last executing test programs:

2m24.611123693s ago: executing program 3 (id=457):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
io_setup(0x9, &(0x7f0000000340)=<r0=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="186a000013000000000000000310"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$xdp(0x2c, 0x3, 0x0)
io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0}])

2m24.061234787s ago: executing program 3 (id=461):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4002, 0x58)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

2m22.939339826s ago: executing program 3 (id=469):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
fcntl$setlease(r0, 0x400, 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x148)
creat(&(0x7f0000000080)='./file0\x00', 0x110)
fcntl$setlease(r0, 0x400, 0x2)

2m21.835461435s ago: executing program 3 (id=472):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000100)={0x5, 0x8, 0x100000}, 0x20)

2m21.009516791s ago: executing program 3 (id=476):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc)

2m20.189336378s ago: executing program 3 (id=480):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000040)=ANY=[], 0x1, 0x2e0, &(0x7f0000000640)="$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")
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x208004, &(0x7f00000003c0)=ANY=[], 0x1, 0x277, &(0x7f0000000000)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)

2m19.664307502s ago: executing program 32 (id=480):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000040)=ANY=[], 0x1, 0x2e0, &(0x7f0000000640)="$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")
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x208004, &(0x7f00000003c0)=ANY=[], 0x1, 0x277, &(0x7f0000000000)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0xb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)

2m5.94932106s ago: executing program 1 (id=550):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='o', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}, 0xd}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000002c0)='\b', 0x1}], 0x1}}], 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x4, 0x5}, 0x90)

2m5.623117593s ago: executing program 1 (id=551):
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

2m5.348743645s ago: executing program 1 (id=554):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m4.989208778s ago: executing program 1 (id=557):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000002880)={[{@user_xattr}, {@nombcache}, {@journal_dev}, {@usrjquota}, {@nodiscard}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@jqfmt_vfsold}, {@grpjquota}]}, 0xfe, 0x564, &(0x7f0000002240)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./bus\x00', 0xc0000202)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m4.405879503s ago: executing program 1 (id=561):
getpid()
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x8020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x24000, 0x0)

2m2.365901449s ago: executing program 1 (id=574):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

2m1.743495444s ago: executing program 33 (id=574):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

1m45.976378059s ago: executing program 5 (id=576):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x9}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000480)=ANY=[], 0x8)
sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0)

1m45.311733215s ago: executing program 5 (id=641):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000002880)={[{@user_xattr}, {@nombcache}, {@journal_dev}, {@usrjquota}, {@nodiscard}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@jqfmt_vfsold}, {@grpjquota}]}, 0xfe, 0x564, &(0x7f0000002240)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./bus\x00', 0xc0000202)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m44.64205114s ago: executing program 5 (id=643):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000580), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x56, &(0x7f0000000300)={0x40, 0x30, 0xfffffeb5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000900)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0})

1m42.526354207s ago: executing program 5 (id=653):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/82, 0x52}], 0x1}, 0x81}], 0x61, 0x2100, 0x0)
recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x7d4105cf, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000040)

1m41.953284161s ago: executing program 34 (id=653):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/82, 0x52}], 0x1}, 0x81}], 0x61, 0x2100, 0x0)
recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x7d4105cf, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000040)

26.529544061s ago: executing program 4 (id=1028):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}})
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x4ef, 0xfffffe01, 0x7fff, 0xb2, "fe67a00000ff0000000900", 0x6, 0x10})
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))

26.095591803s ago: executing program 4 (id=1031):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000007c0)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "8706"}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000)

25.831847575s ago: executing program 4 (id=1036):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
r0 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0)

25.161855019s ago: executing program 4 (id=1039):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

25.158273249s ago: executing program 6 (id=1040):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0)

24.972792071s ago: executing program 4 (id=1042):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000740)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000001c0)={0x4, 0x2, 0x8001, 0x1, "a09fc910bb060bdc0d40cfcd10bf99f7a0f281ca7cbeb8216bef5c543cf861aa"})

24.486657075s ago: executing program 4 (id=1044):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x400000005})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000b33000/0x13000)=nil, 0x13000, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1})

23.89749352s ago: executing program 35 (id=1044):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x400000005})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000b33000/0x13000)=nil, 0x13000, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1})

23.227393415s ago: executing program 6 (id=1049):
munmap(&(0x7f0000003000/0x1000)=nil, 0x1000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x2000c802, &(0x7f0000000180)={0x2, 0x4e1e, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)

23.006533577s ago: executing program 6 (id=1050):
mkdir(&(0x7f0000000380)='./file1\x00', 0xa)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400))
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020)

22.786882218s ago: executing program 6 (id=1051):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000a80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6c733d63703835322c6e6f626172726965722c63726561746f723dbd3c66f52c626172726965722c706172743d3078303030303030303030303030303030322c756d61736b3d30303030303030303030303030303030303030363734352c00b08558549e3fb3af8feff2a5c10c825cef8ec0f1ddcd940f6058a48f0cc0887456a5b70061a195d3ed592d"], 0x3, 0x6a4, &(0x7f0000000100)="$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")
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

22.500050991s ago: executing program 6 (id=1052):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0})

21.889407046s ago: executing program 6 (id=1054):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1ef, 0xfc, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x3c}, 0x1, 0x11}, 0x0)

21.445816949s ago: executing program 36 (id=1054):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x3c, 0x18, 0x1ef, 0xfc, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x3c}, 0x1, 0x11}, 0x0)

17.680639129s ago: executing program 0 (id=1069):
r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000000c0)=<r1=>0xffffffffffffffff)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r1, 0x0, 0x0})
ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0)

17.357390152s ago: executing program 0 (id=1070):
eventfd2(0x6, 0x80800)
r0 = semget$private(0x0, 0x6, 0x0)
semtimedop(r0, &(0x7f0000000380)=[{0x2, 0xf, 0x1000}], 0x1, 0x0)
semop(0x0, &(0x7f0000000300)=[{0x2, 0x0, 0x2000}], 0x1)
semctl$IPC_RMID(0x0, 0x0, 0x0)

17.152385573s ago: executing program 0 (id=1071):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

15.802041054s ago: executing program 0 (id=1073):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0)

15.545191086s ago: executing program 0 (id=1074):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x298, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x1fd, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

13.979970449s ago: executing program 0 (id=1076):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

13.405889473s ago: executing program 37 (id=1076):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

9.935681531s ago: executing program 2 (id=1089):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000)={r1, 0x6}, 0x8)

9.731291672s ago: executing program 2 (id=1090):
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000002c0)='./file1\x00', 0x818808, &(0x7f0000000700)=ANY=[], 0x1, 0x2f7, &(0x7f0000000840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x441, 0x104)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc)
write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x6, 'net_cls'}]}, 0x9)

9.462282865s ago: executing program 2 (id=1091):
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="11"], 0x50)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025000212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)

2.645547839s ago: executing program 7 (id=1047):
openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x28403, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x8900)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

2.644431959s ago: executing program 2 (id=1097):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00')

1.750228926s ago: executing program 8 (id=1055):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250b00000008000300", @ANYRES32=r3, @ANYBLOB="3c00508028000880040002000400020004000100041001000400020004000200040002000400010004000100080004000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000080)

1.749123666s ago: executing program 2 (id=1099):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1c)

1.617292497s ago: executing program 7 (id=1092):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @empty, 0xffffffff}, {0xa, 0x4e20, 0x101, @remote, 0x7}, r1, 0x6}}, 0x48)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f00000025c0)}}, 0x10)

1.349909299s ago: executing program 8 (id=1093):
bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x11, 0x4, 0x4, 0x8, 0x800, 0xffffffffffffffff, 0x3}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc)
close(r2)

1.322138959s ago: executing program 7 (id=1094):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000020000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000480140005"], 0x40}, 0x1, 0x0, 0x0, 0x404c890}, 0x14)

1.128257451s ago: executing program 8 (id=1095):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000840)={0x28, 0x2, r1, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000280)={0x28, 0x10000, r1, r1, 0xf6248, 0x8, 0x1, 0x54f76})

997.223682ms ago: executing program 2 (id=1096):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000440)={[{@nodelalloc}, {@dioread_lock}, {@bsdgroups}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xc}}, {@data_err_ignore}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x578, &(0x7f0000000500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
fallocate(r0, 0x20, 0x12a, 0x3000001)

938.478373ms ago: executing program 8 (id=1098):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'P'}]}], {0x14}}, 0x5c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

