cache_alloc_trace+0x47/0x290
[  150.887909][ T6809]  ? futex_lock_pi+0xa31/0xbf0
[  150.892724][ T6809]  futex_lock_pi+0xa31/0xbf0
[  150.897375][ T6809]  ? futex_requeue+0x1920/0x1920
[  150.902407][ T6809]  ? verify_lock_unused+0x140/0x140
[  150.907757][ T6809]  ? verify_lock_unused+0x140/0x140
[  150.913003][ T6809]  do_futex+0xdda/0x12b0
[  150.917282][ T6809]  ? vfs_write+0xaa6/0xd70
[  150.921737][ T6809]  ? futex_exit_release+0x1c0/0x1c0
[  150.926995][ T6809]  ? __context_tracking_exit+0x4c/0x80
[  150.932500][ T6809]  __se_sys_futex+0x389/0x420
[  150.937232][ T6809]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  150.943246][ T6809]  ? __x64_sys_futex+0xf0/0xf0
[  150.948049][ T6809]  ? __x64_sys_futex+0x1d/0xf0
[  150.952839][ T6809]  do_syscall_64+0x4c/0xa0
[  150.957285][ T6809]  ? clear_bhb_loop+0x30/0x80
[  150.961978][ T6809]  ? clear_bhb_loop+0x30/0x80
[  150.966691][ T6809]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  150.972600][ T6809] RIP: 0033:0x7fbb1386d159
[  150.977032][ T6809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.996650][ T6809] RSP: 002b:00007fbb11ac5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  151.005080][ T6809] RAX: ffffffffffffffda RBX: 00007fbb13af4fa0 RCX: 00007fbb1386d159
[  151.013069][ T6809] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000000
[  151.021067][ T6809] RBP: 00007fbb1390406b R08: 0000000000000000 R09: 00000000fffffffd
[  151.029062][ T6809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.037056][ T6809] R13: 00007fbb13af5038 R14: 00007fbb13af4fa0 R15: 00007ffd13a3da58
[  151.045058][ T6809]  </TASK>
[  151.272736][ T6830] loop5: detected capacity change from 0 to 512
[  151.329555][ T6830] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  151.392339][ T6834] device-mapper: ioctl: Invalid geometry supplied.
[  151.493434][ T6830] EXT4-fs (loop5): 1 truncate cleaned up
[  151.559300][ T6830] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,init_itable,user_xattr,errors=remount-ro,nombcache,. Quota mode: none.
[  151.587802][ T6842] syz.1.738 sent an empty control message without MSG_MORE.
[  152.036551][ T6863] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  152.247375][    T7] usb 1-1: USB disconnect, device number 2
[  152.497099][ T6886] loop0: detected capacity change from 0 to 512
[  152.508632][ T6885] netlink: 'syz.5.753': attribute type 49 has an invalid length.
[  152.862301][ T6901] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8
[  153.244157][ T6925] smc: net device vlan1 applied user defined pnetid SYZ2
[  153.281989][    T7] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  153.295109][ T6931] smc: net device vlan1 erased user defined pnetid SYZ2
[  153.353602][ T6933] sctp: [Deprecated]: syz.2.770 (pid 6933) Use of int in max_burst socket option.
[  153.353602][ T6933] Use struct sctp_assoc_value instead
[  153.459066][ T6940] tmpfs: Unknown parameter 'no'
[  153.708045][    T7] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  153.729128][    T7] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  153.788307][    T7] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  153.818862][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.865264][ T6952] loop0: detected capacity change from 0 to 1024
[  153.950928][ T6952] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  153.972562][ T6952] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.025617][   T26] audit: type=1800 audit(1790060206.494:48): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.775" name="file1" dev="loop0" ino=15 res=0 errno=0
[  154.122315][    T7] usb 6-1: GET_CAPABILITIES returned 0
[  154.128750][    T7] usbtmc 6-1:16.0: can't read capabilities
[  154.404780][ T5601] usb 6-1: USB disconnect, device number 4
[  154.447800][ T6928] loop7: detected capacity change from 0 to 32768
[  154.609380][ T6928] XFS (loop7): Mounting V5 Filesystem
[  154.701325][ T6928] XFS (loop7): Ending clean mount
[  154.852246][   T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  154.870254][ T6465] XFS (loop7): Unmounting Filesystem
[  155.021816][ T6988] loop5: detected capacity change from 0 to 512
[  155.097800][   T21] usb 3-1: Using ep0 maxpacket: 8
[  155.106523][ T6988] EXT4-fs (loop5): Ignoring removed orlov option
[  155.177378][ T6988] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,init_itable,sysvgroups,orlov,,errors=continue. Quota mode: writeback.
[  155.232127][   T21] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.268242][   T21] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  155.292025][ T6988] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.369828][   T21] usb 3-1: config 0 interface 0 has no altsetting 0
[  155.402067][   T21] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  155.411183][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.572596][   T21] usb 3-1: config 0 descriptor??
[  155.839358][ T7007] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  156.054738][   T21] apple 0003:05AC:0244.0006: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling
[  156.091991][   T21] apple 0003:05AC:0244.0006: No inputs registered, leaving
[  156.105278][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'.
[  156.152985][   T21] apple 0003:05AC:0244.0006: hidraw0: USB HID v0.00 Device [HID 05ac:0244] on usb-dummy_hcd.2-1/input0
[  156.307722][ T4226] usb 3-1: USB disconnect, device number 2
[  156.452318][ T7024] fido_id[7024]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  156.553928][ T7036] netlink: 'syz.7.795': attribute type 11 has an invalid length.
[  156.880094][ T7039] loop0: detected capacity change from 0 to 8192
[  156.888065][ T7001] loop5: detected capacity change from 0 to 40427
[  156.933012][ T7039] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  156.946407][ T7039] REISERFS (device loop0): using ordered data mode
[  156.962270][ T7039] reiserfs: using flush barriers
[  156.969893][ T7039] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  157.002370][ T7039] REISERFS (device loop0): checking transaction log (loop0)
[  157.025193][ T7001] F2FS-fs (loop5): invalid crc value
[  157.102587][ T7001] F2FS-fs (loop5): Found nat_bits in checkpoint
[  157.199205][ T7060] loop7: detected capacity change from 0 to 1024
[  157.260840][ T4234] Bluetooth: hci5: Frame reassembly failed (-84)
[  157.338699][ T7001] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  157.458604][ T7039] REISERFS (device loop0): Using tea hash to sort names
[  157.475627][ T7060] hfsplus: xattr searching failed
[  157.503111][ T7039] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  157.522083][ T7060] hfsplus: xattr searching failed
[  157.528255][ T7060] hfsplus: xattr searching failed
[  157.564721][ T7049] attempt to access beyond end of device
[  157.564721][ T7049] loop5: rw=2049, want=45104, limit=40427
[  157.592413][ T7039] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  157.825641][ T7075] loop7: detected capacity change from 0 to 1024
[  157.923728][ T7075] EXT4-fs (loop7): Ignoring removed bh option
[  157.972332][ T7075] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,dioread_lock,nodiscard,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,acl,,errors=continue. Quota mode: none.