342.084967ms ago: executing program 38 (id=1096):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000440)={[{@nodelalloc}, {@dioread_lock}, {@bsdgroups}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xc}}, {@data_err_ignore}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x578, &(0x7f0000000500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
fallocate(r0, 0x20, 0x12a, 0x3000001)

335.297627ms ago: executing program 8 (id=1101):
r0 = fanotify_init(0x200, 0x0)
r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r2 = dup(r1)
fanotify_mark(r0, 0x1, 0x48001059, r2, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)

334.784357ms ago: executing program 7 (id=1102):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

144.631899ms ago: executing program 8 (id=1103):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000001000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008"], 0xa0}}, 0x40880)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b})

0s ago: executing program 7 (id=1104):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000001840)={0xa, 0x4e23, 0x3, @private0, 0x2}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)

kernel console output (not intermixed with test programs):

hed './file0' with NULL argv: empty string added
[  176.015416][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  176.030710][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  176.041594][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  176.061935][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  176.076276][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  176.080204][ T7852] loop0: detected capacity change from 0 to 256
[  176.092410][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.140704][ T7852] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  176.193085][ T7852] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  176.228377][ T7852] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  176.242255][ T7854] loop4: detected capacity change from 0 to 512
[  176.272197][ T7854] EXT4-fs: Ignoring removed nobh option
[  176.327718][ T7854] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  176.411206][ T7854] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.580: attempt to clear invalid blocks 1 len 1
[  176.457853][ T7854] EXT4-fs (loop4): Remounting filesystem read-only
[  176.466313][ T7854] EXT4-fs (loop4): 1 truncate cleaned up
[  176.499019][ T7854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.527695][ T7854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.668473][ T7854] overlay: ./file0 is not a directory
[  176.911818][ T7871] loop4: detected capacity change from 0 to 256
[  177.086318][ T7876] loop0: detected capacity change from 0 to 2048
[  177.185006][ T7876] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  177.235334][ T7876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  177.322721][    T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  177.357945][ T7882] loop4: detected capacity change from 0 to 128
[  177.504993][    T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  177.506607][ T7882] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  177.525444][    T8] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  177.546831][    T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  177.578721][    T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  177.590332][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  177.600674][    T8] usb 3-1: Product: syz
[  177.607870][    T8] usb 3-1: Manufacturer: syz
[  177.612523][    T8] usb 3-1: SerialNumber: syz
[  177.631018][ T7882] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  177.702497][ T7849] chnl_net:caif_netlink_parms(): no params data found
[  177.864328][    T8] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  177.947847][ T7468] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  178.024900][ T7894] syzkaller1: entered promiscuous mode
[  178.051789][ T7894] syzkaller1: entered allmulticast mode
[  178.066692][ T5564] usb 3-1: USB disconnect, device number 7
[  178.076132][ T5564] usblp0: removed
[  178.193044][ T5084] Bluetooth: hci1: command tx timeout
[  178.543854][ T7849] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.556866][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.576390][ T7849] bridge_slave_0: entered allmulticast mode
[  178.588059][ T7849] bridge_slave_0: entered promiscuous mode
[  178.702957][ T2990] hsr_slave_0: left promiscuous mode
[  178.731083][ T2990] hsr_slave_1: left promiscuous mode
[  178.762532][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.786453][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.823712][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.831224][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.901829][ T7920] raw_sendmsg: syz.2.593 forgot to set AF_INET. Fix it!
[  178.909948][ T2990] bridge_slave_1: left allmulticast mode
[  178.923993][ T2990] bridge_slave_1: left promiscuous mode
[  178.941324][ T2990] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.974676][ T2990] bridge_slave_0: left allmulticast mode
[  178.980412][ T2990] bridge_slave_0: left promiscuous mode
[  179.007577][ T2990] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.191579][ T7926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.596'.
[  179.217636][ T2990] veth1_macvtap: left promiscuous mode
[  179.224017][ T2990] veth0_macvtap: left promiscuous mode
[  179.228149][ T7928] loop4: detected capacity change from 0 to 128
[  179.229900][ T2990] veth1_vlan: left promiscuous mode
[  179.259799][ T2990] veth0_vlan: left promiscuous mode
[  179.282262][ T7928] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  179.389989][ T7928] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  180.272843][ T5084] Bluetooth: hci1: command tx timeout
[  180.344974][ T7932] loop4: detected capacity change from 0 to 32768
[  180.366572][ T7932] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.599 (7932)
[  180.427599][ T7932] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  180.442524][ T7932] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  180.452830][ T7932] BTRFS info (device loop4): using free space tree
[  180.637792][ T7932] BTRFS info (device loop4): enabling ssd optimizations
[  180.652691][ T7932] BTRFS info (device loop4): auto enabling async discard
[  180.837281][ T7468] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  181.088575][ T6728] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop4 scanned by udevd (6728)
[  181.850974][ T2990] team0 (unregistering): Port device team_slave_1 removed
[  181.973092][ T2990] team0 (unregistering): Port device team_slave_0 removed
[  182.031770][   T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  182.094590][ T2990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.195689][ T2990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.199502][ T7982] loop4: detected capacity change from 0 to 40427
[  182.225860][ T7982] F2FS-fs (loop4): invalid crc value
[  182.234236][ T7982] F2FS-fs (loop4): Found nat_bits in checkpoint
[  182.241864][   T23] usb 1-1: Using ep0 maxpacket: 16
[  182.260257][   T23] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.277288][   T23] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.307225][   T23] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  182.310600][ T7982] F2FS-fs (loop4): Start checkpoint disabled!
[  182.317606][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.346903][ T7982] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  182.354791][ T5084] Bluetooth: hci1: command tx timeout
[  182.772275][   T23] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  182.991470][   T23] usb 1-1: USB disconnect, device number 11
[  183.173296][ T2990] bond0 (unregistering): Released all slaves
[  183.347375][ T7849] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.354702][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.362067][ T7849] bridge_slave_1: entered allmulticast mode
[  183.375961][ T7987] loop4: detected capacity change from 0 to 32768
[  183.378124][ T7849] bridge_slave_1: entered promiscuous mode
[  183.436987][ T7987] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  183.478615][ T7849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.525731][ T7987] XFS (loop4): Ending clean mount
[  183.545970][ T7849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.748422][ T7849] team0: Port device team_slave_0 added
[  183.784369][ T7849] team0: Port device team_slave_1 added
[  183.918930][ T7849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.942731][ T7849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.980107][ T7468] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  183.989481][ T8003] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid'
[  183.989481][ T8003] 
[  184.042685][ T7849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.061151][ T8000] loop0: detected capacity change from 0 to 8192
[  184.089867][ T7849] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.121088][ T8000] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  184.137150][ T7849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.157954][ T8000] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  184.208983][ T8000] REISERFS (device loop0): using ordered data mode
[  184.216781][ T7849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.227851][ T8000] reiserfs: using flush barriers
[  184.251268][ T8000] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  184.307652][ T7849] hsr_slave_0: entered promiscuous mode
[  184.315534][ T7849] hsr_slave_1: entered promiscuous mode
[  184.318437][ T8000] REISERFS (device loop0): checking transaction log (loop0)
[  184.329486][ T7849] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.362688][ T7849] Cannot create hsr debugfs directory
[  184.432957][ T5084] Bluetooth: hci1: command tx timeout
[  184.452438][ T2990] IPVS: stop unused estimator thread 0...
[  184.569753][ T8000] REISERFS (device loop0): Using tea hash to sort names
[  184.598097][ T8000] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  184.692048][ T8000] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  184.943146][ T7849] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  184.966527][ T7849] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  185.014118][ T7849] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  185.040215][ T7849] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  185.443526][ T7849] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.475459][ T8009] loop2: detected capacity change from 0 to 32768
[  185.687312][ T7849] 8021q: adding VLAN 0 to HW filter on device team0
[  185.819543][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.828003][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.024851][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.032112][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.638274][ T8020] loop0: detected capacity change from 0 to 131072