[  158.036160][ T7075] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  158.449768][ T7083] loop0: detected capacity change from 0 to 4096
[  158.507471][ T7091] loop7: detected capacity change from 0 to 2048
[  158.529076][ T7083] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  158.580323][ T7091] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.138529][ T7119] loop7: detected capacity change from 0 to 512
[  159.210858][ T7119] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  159.244986][ T7119] EXT4-fs (loop7): mount failed
[  159.332359][ T4230] Bluetooth: hci5: command 0x1003 tx timeout
[  159.338558][  T146] Bluetooth: hci5: sending frame failed (-49)
[  159.542002][    T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  159.594813][ T7140] loop0: detected capacity change from 0 to 1024
[  159.632373][ T7140] EXT4-fs (loop0): Ignoring removed orlov option
[  159.686499][ T7140] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  159.782902][ T7119] loop7: detected capacity change from 0 to 32768
[  159.810194][ T7119] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.815 (7119)
[  159.838371][ T7119] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  159.842482][    T7] usb 6-1: Using ep0 maxpacket: 32
[  159.878577][ T7119] BTRFS info (device loop7): force clearing of disk cache
[  159.887225][ T7119] BTRFS info (device loop7): metadata ratio 0
[  159.911612][ T7119] BTRFS info (device loop7): enabling disk space caching
[  159.924568][ T7119] BTRFS info (device loop7): disk space caching is enabled
[  159.947950][ T7119] BTRFS info (device loop7): has skinny extents
[  160.012325][    T7] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  160.200995][ T7119] BTRFS info (device loop7): enabling ssd optimizations
[  160.222702][ T7119] BTRFS info (device loop7): clearing free space tree
[  160.229576][ T7119] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  160.240018][    T7] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  160.259918][    T7] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  160.280927][    T7] usb 6-1: Product: syz
[  160.291069][ T7119] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  160.311715][    T7] usb 6-1: Manufacturer: syz
[  160.316694][    T7] usb 6-1: SerialNumber: syz
[  160.382886][    T7] usb 6-1: config 0 descriptor??
[  160.403765][ T7126] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  160.422717][    T7] hub 6-1:0.0: bad descriptor, ignoring hub
[  160.428790][    T7] hub: probe of 6-1:0.0 failed with error -5
[  160.482203][ T7119] BTRFS error (device loop7): balance: invalid convert data profile raid10
[  160.546384][ T7180] loop0: detected capacity change from 0 to 1024
[  160.632047][ T7180] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  160.639445][ T7180] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  160.698216][ T7180] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  160.731151][ T7180] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  160.807104][ T7180] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback.
[  161.412894][ T7200] Bluetooth: hci5: command 0x1001 tx timeout
[  161.419392][  T146] Bluetooth: hci5: sending frame failed (-49)
[  161.504099][ T7221] loop7: detected capacity change from 0 to 1024
[  161.534878][ T7221] EXT4-fs (loop7): Ignoring removed orlov option
[  161.603260][ T7221] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  161.980886][ T7237] loop1: detected capacity change from 0 to 8192
[  162.046865][ T7237] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  162.421241][ T7259] loop7: detected capacity change from 0 to 1024
[  162.432477][ T5601] usb 6-1: USB disconnect, device number 5
[  162.487641][ T7259] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[  162.532023][ T7259] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[  162.541494][ T7259] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[  162.616658][ T7259] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  162.657195][ T7268] loop0: detected capacity change from 0 to 512
[  162.680642][ T7259] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,errors=continue,,errors=continue. Quota mode: writeback.
[  162.810294][ T7268] EXT4-fs error (device loop0): ext4_fill_super:4872: inode #2: comm syz.0.841: casefold flag without casefold feature
[  162.829037][ T7255] loop1: detected capacity change from 0 to 32768
[  162.841564][ T7255] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.836 (7255)
[  162.855418][ T7268] EXT4-fs (loop0): get root inode failed
[  162.861112][ T7268] EXT4-fs (loop0): mount failed
[  163.000729][ T7255] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  163.011416][ T7255] BTRFS info (device loop1): force clearing of disk cache
[  163.080565][ T7255] BTRFS info (device loop1): metadata ratio 0
[  163.103949][ T7255] BTRFS info (device loop1): enabling disk space caching
[  163.121964][ T7255] BTRFS info (device loop1): disk space caching is enabled
[  163.148591][ T7255] BTRFS info (device loop1): has skinny extents
[  163.341488][ T7299] loop0: detected capacity change from 0 to 256
[  163.386057][ T7255] BTRFS info (device loop1): enabling ssd optimizations
[  163.396245][ T7255] BTRFS info (device loop1): clearing free space tree
[  163.406711][ T7255] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  163.414714][ T7299] exfat: Deprecated parameter 'utf8'
[  163.426481][ T7255] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  163.445175][ T7299] exfat: Deprecated parameter 'namecase'
[  163.450875][ T7299] exfat: Deprecated parameter 'namecase'
[  163.500662][ T7200] Bluetooth: hci5: command 0x1009 tx timeout
[  163.571730][ T7299] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  163.670551][ T7255] BTRFS error (device loop1): balance: invalid convert data profile raid10
[  164.017714][ T7322] input: syz1 as /devices/virtual/input/input10
[  164.045432][ T7322] input: failed to attach handler leds to device input10, error: -6
[  164.468665][ T7340] loop5: detected capacity change from 0 to 512
[  164.570493][ T7319] loop0: detected capacity change from 0 to 32768
[  164.594721][ T7340] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  164.615521][ T7340] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.671225][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.7.859'.
[  164.680345][ T7351] netlink: 'syz.7.859': attribute type 26 has an invalid length.
[  164.698017][ T7319] XFS (loop0): Mounting V5 Filesystem
[  164.730493][   T26] audit: type=1800 audit(1790060217.194:49): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.856" name="file1" dev="loop5" ino=15 res=0 errno=0
[  164.844622][ T7319] XFS (loop0): Ending clean mount
[  164.905912][ T7319] XFS (loop0): Quotacheck needed: Please wait.
[  165.046350][ T7360] loop5: detected capacity change from 0 to 512
[  165.060418][ T7319] XFS (loop0): Quotacheck: Done.
[  165.096501][ T7360] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  165.140210][ T4186] XFS (loop0): Unmounting Filesystem
[  165.165786][ T7360] EXT4-fs (loop5): mount failed
[  165.400308][ T7358] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  165.588949][ T7367] tipc: Started in network mode
[  165.595966][ T7367] tipc: Node identity ac14142f, cluster identity 4711
[  165.603811][ T7367] tipc: New replicast peer: 172.20.20.170
[  165.610924][ T7367] tipc: Enabled bearer <udp:syz2>, priority 10
[  165.621149][ T7367] tipc: New replicast peer: 0.0.0.0
[  165.753621][ T7358] syz.7.860 (7358) used greatest stack depth: 20416 bytes left
[  165.798807][ T6465] ocfs2: Unmounting device (7,7) on (node local)
[  165.981182][ T7360] set_capacity_and_notify: 1 callbacks suppressed
[  165.981199][ T7360] loop5: detected capacity change from 0 to 32768
[  166.019744][ T7360] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.862 (7360)
[  166.060613][ T7360] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  166.070507][  T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  166.081024][  T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0
[  166.082315][ T7360] BTRFS info (device loop5): force clearing of disk cache
[  166.088524][  T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  166.088582][  T146] Workqueue: hci1 hci_rx_work