[  186.708915][ T8020] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  187.056755][ T8020] XFS (loop0): Starting recovery (logdev: internal)
[  187.169914][ T8020] XFS (loop0): Ending recovery (logdev: internal)
[  187.267219][ T8060] loop4: detected capacity change from 0 to 512
[  187.299906][ T8064] loop2: detected capacity change from 0 to 512
[  187.324708][ T8064] EXT4-fs: Ignoring removed nobh option
[  187.342369][ T8060] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  187.351107][ T8064] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  187.384892][ T5773] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  187.416788][ T8060] EXT4-fs (loop4): orphan cleanup on readonly fs
[  187.455117][ T7849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.465093][ T8064] EXT4-fs (loop2): 1 truncate cleaned up
[  187.475726][ T8064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.487301][ T8060] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.625: Block bitmap for bg 0 marked uninitialized
[  187.638420][ T8060] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  187.746343][ T8060] EXT4-fs (loop4): 1 orphan inode deleted
[  187.784252][ T8060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  187.817400][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.022832][ T5810] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  188.055560][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.181508][ T8083] loop2: detected capacity change from 0 to 512
[  188.205387][ T8083] EXT4-fs (loop2): Test dummy encryption mode enabled
[  188.252934][ T5810] usb 1-1: Using ep0 maxpacket: 32
[  188.275069][ T5810] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  188.295048][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.304335][ T5810] usb 1-1: Product: syz
[  188.308553][ T5810] usb 1-1: Manufacturer: syz
[  188.315005][ T5810] usb 1-1: SerialNumber: syz
[  188.324195][ T5810] usb 1-1: config 0 descriptor??
[  188.402796][ T8083] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.2.635: corrupted xattr block 95: invalid header
[  188.472576][ T8083] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.635: bg 0: block 7: invalid block bitmap
[  188.556495][ T8083] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  188.564041][ T8091] loop4: detected capacity change from 0 to 128
[  188.591470][ T8083] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2971: inode #11: comm syz.2.635: corrupted xattr block 95: invalid header
[  188.645834][ T8083] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[  188.676730][ T8083] EXT4-fs (loop2): 1 orphan inode deleted
[  188.698323][ T8083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.756802][ T7849] veth0_vlan: entered promiscuous mode
[  188.794052][ T5810] airspy 1-1:0.0: Board ID: 00
[  188.807986][ T5810] airspy 1-1:0.0: Firmware version: 
[  188.824943][ T7849] veth1_vlan: entered promiscuous mode
[  188.941965][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.035848][ T7849] veth0_macvtap: entered promiscuous mode
[  189.080056][ T7849] veth1_macvtap: entered promiscuous mode
[  189.165902][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.194020][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.252716][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.266735][ T8096] loop2: detected capacity change from 0 to 512
[  189.286625][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.301889][ T8096] EXT4-fs: Ignoring removed nobh option
[  189.321332][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.363555][ T8096] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  189.374708][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.401730][ T5810] airspy 1-1:0.0: usb_control_msg() failed -71 request 12
[  189.419309][ T7849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.436865][ T5810] airspy 1-1:0.0: Registered as swradio24
[  189.455006][ T8096] EXT4-fs (loop2): 1 truncate cleaned up
[  189.455164][ T5810] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  189.464611][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.510934][ T5810] usb 1-1: USB disconnect, device number 12
[  189.564268][ T8096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.623010][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.663245][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.702826][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.752672][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.807296][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.850772][ T7849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.887209][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.925725][ T7849] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.987440][ T7849] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.025038][ T7849] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.052728][ T7849] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.144772][ T8109] loop2: detected capacity change from 0 to 128
[  190.278730][ T8109] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  190.279777][ T8113] binder: 8112:8113 ioctl c0306201 0 returned -14
[  190.304974][ T8113] binder: 8112:8113 ioctl 8004587d 0 returned -22
[  190.391432][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.432888][ T8109] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  190.483907][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.585082][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.612672][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.657014][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  190.964359][ T8128] loop4: detected capacity change from 0 to 256
[  191.070012][ T8128] FAT-fs (loop4): Directory bread(block 64) failed
[  191.086891][ T8128] FAT-fs (loop4): Directory bread(block 65) failed
[  191.109410][ T8128] FAT-fs (loop4): Directory bread(block 66) failed
[  191.129105][ T8128] FAT-fs (loop4): Directory bread(block 67) failed
[  191.150331][ T8128] FAT-fs (loop4): Directory bread(block 68) failed
[  191.172857][ T8128] FAT-fs (loop4): Directory bread(block 69) failed
[  191.179546][ T8128] FAT-fs (loop4): Directory bread(block 70) failed
[  191.202911][ T8128] FAT-fs (loop4): Directory bread(block 71) failed
[  191.216321][ T8128] FAT-fs (loop4): Directory bread(block 72) failed
[  191.235263][ T8128] FAT-fs (loop4): Directory bread(block 73) failed
[  191.630678][ T8141] loop5: detected capacity change from 0 to 1024
[  191.752340][ T8141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.767680][ T8137] loop4: detected capacity change from 0 to 4096
[  191.784404][ T8137] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  191.966843][ T8137] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  192.026606][ T8137] ntfs: (device loop4): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2.
[  192.045317][ T8137] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  192.107714][ T8137] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  192.127179][ T8137] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  192.147394][ T7849] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 38: comm syz-executor: path /1/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0
[  192.152443][ T7849] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0
[  192.205325][ T8137] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  192.220650][ T8137] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  192.260713][ T7849] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 38: comm syz-executor: path /1/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0
[  192.298150][ T8137] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  192.309649][ T8137] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  192.337107][ T7849] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0
[  192.424232][ T8137] ntfs: volume version 3.1.
[  192.431150][ T7849] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 38: comm syz-executor: path /1/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0
[  192.503897][ T7849] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0
[  192.565125][ T7849] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 38: comm syz-executor: path /1/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0
[  192.618027][ T7849] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0
[  192.701410][ T7849] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 38: comm syz-executor: path /1/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0
[  192.798611][ T7849] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0
[  193.164776][ T8136] loop2: detected capacity change from 0 to 40427
[  193.211236][ T8136] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  193.223312][ T8136] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  193.249373][ T8136] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff
[  193.271770][ T8136] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8
[  193.333238][ T8136] F2FS-fs (loop2): invalid crc value
[  193.359362][ T8136] F2FS-fs (loop2): Found nat_bits in checkpoint
[  193.530002][ T8136] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  193.549483][ T8136] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  193.616505][ T8136] syz.2.639: attempt to access beyond end of device
[  193.616505][ T8136] loop2: rw=2049, sector=53248, nr_sectors = 96 limit=40427
[  193.710887][ T8184] syz.2.639: attempt to access beyond end of device
[  193.710887][ T8184] loop2: rw=2049, sector=53344, nr_sectors = 128 limit=40427
[  193.817712][ T5779] syz-executor: attempt to access beyond end of device
[  193.817712][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  193.872951][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  194.144998][ T7849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.188222][ T8190] loop4: detected capacity change from 0 to 4096
[  194.426914][ T2980] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.627553][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  194.634184][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  194.881458][ T2980] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.182011][ T2980] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.386495][ T2980] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.411995][ T8201] loop0: detected capacity change from 0 to 4096
[  195.948456][ T8201] ntfs: volume version 3.1.
[  195.985357][ T8217] netlink: 'syz.4.657': attribute type 10 has an invalid length.
[  196.054271][ T8217] bond0: (slave bond_slave_0): Releasing backup interface