[  166.110501][  T146] Call Trace:
[  166.113804][  T146]  <TASK>
[  166.116767][  T146]  dump_stack_lvl+0x188/0x250
[  166.121481][  T146]  ? show_regs_print_info+0x20/0x20
[  166.126724][  T146]  ? load_image+0x410/0x410
[  166.131276][  T146]  sysfs_create_dir_ns+0x26a/0x290
[  166.136429][  T146]  ? sysfs_warn_dup+0xa0/0xa0
[  166.136443][ T7360] BTRFS info (device loop5): metadata ratio 0
[  166.141157][  T146]  ? kthread+0x42e/0x520
[  166.141184][  T146]  ? do_raw_spin_unlock+0x11d/0x230
[  166.141213][  T146]  kobject_add_internal+0x5ba/0xcd0
[  166.162052][  T146]  kobject_add+0x160/0x230
[  166.166511][  T146]  ? kobject_init+0x1c0/0x1c0
[  166.171235][  T146]  ? __raw_spin_lock_init+0x41/0x100
[  166.176553][  T146]  ? klist_children_get+0x50/0x50
[  166.181620][  T146]  ? get_device_parent+0x121/0x3e0
[  166.186778][  T146]  device_add+0x470/0x1050
[  166.191236][  T146]  ? device_initialize+0x2a5/0x4d0
[  166.196414][  T146]  hci_conn_add_sysfs+0xd1/0x1e0
[  166.201472][  T146]  le_conn_complete_evt+0xc55/0x14d0
[  166.206808][  T146]  ? cs_le_create_conn+0x5e0/0x5e0
[  166.211975][  T146]  ? __mutex_trylock_common+0x15c/0x260
[  166.217581][  T146]  hci_le_meta_evt+0x285/0x3ca0
[  166.222474][  T146]  ? hci_event_packet+0x363/0x1310
[  166.227668][ T7360] BTRFS info (device loop5): enabling disk space caching
[  166.227756][  T146]  ? __lock_acquire+0x7b50/0x7b50
[  166.239831][  T146]  ? hci_remote_host_features_evt+0x240/0x240
[  166.245943][  T146]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  166.251612][  T146]  ? mark_lock+0x94/0x320
[  166.256062][  T146]  ? mutex_unlock+0x10/0x10
[  166.260603][  T146]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  166.266619][  T146]  ? lock_chain_count+0x20/0x20
[  166.271533][  T146]  ? __rwlock_init+0x140/0x140
[  166.276339][  T146]  hci_event_packet+0xe0b/0x1310
[  166.278196][ T7360] BTRFS info (device loop5): disk space caching is enabled
[  166.281307][  T146]  ? _raw_spin_unlock+0x40/0x40
[  166.281336][  T146]  ? rcu_lock_release+0x20/0x20
[  166.298292][  T146]  ? hci_send_to_monitor+0x9c/0x4a0
[  166.303527][  T146]  hci_rx_work+0x255/0xa10
[  166.307989][  T146]  process_one_work+0x867/0xff0
[  166.312894][  T146]  ? worker_detach_from_pool+0x240/0x240
[  166.318570][  T146]  ? lockdep_hardirqs_off+0x70/0x100
[  166.323900][  T146]  ? _raw_spin_lock_irq+0xb7/0xf0
[  166.325693][ T7360] BTRFS info (device loop5): has skinny extents
[  166.328963][  T146]  ? _raw_spin_lock_irqsave+0x100/0x100
[  166.328993][  T146]  ? wq_worker_running+0x97/0x170
[  166.345836][  T146]  worker_thread+0xad7/0x12a0
[  166.350586][  T146]  kthread+0x42e/0x520
[  166.354729][  T146]  ? rcu_lock_release+0x20/0x20
[  166.359629][  T146]  ? kthread_blkcg+0xd0/0xd0
[  166.364248][  T146]  ret_from_fork+0x1f/0x30
[  166.368719][  T146]  </TASK>
[  166.377568][  T146] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  166.390900][  T146] Bluetooth: hci1: failed to register connection device
[  166.557622][ T7396] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  166.599434][ T7360] BTRFS info (device loop5): enabling ssd optimizations
[  166.618555][ T7360] BTRFS info (device loop5): clearing free space tree
[  166.628640][ T4226] tipc: Node number set to 2886997039
[  166.635609][ T7360] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  166.652321][ T7360] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  166.769252][ T7360] BTRFS error (device loop5): balance: invalid convert data profile raid10
[  167.149327][ T7416] loop0: detected capacity change from 0 to 1024
[  167.429192][ T7427] loop5: detected capacity change from 0 to 1024
[  167.479151][ T7427] EXT4-fs (loop5): Ignoring removed bh option
[  167.545732][ T7427] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  167.747522][ T7440] loop0: detected capacity change from 0 to 2048
[  167.790646][ T7440] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.934690][ T7447] netlink: 148 bytes leftover after parsing attributes in process `syz.7.895'.