[  196.111471][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  196.123638][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  196.135654][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  196.146676][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  196.163794][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  196.173424][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  196.201091][ T8214] loop2: detected capacity change from 0 to 4096
[  196.679170][ T5774] Bluetooth: hci3: command 0x0406 tx timeout
[  196.679187][ T5781] Bluetooth: hci0: command 0x0406 tx timeout
[  196.722342][ T8224] loop4: detected capacity change from 0 to 1024
[  196.894102][ T8224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  196.994973][ T8224] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.097540][ T8224] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 3: comm syz.4.658: lblock 3 mapped to illegal pblock 3 (length 1)
[  197.148035][ T8224] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  197.176936][ T8224] EXT4-fs (loop4): This should not happen!! Data will be lost
[  197.176936][ T8224] 
[  197.193164][ T8240] EXT4-fs error (device loop4): ext4_ext_check_inode:530: inode #5: comm syz.4.658: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  197.370710][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  197.797394][ T8254] input: syz1 as /devices/virtual/input/input9
[  197.998489][ T8218] chnl_net:caif_netlink_parms(): no params data found
[  198.272860][ T5084] Bluetooth: hci1: command tx timeout
[  198.550363][ T8271] netlink: 'syz.0.668': attribute type 10 has an invalid length.
[  198.564405][ T8271] bond0: (slave bond_slave_0): Releasing backup interface
[  198.754647][ T8218] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.774223][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.781777][ T8218] bridge_slave_0: entered allmulticast mode
[  198.790023][ T8218] bridge_slave_0: entered promiscuous mode
[  198.800638][ T8218] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.808018][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.817057][ T8218] bridge_slave_1: entered allmulticast mode
[  198.825022][ T8218] bridge_slave_1: entered promiscuous mode
[  198.967082][ T8218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.015705][ T8218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.032060][ T2980] hsr_slave_0: left promiscuous mode
[  199.040751][ T2980] hsr_slave_1: left promiscuous mode
[  199.055949][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.068671][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.082430][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.096786][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.106628][ T2980] bridge_slave_1: left allmulticast mode
[  199.112331][ T2980] bridge_slave_1: left promiscuous mode
[  199.123473][ T2980] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.140053][ T2980] bridge_slave_0: left allmulticast mode
[  199.146218][ T2980] bridge_slave_0: left promiscuous mode
[  199.152075][ T2980] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.210816][ T2980] veth1_macvtap: left promiscuous mode
[  199.216848][ T2980] veth0_macvtap: left promiscuous mode
[  199.222563][ T2980] veth1_vlan: left promiscuous mode
[  199.240159][ T2980] veth0_vlan: left promiscuous mode
[  200.177334][ T2980] team0 (unregistering): Port device team_slave_1 removed
[  200.244314][ T2980] team0 (unregistering): Port device team_slave_0 removed
[  200.304913][ T2980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.353113][ T5084] Bluetooth: hci1: command tx timeout
[  200.374802][ T2980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.836935][ T2980] bond0 (unregistering): Released all slaves
[  201.029818][ T8218] team0: Port device team_slave_0 added
[  201.081980][ T8218] team0: Port device team_slave_1 added
[  201.182503][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.196605][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.232403][ T8218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.257103][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.271602][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.306134][ T8218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.410834][ T8218] hsr_slave_0: entered promiscuous mode
[  201.420804][ T8218] hsr_slave_1: entered promiscuous mode
[  201.432017][ T8218] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.441418][ T8218] Cannot create hsr debugfs directory
[  201.806335][ T8218] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  201.820384][ T8218] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  201.831381][ T8218] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  201.849746][ T8218] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  201.990912][ T8218] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.032410][ T8218] 8021q: adding VLAN 0 to HW filter on device team0
[  202.065713][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.073011][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.095652][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.102891][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.434367][ T5084] Bluetooth: hci1: command tx timeout
[  202.480246][ T8218] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.881463][ T8218] veth0_vlan: entered promiscuous mode
[  202.916479][ T8218] veth1_vlan: entered promiscuous mode
[  202.989008][ T8218] veth0_macvtap: entered promiscuous mode
[  203.001807][ T8218] veth1_macvtap: entered promiscuous mode
[  203.043387][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.054013][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.065624][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.077388][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.087458][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  203.098348][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.109809][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.122145][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.134189][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.144391][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.156918][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.167820][ T8218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.178584][ T8218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.190245][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.208120][ T8218] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.217417][ T8218] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.227923][ T8218] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.237573][ T8218] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.387639][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.414539][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.456866][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.475661][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.967142][   T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  204.180802][   T23] usb 7-1: config index 0 descriptor too short (expected 39, got 27)
[  204.190118][   T23] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  204.209653][   T23] usb 7-1: config 0 interface 0 has no altsetting 0
[  204.223502][   T23] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  204.239570][   T23] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  204.248408][   T23] usb 7-1: Product: syz
[  204.258189][   T23] usb 7-1: Manufacturer: syz
[  204.263780][   T23] usb 7-1: SerialNumber: syz
[  204.271879][   T23] usb 7-1: config 0 descriptor??
[  204.299571][   T23] hub 7-1:0.0: bad descriptor, ignoring hub
[  204.307171][   T23] hub: probe of 7-1:0.0 failed with error -5
[  204.317643][   T23] usb 7-1: selecting invalid altsetting 0
[  204.512898][ T5084] Bluetooth: hci1: command tx timeout
[  205.045435][ T8365] usb 7-1: reset high-speed USB device number 2 using dummy_hcd
[  205.490346][ T8365] usb 7-1: failed to restore interface 0 altsetting 251 (error=-71)
[  205.540744][   T23] usb 7-1: USB disconnect, device number 2
[  206.460953][ T8434] loop6: detected capacity change from 0 to 4096
[  206.472765][ T8436] loop4: detected capacity change from 0 to 4096
[  206.612453][ T8436] ntfs: volume version 3.1.
[  207.175028][ T8447] loop0: detected capacity change from 0 to 256
[  207.278523][ T8447] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  207.482783][   T28] kauditd_printk_skb: 68 callbacks suppressed
[  207.482801][   T28] audit: type=1326 audit(1779284121.198:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8455 comm="syz.2.675" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5718f9ce59 code=0x0
[  208.074407][ T8475] loop4: detected capacity change from 0 to 128
[  208.103625][ T8475] EXT4-fs: Ignoring removed i_version option
[  208.108072][ T8474] ALSA: mixer_oss: invalid OSS volume ' 1000000) max_states_per_insn 0'
[  208.141646][ T8475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0003]
[  208.176757][ T8475] System zones: 1-3, 19-19, 35-36
[  208.256238][ T8475] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  208.337526][ T8475] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  208.661510][ T7468] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  209.502468][ T8518] overlayfs: workdir and upperdir must reside under the same mount
[  210.518166][ T8512] loop2: detected capacity change from 0 to 131072
[  210.547302][ T8512] F2FS-fs (loop2): invalid crc value
[  210.591441][ T8512] F2FS-fs (loop2): Found nat_bits in checkpoint
[  210.670292][ T8512] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  210.897243][ T8516] loop0: detected capacity change from 0 to 32768
[  210.948468][ T8516] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  211.149747][ T6014] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  211.416468][ T8550] netlink: 'syz.0.707': attribute type 5 has an invalid length.
[  211.443915][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.707'.
[  212.160930][ T8566] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  212.567068][ T8572] loop0: detected capacity change from 0 to 8192
[  212.630865][ T8572] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  212.663024][    T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  212.687779][ T8572] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  212.701930][ T8572] REISERFS (device loop0): using ordered data mode
[  212.710036][ T8572] reiserfs: using flush barriers
[  212.750449][ T8572] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  212.795257][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'.
[  212.823501][ T8572] REISERFS (device loop0): checking transaction log (loop0)
[  212.847620][ T8585] gtp0: entered promiscuous mode
[  212.849708][ T8572] REISERFS (device loop0): Using r5 hash to sort names
[  212.869002][ T8572] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  212.877230][ T8585] gtp0: entered allmulticast mode
[  212.902797][    T8] usb 7-1: Using ep0 maxpacket: 32
[  212.915383][    T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  212.953041][    T8] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  212.992972][    T8] usb 7-1: config 0 interface 0 has no altsetting 0
[  212.998545][ T8572] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[  213.021835][    T8] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  213.045138][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.069389][ T8572] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[  213.078529][    T8] usb 7-1: Product: syz
[  213.094537][    T8] usb 7-1: Manufacturer: syz
[  213.131927][    T8] usb 7-1: SerialNumber: syz
[  213.138073][ T8572] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0)
[  213.145206][    T8] usb 7-1: config 0 descriptor??
[  213.197207][ T8590] REISERFS error (device loop0): vs-7000 search_by_entry_key: search_by_key returned item position == 0
[  213.229446][ T8590] REISERFS (device loop0): Remounting filesystem read-only
[  213.647572][ T8600] loop4: detected capacity change from 0 to 256
[  213.655727][    T8] gs_usb 7-1:0.0: Configuring for 1 interfaces
[  213.713190][ T8600] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  213.735827][ T8603] loop0: detected capacity change from 0 to 256
[  213.835010][ T8603] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  213.847580][   T28] audit: type=1800 audit(1779284127.558:16): pid=8600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.717" name="file2" dev="loop4" ino=1048646 res=0 errno=0
[  214.231781][ T8609] loop4: detected capacity change from 0 to 1024
[  214.270296][ T8609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  214.441505][  T786] usb 7-1: USB disconnect, device number 3
[  214.575304][    T8] IPVS: starting estimator thread 0...
[  214.662896][ T8616] IPVS: using max 17 ests per chain, 40800 per kthread
[  215.170714][ T8634] loop4: detected capacity change from 0 to 1024
[  215.203736][ T8634] EXT4-fs: Ignoring removed bh option
[  215.213391][  T786] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  215.256805][ T8634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.260115][ T8638] loop2: detected capacity change from 0 to 2048
[  215.358040][ T8638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.416124][ T8638] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.430640][  T786] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  215.439669][  T786] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  215.479779][  T786] usb 1-1: config 0 interface 0 has no altsetting 0
[  215.497084][  T786] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  215.507134][  T786] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  215.525805][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.544832][  T786] usb 1-1: Product: syz
[  215.549394][  T786] usb 1-1: Manufacturer: syz
[  215.556535][  T786] usb 1-1: SerialNumber: syz
[  215.574781][  T786] usb 1-1: config 0 descriptor??
[  215.587300][  T786] hub 1-1:0.0: bad descriptor, ignoring hub
[  215.593965][  T786] hub: probe of 1-1:0.0 failed with error -5
[  215.615363][  T786] usb 1-1: selecting invalid altsetting 0
[  215.741599][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.110587][ T8657] loop4: detected capacity change from 0 to 512
[  216.154453][ T8657] EXT4-fs: Ignoring removed orlov option
[  216.198425][ T8655] loop2: detected capacity change from 0 to 4096
[  216.239633][ T8655] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  216.306717][ T8657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.313051][ T8659] loop6: detected capacity change from 0 to 4096
[  216.369105][ T8657] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  216.395549][ T8655] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  216.434750][ T8627] usb 1-1: reset high-speed USB device number 13 using dummy_hcd
[  216.446217][ T8655] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[  216.544391][   T28] audit: type=1800 audit(1779284130.268:17): pid=8655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.740" name="file1" dev="loop2" ino=30 res=0 errno=0
[  216.779042][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.955052][ T8627] usb 1-1: failed to restore interface 0 altsetting 251 (error=-71)
[  217.023111][  T786] usb 1-1: USB disconnect, device number 13
[  217.117133][ T8672] loop2: detected capacity change from 0 to 1024
[  217.188745][ T8672] syz.2.734: attempt to access beyond end of device
[  217.188745][ T8672] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  217.235903][ T8680] syz.2.734: attempt to access beyond end of device
[  217.235903][ T8680] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  217.283147][ T8680] Buffer I/O error on dev loop2, logical block 2889, async page read
[  217.303890][   T28] audit: type=1800 audit(1779284131.018:18): pid=8680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.734" name="file1" dev="loop2" ino=20 res=0 errno=0
[  217.309151][ T8670] syz.2.734: attempt to access beyond end of device
[  217.309151][ T8670] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  217.342954][ T2179] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  217.545604][ T2179] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.565530][ T2179] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.583148][ T2179] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  217.600308][ T2179] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  217.668589][ T2179] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.680984][ T2179] usb 7-1: config 0 descriptor??
[  217.721938][ T8688] FAT-fs (loop4): Directory bread(block 64) failed
[  217.752947][ T8688] FAT-fs (loop4): Directory bread(block 65) failed
[  217.759671][ T8688] FAT-fs (loop4): Directory bread(block 66) failed
[  217.822754][ T8688] FAT-fs (loop4): Directory bread(block 67) failed
[  217.831727][ T8693] set_capacity_and_notify: 1 callbacks suppressed
[  217.831744][ T8693] loop2: detected capacity change from 0 to 256
[  217.839821][ T8688] FAT-fs (loop4): Directory bread(block 68) failed
[  217.876558][ T8693] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  217.882661][ T8688] FAT-fs (loop4): Directory bread(block 69) failed
[  217.899015][ T8695] loop0: detected capacity change from 0 to 128
[  217.928374][ T8688] FAT-fs (loop4): Directory bread(block 70) failed
[  217.935182][ T8688] FAT-fs (loop4): Directory bread(block 71) failed
[  217.942003][ T8688] FAT-fs (loop4): Directory bread(block 72) failed
[  217.949018][ T8688] FAT-fs (loop4): Directory bread(block 73) failed
[  217.956462][ T8695] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  217.965605][ T8693] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  217.992556][ T8688] FAT-fs (loop4): Filesystem has been set read-only
[  218.038313][ T8693] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  218.110026][ T8695] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  218.153086][ T2179] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x4
[  218.192073][ T2179] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  218.227472][ T2179] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  218.319364][ T5773] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  218.458484][    T8] usb 7-1: USB disconnect, device number 4
[  218.512304][ T8702] fido_id[8702]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  218.896627][ T8711] loop2: detected capacity change from 0 to 4096
[  219.632769][ T8349] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  219.824734][ T8349] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  219.842727][ T8349] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  219.868358][ T8349] usb 5-1: config 0 interface 0 has no altsetting 0
[  219.893277][ T8349] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  219.902390][ T8349] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  219.942683][ T8349] usb 5-1: Product: syz
[  219.946989][ T8349] usb 5-1: Manufacturer: syz
[  219.951630][ T8349] usb 5-1: SerialNumber: syz
[  219.980737][ T8725] loop6: detected capacity change from 0 to 32768
[  219.994423][ T8349] usb 5-1: config 0 descriptor??
[  220.009288][ T8349] hub 5-1:0.0: bad descriptor, ignoring hub
[  220.018585][ T8349] hub: probe of 5-1:0.0 failed with error -5
[  220.068266][ T8349] usb 5-1: selecting invalid altsetting 0
[  220.075952][ T8725] non-latin1 character 0x466c found in JFS file name
[  220.088505][ T8725] mount with iocharset=utf8 to access
[  220.459321][ T8746] loop0: detected capacity change from 0 to 256
[  220.667499][ T8746] FAT-fs (loop0): Directory bread(block 64) failed
[  220.704485][ T8746] FAT-fs (loop0): Directory bread(block 65) failed
[  220.729287][ T8746] FAT-fs (loop0): Directory bread(block 66) failed
[  220.742219][ T8746] FAT-fs (loop0): Directory bread(block 67) failed
[  220.772953][ T8746] FAT-fs (loop0): Directory bread(block 68) failed
[  220.811465][ T8746] FAT-fs (loop0): Directory bread(block 69) failed
[  220.833136][ T8746] FAT-fs (loop0): Directory bread(block 70) failed
[  220.841660][ T8727] usb 5-1: reset high-speed USB device number 3 using dummy_hcd
[  220.843203][ T8746] FAT-fs (loop0): Directory bread(block 71) failed
[  220.890851][ T8746] FAT-fs (loop0): Directory bread(block 72) failed
[  220.918196][ T8746] FAT-fs (loop0): Directory bread(block 73) failed
[  221.280977][ T8727] usb 5-1: failed to restore interface 0 altsetting 251 (error=-71)
[  221.298791][ T8349] usb 5-1: USB disconnect, device number 3
[  221.486930][ T8776] binder: 8775:8776 ioctl c0306201 0 returned -14
[  221.496947][ T8776] binder: 8775:8776 ioctl 8004587d 0 returned -22
[  221.709285][ T8779] loop2: detected capacity change from 0 to 8192
[  221.733603][ T8779] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  221.782897][ T8779] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  221.792230][ T8779] REISERFS (device loop2): using ordered data mode
[  221.799622][ T8779] reiserfs: using flush barriers
[  221.815288][ T8779] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  221.834090][ T8779] REISERFS (device loop2): checking transaction log (loop2)
[  221.982194][ T8769] loop0: detected capacity change from 0 to 32768
[  222.126028][ T8779] REISERFS (device loop2): Using tea hash to sort names
[  222.143148][ T8779] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  222.373166][ T8779] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  223.332758][ T5830] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  223.549823][ T5830] usb 7-1: Using ep0 maxpacket: 32
[  223.612822][ T5830] usb 7-1: config 0 has no interfaces?
[  223.683997][ T5830] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  223.698653][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.708819][ T5830] usb 7-1: Product: syz
[  223.715328][   T28] audit: type=1326 audit(1779284137.428:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.0.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff19ce59 code=0x7ffc0000
[  223.739782][ T5830] usb 7-1: Manufacturer: syz