[  167.994218][ T7447] netlink: 40 bytes leftover after parsing attributes in process `syz.7.895'.
[  168.038555][ T7451] loop2: detected capacity change from 0 to 512
[  168.107055][ T7451] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  168.163822][ T7451] EXT4-fs (loop2): mount failed
[  168.986150][ T7451] loop2: detected capacity change from 0 to 32768
[  169.033327][ T7451] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.884 (7451)
[  169.075686][ T7451] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  169.094801][ T7451] BTRFS info (device loop2): force clearing of disk cache
[  169.120069][ T7460] loop0: detected capacity change from 0 to 32768
[  169.124797][ T7451] BTRFS info (device loop2): metadata ratio 0
[  169.161766][ T7451] BTRFS info (device loop2): enabling disk space caching
[  169.193418][ T7451] BTRFS info (device loop2): disk space caching is enabled
[  169.212754][ T7460] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.888 (7460)
[  169.225437][ T7451] BTRFS info (device loop2): has skinny extents
[  169.242343][ T7469] loop5: detected capacity change from 0 to 32768
[  169.280923][ T7460] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  169.315934][ T7460] BTRFS info (device loop0): using free space tree
[  169.362052][ T7460] BTRFS info (device loop0): has skinny extents
[  169.413090][ T7469] 
[  169.413090][ T7469]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.413090][ T7469] 
[  169.506391][ T7469] ERROR: (device loop5): diWrite: ixpxd invalid
[  169.506391][ T7469] 
[  169.534734][ T7469] ERROR: (device loop5): txCommit: 
[  169.534734][ T7469] 
[  169.585262][ T7460] BTRFS info (device loop0): enabling ssd optimizations
[  169.612323][ T7525] jfs_create: dtSearch returned -17
[  169.672375][ T7451] BTRFS info (device loop2): enabling ssd optimizations
[  169.722682][ T7451] BTRFS info (device loop2): clearing free space tree
[  169.733586][ T4639] 
[  169.733586][ T4639]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.733586][ T4639] 
[  169.753737][ T7451] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  169.784410][ T4639] 
[  169.784410][ T4639]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  169.784410][ T4639] 
[  169.814135][ T7451] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  169.974615][ T7451] BTRFS error (device loop2): balance: invalid convert data profile raid10
[  170.424977][ T7548] 
[  170.427370][ T7548] ======================================================
[  170.434406][ T7548] WARNING: possible circular locking dependency detected
[  170.441456][ T7548] syzkaller #0 Not tainted
[  170.445888][ T7548] ------------------------------------------------------
[  170.452924][ T7548] syz.5.897/7548 is trying to acquire lock:
[  170.458830][ T7548] ffffffff8cf514a8 (serio_mutex){+.+.}-{3:3}, at: drvctl_store+0x2a/0xae0
[  170.467394][ T7548] 
[  170.467394][ T7548] but task is already holding lock:
[  170.474777][ T7548] ffff8880257582c0 (kn->active#434){++++}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500
[  170.482198][ T1108] Bluetooth: hci5: command 0x1003 tx timeout
[  170.484485][ T7548] 
[  170.484485][ T7548] which lock already depends on the new lock.