[  223.745712][ T5830] usb 7-1: SerialNumber: syz
[  223.764800][ T5830] usb 7-1: config 0 descriptor??
[  223.781088][   T28] audit: type=1326 audit(1779284137.428:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.0.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff19ce59 code=0x7ffc0000
[  223.814259][   T28] audit: type=1326 audit(1779284137.438:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.0.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc5ff19ce59 code=0x7ffc0000
[  223.870716][ T8823] loop8: detected capacity change from 0 to 7
[  223.881574][   T28] audit: type=1326 audit(1779284137.438:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.0.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff19ce59 code=0x7ffc0000
[  223.937549][ T8823] Dev loop8: unable to read RDB block 7
[  223.951202][ T8823]  loop8: unable to read partition table
[  223.972879][   T28] audit: type=1326 audit(1779284137.438:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.0.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc5ff19ce59 code=0x7ffc0000
[  224.000854][ T8823] loop8: partition table beyond EOD, truncated
[  224.010777][ T8823] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  224.066332][   T28] audit: type=1326 audit(1779284137.438:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.0.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff19ce59 code=0x7ffc0000
[  224.096796][ T2980] tipc: Subscription rejected, illegal request
[  224.117029][ T8349] usb 7-1: USB disconnect, device number 5
[  224.172712][   T28] audit: type=1326 audit(1779284137.438:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.0.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff19ce59 code=0x7ffc0000
[  224.259262][   T28] audit: type=1326 audit(1779284137.458:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.0.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fc5ff19ce59 code=0x7ffc0000
[  224.310296][   T28] audit: type=1326 audit(1779284137.468:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8819 comm="syz.0.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ff19ce59 code=0x7ffc0000
[  224.410421][ T8827] loop4: detected capacity change from 0 to 8192
[  224.439902][ T8827] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  224.461268][ T8827] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  224.471181][ T8827] REISERFS (device loop4): using ordered data mode
[  224.478270][ T8827] reiserfs: using flush barriers
[  224.492766][ T8827] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  224.519926][ T8827] REISERFS (device loop4): checking transaction log (loop4)
[  224.828135][ T8827] REISERFS (device loop4): Using tea hash to sort names
[  224.846658][ T8827] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  225.108059][ T8827] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[  225.173267][ T8848] capability: warning: `syz.6.785' uses 32-bit capabilities (legacy support in use)
[  225.392359][ T8861] sctp: [Deprecated]: syz.2.790 (pid 8861) Use of int in max_burst socket option deprecated.
[  225.392359][ T8861] Use struct sctp_assoc_value instead
[  225.915082][ T8873] loop6: detected capacity change from 0 to 512
[  226.044043][ T8873] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.120344][ T8873] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.215806][ T8873] EXT4-fs (loop6): shut down requested (2)
[  226.358407][ T8218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.724351][ T8868] loop0: detected capacity change from 0 to 32768
[  226.815070][ T8868] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  226.964752][ T8868] XFS (loop0): Ending clean mount
[  227.157991][ T5773] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  227.612762][ T5812] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  227.805153][ T5812] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  227.826096][ T5812] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  227.857451][ T5812] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  227.871896][ T5812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  227.883807][ T5812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  227.910223][ T5812] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  227.919904][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  227.928412][ T5812] usb 7-1: Product: syz
[  227.933125][ T5812] usb 7-1: Manufacturer: syz
[  227.948832][ T5812] cdc_wdm 7-1:1.0: skipping garbage
[  227.966635][ T5812] cdc_wdm 7-1:1.0: skipping garbage
[  227.981424][ T5812] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  227.987940][ T5812] cdc_wdm 7-1:1.0: Unknown control protocol
[  228.352739][ T5084] Bluetooth: hci0: command 0x0406 tx timeout
[  228.357647][ T8883] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  228.638998][ T8928] loop0: detected capacity change from 0 to 1024
[  228.666111][ T8930] loop2: detected capacity change from 0 to 512
[  228.680451][ T8930] EXT4-fs: Ignoring removed nobh option
[  228.693614][ T8930] EXT4-fs (loop2): Test dummy encryption mode enabled
[  228.697813][ T8928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  228.700602][ T8930] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  228.741750][ T8930] EXT4-fs (loop2): 1 truncate cleaned up
[  228.749493][ T8930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.756983][ T8928] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.836626][ T8928] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 3: comm syz.0.804: lblock 3 mapped to illegal pblock 3 (length 1)
[  228.880752][ T8928] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  228.896779][ T8928] EXT4-fs (loop0): This should not happen!! Data will be lost
[  228.896779][ T8928] 
[  228.941367][   T27] usb 7-1: USB disconnect, device number 6
[  228.941517][ T8936] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.804: lblock 0 mapped to illegal pblock 0 (length 3)
[  228.976151][ T8936] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117
[  228.989179][ T8930] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  229.001723][ T8936] EXT4-fs (loop0): This should not happen!! Data will be lost
[  229.001723][ T8936] 
[  229.055918][ T2990] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 4: comm kworker/u4:10: lblock 4 mapped to illegal pblock 4 (length 2)
[  229.072275][ T2990] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[  229.077439][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.099538][ T2990] EXT4-fs (loop0): This should not happen!! Data will be lost
[  229.099538][ T2990] 
[  229.111880][ T2990] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:10: lblock 8 mapped to illegal pblock 8 (length 8)
[  229.137432][ T2990] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  229.159278][ T2990] EXT4-fs (loop0): This should not happen!! Data will be lost
[  229.159278][ T2990] 
[  229.180875][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  229.698890][ T5830] IPVS: starting estimator thread 0...
[  229.803126][ T8961] IPVS: using max 16 ests per chain, 38400 per kthread
[  230.218637][ T8975] loop2: detected capacity change from 0 to 4096
[  230.248622][ T8975] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  230.375712][ T8975] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  230.425481][ T8975] ntfs: (device loop2): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2.
[  230.435758][ T5084] Bluetooth: hci0: command 0x0406 tx timeout
[  230.465714][ T8975] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  230.557700][ T8975] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  230.595911][ T8975] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  230.655392][ T8975] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  230.691489][ T8975] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  230.797350][ T8975] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  230.844979][ T8975] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  230.891145][ T8975] ntfs: volume version 3.1.
[  231.513008][   T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  231.733257][   T23] usb 3-1: Using ep0 maxpacket: 8
[  231.791103][   T23] usb 3-1: unable to get BOS descriptor or descriptor too short
[  231.803644][   T23] usb 3-1: config 140 has an invalid interface number: 182 but max is 1
[  231.812107][   T23] usb 3-1: config 140 has no interface number 1
[  231.833511][   T23] usb 3-1: config 140 interface 182 has no altsetting 0
[  231.844464][   T23] usb 3-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81
[  231.862699][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.870770][   T23] usb 3-1: Product: syz
[  231.892953][   T23] usb 3-1: Manufacturer: syz
[  231.909939][   T23] usb 3-1: SerialNumber: syz
[  232.184397][   T23] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I
[  232.210587][ T9020] loop4: detected capacity change from 0 to 8192
[  232.256173][ T9020] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  232.919821][   T23] usb 3-1: reset high-speed USB device number 8 using dummy_hcd
[  232.992434][ T9040] loop0: detected capacity change from 0 to 4096
[  233.118688][ T9040] ntfs: volume version 3.1.
[  233.158667][   T23] usb 3-1: unable to get BOS descriptor or descriptor too short
[  233.213158][   T23] usb 3-1: device firmware changed
[  233.277813][   T23] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware
[  233.332129][   T23] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[  233.343142][ T5812] usb 3-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2
[  233.380238][ T5812] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw
[  233.412933][   T23] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I
[  233.452902][   T23] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware
[  233.503174][   T23] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[  233.543632][   T23] usb 3-1: USB disconnect, device number 8
[  233.585341][   T23] usb 3-1: [ueagle-atm] ADSL device removed
[  234.121225][ T9067] loop2: detected capacity change from 0 to 256
[  234.265153][ T9067] FAT-fs (loop2): Directory bread(block 64) failed
[  234.275314][ T9067] FAT-fs (loop2): Directory bread(block 65) failed
[  234.292323][ T9067] FAT-fs (loop2): Directory bread(block 66) failed
[  234.321649][ T9067] FAT-fs (loop2): Directory bread(block 67) failed
[  234.345521][ T9067] FAT-fs (loop2): Directory bread(block 68) failed
[  234.370666][ T9067] FAT-fs (loop2): Directory bread(block 69) failed
[  234.393913][ T9067] FAT-fs (loop2): Directory bread(block 70) failed
[  234.412744][ T9067] FAT-fs (loop2): Directory bread(block 71) failed
[  234.419448][ T9067] FAT-fs (loop2): Directory bread(block 72) failed
[  234.462966][ T9067] FAT-fs (loop2): Directory bread(block 73) failed
[  234.983213][ T9058] loop6: detected capacity change from 0 to 32768