[  170.484485][ T7548] 
[  170.484494][ T7548] 
[  170.484494][ T7548] the existing dependency chain (in reverse order) is:
[  170.490753][ T4187] Bluetooth: hci5: sending frame failed (-49)
[  170.500887][ T7548] 
[  170.500887][ T7548] -> #1 (kn->active#434){++++}-{0:0}:
[  170.500926][ T7548]        __kernfs_remove+0x5da/0xcb0
[  170.500952][ T7548]        kernfs_remove_by_name_ns+0x91/0x100
[  170.500974][ T7548]        sysfs_remove_group+0xfd/0x290
[  170.500991][ T7548]        sysfs_remove_groups+0x50/0xa0
[  170.501040][ T7548]        device_remove_attrs+0xc2/0x140
[  170.501059][ T7548]        device_del+0x637/0xa80
[  170.501076][ T7548]        serio_destroy_port+0x34a/0x470
[  170.501095][ T7548]        serio_unregister_port+0x12c/0x150
[  170.501113][ T7548]        serport_ldisc_read+0x4ec/0x5b0
[  170.501132][ T7548]        tty_read+0x2af/0x5c0
[  170.501154][ T7548]        do_iter_readv_writev+0x47d/0x5f0
[  170.501175][ T7548]        do_iter_read+0x201/0x7c0
[  170.501193][ T7548]        do_readv+0x266/0x460
[  170.501210][ T7548]        do_syscall_64+0x4c/0xa0
[  170.501229][ T7548]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  170.501251][ T7548] 
[  170.501251][ T7548] -> #0 (serio_mutex){+.+.}-{3:3}:
[  170.501280][ T7548]        __lock_acquire+0x2c66/0x7b50
[  170.501300][ T7548]        lock_acquire+0x19e/0x400
[  170.501320][ T7548]        __mutex_lock_common+0x1e5/0x2400
[  170.501338][ T7548]        mutex_lock_interruptible_nested+0x17/0x20
[  170.501356][ T7548]        drvctl_store+0x2a/0xae0
[  170.639820][ T7548]        kernfs_fop_write_iter+0x3a8/0x500
[  170.645645][ T7548]        vfs_write+0x748/0xd70
[  170.650409][ T7548]        ksys_write+0x153/0x260
[  170.655251][ T7548]        do_syscall_64+0x4c/0xa0
[  170.660185][ T7548]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  170.666597][ T7548] 
[  170.666597][ T7548] other info that might help us debug this:
[  170.666597][ T7548] 
[  170.676817][ T7548]  Possible unsafe locking scenario:
[  170.676817][ T7548] 
[  170.684290][ T7548]        CPU0                    CPU1
[  170.689672][ T7548]        ----                    ----
[  170.695054][ T7548]   lock(kn->active#434);
[  170.699389][ T7548]                                lock(serio_mutex);
[  170.706131][ T7548]                                lock(kn->active#434);
[  170.713028][ T7548]   lock(serio_mutex);
[  170.717114][ T7548] 
[  170.717114][ T7548]  *** DEADLOCK ***
[  170.717114][ T7548] 
[  170.725423][ T7548] 4 locks held by syz.5.897/7548:
[  170.730443][ T7548]  #0: ffff88802bf739f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370
[  170.739674][ T7548]  #1: ffff88807e4d4460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x296/0xd70
[  170.748564][ T7548]  #2: ffff88805f691088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x500
[  170.758324][ T7548]  #3: ffff8880257582c0 (kn->active#434){++++}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500
[  170.768438][ T7548] 
[  170.768438][ T7548] stack backtrace:
[  170.774336][ T7548] CPU: 1 PID: 7548 Comm: syz.5.897 Not tainted syzkaller #0
[  170.781627][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  170.791679][ T7548] Call Trace:
[  170.794957][ T7548]  <TASK>
[  170.797897][ T7548]  dump_stack_lvl+0x188/0x250