[  235.060101][ T9058] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  235.268450][ T9058] XFS (loop6): Ending clean mount
[  235.421498][ T9058] XFS (loop6): User initiated shutdown received.
[  235.439299][ T9058] XFS (loop6): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[  235.485155][ T9058] XFS (loop6): Please unmount the filesystem and rectify the problem(s)
[  235.983059][ T8218] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  236.725916][ T9104] loop2: detected capacity change from 0 to 32768
[  236.748654][ T9122] syzkaller1: entered promiscuous mode
[  236.789055][ T9122] syzkaller1: entered allmulticast mode
[  236.836095][ T9104] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  237.363828][ T9104] XFS (loop2): Ending clean mount
[  237.547029][ T5779] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.341945][ T9154] loop0: detected capacity change from 0 to 32768
[  238.413497][ T9175] loop4: detected capacity change from 0 to 1024
[  238.437949][ T9154] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  238.753129][ T9154] XFS (loop0): Ending clean mount
[  238.899675][ T9154] XFS (loop0): User initiated shutdown received.
[  238.932943][ T9154] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[  238.972626][ T9154] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  239.103579][ T9172] loop6: detected capacity change from 0 to 32768
[  239.182129][ T9172] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  239.476579][ T9172] XFS (loop6): Ending clean mount
[  239.656644][ T9208] loop4: detected capacity change from 0 to 512
[  239.745656][ T9208] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #2: block 3: comm syz.4.867: lblock 0 mapped to illegal pblock 3 (length 1)
[  239.804585][ T8218] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  239.824237][ T5773] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  239.844648][ T9208] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.867: error -117 reading directory block
[  239.869430][ T9208] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  239.901718][ T9208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.064151][ T9208] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #2: block 3: comm syz.4.867: lblock 0 mapped to illegal pblock 3 (length 1)
[  240.132252][ T9208] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.867: error -117 reading directory block
[  240.174847][ T9208] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #2: block 3: comm syz.4.867: lblock 0 mapped to illegal pblock 3 (length 1)
[  240.209919][ T9208] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.867: error -117 reading directory block
[  240.214947][ T9218] loop2: detected capacity change from 0 to 512
[  240.353970][ T7468] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.388179][ T9218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.456815][ T9218] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.609003][ T9218] EXT4-fs (loop2): shut down requested (2)
[  240.774537][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.491747][ T9256] loop6: detected capacity change from 0 to 1024
[  241.550794][ T9256] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  241.640173][ T9256] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.665648][   T28] kauditd_printk_skb: 146 callbacks suppressed
[  241.665666][   T28] audit: type=1800 audit(1779284155.388:28): pid=9256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.880" name="file1" dev="loop6" ino=15 res=0 errno=0
[  241.728897][ T9256] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: comm syz.6.880: lblock 0 mapped to illegal pblock 0 (length 1)
[  241.822877][ T9256] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  241.873354][ T9256] EXT4-fs (loop6): This should not happen!! Data will be lost
[  241.873354][ T9256] 
[  241.994625][ T8218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  242.427759][ T9240] loop2: detected capacity change from 0 to 40427
[  242.471353][ T9240] F2FS-fs (loop2): invalid crc value
[  242.494947][ T9240] F2FS-fs (loop2): Found nat_bits in checkpoint
[  242.712497][ T9240] F2FS-fs (loop2): Start checkpoint disabled!
[  242.744555][ T9240] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  242.814328][ T9240] syz.2.875: attempt to access beyond end of device
[  242.814328][ T9240] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  242.899795][ T9287] syz.2.875: attempt to access beyond end of device
[  242.899795][ T9287] loop2: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  243.343383][ T2990] kworker/u4:10: attempt to access beyond end of device
[  243.343383][ T2990] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  243.365853][ T9273] loop6: detected capacity change from 0 to 32768
[  243.385570][ T2990] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  243.400460][ T2990] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  243.489153][ T9273] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  243.612053][ T9273] XFS (loop6): Ending clean mount
[  243.935060][ T9323] loop4: detected capacity change from 0 to 24
[  244.064647][ T8218] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  245.523020][   T27] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  245.711189][ T9333] loop2: detected capacity change from 0 to 32768
[  245.748355][   T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.808350][   T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.854694][ T9333] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  245.880333][   T27] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  245.939406][   T27] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  246.004033][   T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.068340][   T27] usb 7-1: config 0 descriptor??
[  246.351875][ T9350] loop0: detected capacity change from 0 to 131072
[  246.364746][ T9350] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  246.372982][ T9350] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  246.390085][ T9350] F2FS-fs (loop0): invalid crc value
[  246.402034][ T5779] ocfs2: Unmounting device (7,2) on (node local)
[  246.454104][ T9350] F2FS-fs (loop0): Found nat_bits in checkpoint
[  246.529242][   T27] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  246.556751][ T9350] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  246.564637][ T9350] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  246.583999][   T27] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  246.825356][   T27] usb 7-1: USB disconnect, device number 7
[  246.901399][ T9374] fido_id[9374]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  247.055333][ T9382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.905'.
[  247.782119][ T9399] loop2: detected capacity change from 0 to 128
[  247.842562][ T9399] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  247.903752][ T9399] hpfs: filesystem error: improperly stopped
[  247.910344][ T9399] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  247.946507][ T9399] hpfs: You really don't want any checks? You are crazy...
[  247.966720][ T9399] hpfs: hpfs_map_sector(): read error
[  247.972272][ T9399] hpfs: code page support is disabled
[  248.002147][ T9399] hpfs: hpfs_map_4sectors(): unaligned read
[  248.053522][ T9399] hpfs: hpfs_map_4sectors(): unaligned read
[  248.067836][ T9399] hpfs: filesystem error: unable to find root dir
[  248.111114][ T9399] hpfs: hpfs_map_4sectors(): unaligned read
[  248.206779][ T9399] hpfs: hpfs_map_sector(): read error
[  248.803114][ T5889] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  248.992511][ T9425] loop0: detected capacity change from 0 to 8192
[  249.014497][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.056023][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.086595][ T5889] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  249.109005][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.137365][ T5889] usb 3-1: config 0 descriptor??
[  249.195981][ T9412] loop6: detected capacity change from 0 to 32768
[  249.234837][ T9412] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.913 (9412)
[  249.333024][ T9412] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  249.364403][ T9412] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  249.411286][ T9412] BTRFS info (device loop6): using free space tree
[  249.493963][ T9416] loop4: detected capacity change from 0 to 32768
[  249.605403][ T5889] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0
[  249.613689][ T5889] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0
[  249.638902][ T9416] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  249.651516][ T5889] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.000C/input/input10
[  249.675972][ T9447] loop0: detected capacity change from 0 to 512
[  249.711974][ T9447] EXT4-fs: Ignoring removed nomblk_io_submit option
[  249.713412][ T9412] BTRFS info (device loop6): enabling ssd optimizations
[  249.732786][ T9412] BTRFS info (device loop6): auto enabling async discard
[  249.758601][ T5889] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[  249.839843][ T9447] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  249.920586][ T5889] usb 3-1: USB disconnect, device number 9
[  249.921385][ T9447] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #11: comm syz.0.916: corrupted inode contents
[  249.994666][ T9447] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #11: comm syz.0.916: mark_inode_dirty error
[  250.081522][ T9457] fido_id[9457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  250.117309][ T9447] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.916: invalid indirect mapped block 1 (level 1)
[  250.215501][ T9447] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #11: comm syz.0.916: corrupted inode contents
[  250.243616][ T9447] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  250.248714][ T7468] ocfs2: Unmounting device (7,4) on (node local)
[  250.260068][ T8218] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  250.302272][ T9447] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #11: comm syz.0.916: corrupted inode contents
[  250.333029][ T9447] EXT4-fs error (device loop0): ext4_truncate:4301: inode #11: comm syz.0.916: mark_inode_dirty error
[  250.416521][ T9447] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  250.471367][ T9447] EXT4-fs (loop0): 1 truncate cleaned up
[  250.528505][ T9447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.592923][ T6014] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop6 scanned by udevd (6014)
[  250.741862][ T9447] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.916: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[  250.743396][ T9470] Invalid ELF header len 9
[  251.064093][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.505518][ T9533] loop4: detected capacity change from 0 to 2048