[  170.802576][ T7548]  ? load_image+0x410/0x410
[  170.807090][ T7548]  ? show_regs_print_info+0x20/0x20
[  170.812309][ T7548]  ? print_circular_bug+0x12b/0x1a0
[  170.817512][ T7548]  check_noncircular+0x296/0x330
[  170.822452][ T7548]  ? add_chain_block+0x9b0/0x9b0
[  170.827392][ T7548]  ? lockdep_lock+0xf1/0x1f0
[  170.832103][ T7548]  ? mark_lock+0x94/0x320
[  170.836451][ T7548]  ? _find_first_zero_bit+0xd1/0xf0
[  170.841668][ T7548]  __lock_acquire+0x2c66/0x7b50
[  170.846538][ T7548]  ? verify_lock_unused+0x140/0x140
[  170.851737][ T7548]  ? mark_lock+0x94/0x320
[  170.856081][ T7548]  ? mark_lock+0x94/0x320
[  170.860421][ T7548]  lock_acquire+0x19e/0x400
[  170.864925][ T7548]  ? drvctl_store+0x2a/0xae0
[  170.869532][ T7548]  ? __might_sleep+0xf0/0xf0
[  170.874134][ T7548]  ? read_lock_is_recursive+0x10/0x10
[  170.879509][ T7548]  ? verify_lock_unused+0x140/0x140
[  170.884712][ T7548]  __mutex_lock_common+0x1e5/0x2400
[  170.889924][ T7548]  ? drvctl_store+0x2a/0xae0
[  170.894534][ T7548]  ? kernfs_fop_write_iter+0x14f/0x500
[  170.900008][ T7548]  ? drvctl_store+0x2a/0xae0
[  170.904601][ T7548]  ? mutex_lock_io_nested+0x60/0x60
[  170.909801][ T7548]  ? read_lock_is_recursive+0x10/0x10
[  170.915179][ T7548]  ? sysfs_kf_read+0x350/0x350
[  170.919976][ T7548]  mutex_lock_interruptible_nested+0x17/0x20
[  170.925958][ T7548]  drvctl_store+0x2a/0xae0
[  170.930385][ T7548]  ? sysfs_kf_write+0x183/0x2a0
[  170.935470][ T7548]  ? sysfs_kf_read+0x350/0x350
[  170.940244][ T7548]  kernfs_fop_write_iter+0x3a8/0x500
[  170.945540][ T7548]  vfs_write+0x748/0xd70
[  170.949784][ T7548]  ? file_end_write+0x250/0x250
[  170.954641][ T7548]  ? mutex_lock_nested+0x17/0x20
[  170.959759][ T7548]  ? __fdget_pos+0x2bf/0x370
[  170.964358][ T7548]  ? ksys_write+0x70/0x260
[  170.968784][ T7548]  ksys_write+0x153/0x260
[  170.973220][ T7548]  ? __ia32_sys_read+0x80/0x80
[  170.977985][ T7548]  ? lockdep_hardirqs_on+0x94/0x140
[  170.983189][ T7548]  do_syscall_64+0x4c/0xa0
[  170.987626][ T7548]  ? clear_bhb_loop+0x30/0x80
[  170.992315][ T7548]  ? clear_bhb_loop+0x30/0x80
[  170.996995][ T7548]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  171.002890][ T7548] RIP: 0033:0x7f38dd088159
[  171.007324][ T7548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.026945][ T7548] RSP: 002b:00007f38db2e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  171.035366][ T7548] RAX: ffffffffffffffda RBX: 00007f38dd30ffa0 RCX: 00007f38dd088159
[  171.043372][ T7548] RDX: 0000000000000005 RSI: 0000200000000200 RDI: 0000000000000003
[  171.051340][ T7548] RBP: 00007f38dd11f06b R08: 0000000000000000 R09: 0000000000000000
[  171.059308][ T7548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.067276][ T7548] R13: 00007f38dd310038 R14: 00007f38dd30ffa0 R15: 00007ffd259c8ce8
[  171.075270][ T7548]  </TASK>
[  171.245016][ T7555] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  171.383247][ T7548] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11
[  172.541928][ T4226] Bluetooth: hci1: command 0x0406 tx timeout
[  172.548113][ T4226] Bluetooth: hci5: command 0x1001 tx timeout
[  172.555082][  T146] Bluetooth: hci5: sending frame failed (-49)
[  174.613010][ T4226] Bluetooth: hci5: command 0x1009 tx timeout