[  253.568815][ T9533] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  254.769806][ T9545] loop6: detected capacity change from 0 to 32768
[  254.803464][ T9545] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9
[  254.988380][ T6728] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 9
[  256.040833][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  256.295701][ T9576] loop0: detected capacity change from 0 to 32768
[  256.615772][ T9615] loop6: detected capacity change from 0 to 4096
[  256.677254][ T9615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.015187][ T8218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.079770][ T9626] loop0: detected capacity change from 0 to 8192
[  257.120034][ T9626] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  257.147053][ T9626] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  257.160604][ T9626] REISERFS (device loop0): using ordered data mode
[  257.167927][ T9626] reiserfs: using flush barriers
[  257.242828][ T9626] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  257.260384][ T9626] REISERFS (device loop0): checking transaction log (loop0)
[  257.277949][ T9626] REISERFS (device loop0): Using r5 hash to sort names
[  257.286374][ T9626] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  257.301050][ T9626] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  257.383715][ T9626] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  257.413323][ T9626] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  257.463489][ T9626] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  257.579252][ T9637] loop6: detected capacity change from 0 to 64
[  257.679130][   T28] audit: type=1800 audit(1779284171.398:29): pid=9637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.962" name="file1" dev="loop6" ino=21 res=0 errno=0
[  257.725267][ T5564] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  257.734555][ T8218] hfs: node 4:3 still has 1 user(s)!
[  257.910116][    T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  257.923028][ T5564] usb 5-1: Using ep0 maxpacket: 16
[  257.941098][ T5564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.969090][ T5564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.982817][ T5564] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  258.009158][ T5564] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  258.023596][ T5564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.035877][ T5564] usb 5-1: config 0 descriptor??
[  258.124478][    T8] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  258.138554][    T8] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  258.179309][    T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  258.202690][    T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  258.210972][ T9651] loop0: detected capacity change from 0 to 1024
[  258.218397][    T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  258.269282][    T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  258.272533][ T9651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.281106][    T8] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  258.300916][    T8] usb 3-1: Product: syz
[  258.305291][    T8] usb 3-1: Manufacturer: syz
[  258.319961][    T8] cdc_wdm 3-1:1.0: skipping garbage
[  258.329289][    T8] cdc_wdm 3-1:1.0: skipping garbage
[  258.342484][    T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  258.348770][    T8] cdc_wdm 3-1:1.0: Unknown control protocol
[  258.486058][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.516148][ T5564] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max
[  258.602816][ T5564] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000D/input/input11
[  258.638302][ T9658] loop0: detected capacity change from 0 to 1024
[  258.673125][ T9658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.687983][ T9658] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.701437][ T5564] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  258.738328][ T5564] usb 5-1: USB disconnect, device number 4
[  258.781355][ T9658] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.969: lblock 0 mapped to illegal pblock 0 (length 1)
[  258.842957][ T9658] EXT4-fs (loop0): Remounting filesystem read-only
[  258.924290][ T9661] fido_id[9661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  258.944325][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  259.209724][ T9665] loop6: detected capacity change from 0 to 4096
[  259.449002][ T5564] usb 3-1: USB disconnect, device number 10
[  259.768924][ T9669] loop4: detected capacity change from 0 to 8192
[  259.785350][ T9669] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  259.790261][ T9663] loop0: detected capacity change from 0 to 32768
[  259.804299][ T9669] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  259.823877][ T9669] REISERFS (device loop4): using ordered data mode
[  259.830447][ T9669] reiserfs: using flush barriers
[  259.846060][ T9669] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  259.871275][ T9663] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  259.885421][ T9669] REISERFS (device loop4): checking transaction log (loop4)
[  259.932127][ T9669] REISERFS (device loop4): Using r5 hash to sort names
[  259.942456][ T9663] JBD2: Ignoring recovery information on journal
[  259.971661][ T9669] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  259.986265][ T9669] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  260.088053][ T9669] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  260.108510][ T9663] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  260.121295][ T9669] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  260.153320][ T9669] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  260.367199][ T5773] ocfs2: Unmounting device (7,0) on (node local)
[  261.277867][ T9708] loop2: detected capacity change from 0 to 1024
[  261.341325][ T9708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  261.366320][ T9708] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.411999][   T28] audit: type=1800 audit(1779284175.128:30): pid=9708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.986" name="file1" dev="loop2" ino=15 res=0 errno=0
[  261.439271][ T9708] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.986: lblock 0 mapped to illegal pblock 0 (length 1)
[  261.460732][ T9708] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  261.473766][ T9708] EXT4-fs (loop2): This should not happen!! Data will be lost
[  261.473766][ T9708] 
[  261.507037][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  261.696627][ T9718] loop2: detected capacity change from 0 to 8192
[  261.729496][ T9718] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  261.749552][ T9718] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  261.760057][ T9718] REISERFS (device loop2): using ordered data mode
[  261.770626][ T9718] reiserfs: using flush barriers
[  261.800487][ T9718] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  261.845931][ T9718] REISERFS (device loop2): checking transaction log (loop2)
[  261.881535][ T9718] REISERFS (device loop2): Using r5 hash to sort names
[  261.899465][ T9718] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  261.918758][ T9718] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  261.962003][ T9718] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  261.976920][ T9718] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  261.991845][ T9718] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  262.466633][ T9724] ALSA: mixer_oss: invalid OSS volume ' 1000000) max_states_per_insn 0'
[  262.872710][ T5830] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  263.094548][ T5830] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  263.102977][ T5830] usb 3-1: config 0 has no interface number 0
[  263.109151][ T5830] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  263.135307][ T5830] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  263.152635][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.160699][ T5830] usb 3-1: Product: syz
[  263.165254][ T5830] usb 3-1: Manufacturer: syz
[  263.170370][ T5830] usb 3-1: SerialNumber: syz
[  263.177736][ T5830] usb 3-1: config 0 descriptor??
[  263.193710][ T5830] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  263.742678][ T5889] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  263.945308][ T5889] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  263.955033][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.967626][ T5889] usb 1-1: config 0 descriptor??
[  263.978307][ T5889] gspca_main: cpia1-2.14.0 probing 0813:0001
[  263.993962][    C0] usb 3-1: yurex_control_callback - control failed: -71
[  263.995535][ T5564] usb 3-1: USB disconnect, device number 11
[  264.023723][ T5564] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  264.382814][ T5889] cpia1 1-1:0.0: unexpected state after lo power cmd: 00
[  264.775357][ T5830] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  264.783669][ T5889] gspca_cpia1: usb_control_msg 02, error -32
[  264.791733][ T5889] gspca_cpia1: usb_control_msg 02, error -71
[  264.808615][ T5889] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[  264.822315][ T5889] usb 1-1: USB disconnect, device number 14
[  264.972745][ T5830] usb 5-1: Using ep0 maxpacket: 32
[  264.986052][ T5830] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  264.997500][ T5830] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  265.008370][ T5830] usb 5-1: config 0 interface 0 has no altsetting 0
[  265.017643][ T5830] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  265.027070][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.035203][ T5830] usb 5-1: Product: syz
[  265.039381][ T5830] usb 5-1: Manufacturer: syz
[  265.044160][ T5830] usb 5-1: SerialNumber: syz
[  265.050642][ T5830] usb 5-1: config 0 descriptor??
[  265.470716][ T5830] gs_usb 5-1:0.0: Configuring for 1 interfaces
[  265.880601][ T9762] loop0: detected capacity change from 0 to 32768
[  265.944926][ T9762] read_mapping_page failed!
[  265.963932][ T9762] ERROR: (device loop0): txCommit: 
[  265.963932][ T9762] 
[  266.160571][ T5564] usb 5-1: USB disconnect, device number 5
[  268.227134][ T9801] sctp: [Deprecated]: syz.0.1017 (pid 9801) Use of struct sctp_assoc_value in delayed_ack socket option.
[  268.227134][ T9801] Use struct sctp_sack_info instead
[  269.586554][ T9828] input: syz0 as /devices/virtual/input/input12
[  269.842399][ T9836] loop2: detected capacity change from 0 to 1024
[  269.956756][ T9836] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  269.974579][ T5564] kernel write not supported for file bpf-prog (pid: 5564 comm: kworker/1:3)
[  270.023244][ T9836] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  270.074237][ T9836] EXT4-fs (loop2): orphan cleanup on readonly fs
[  270.123511][ T9836] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.1024: Freeing blocks not in datazone - block = 0, count = 4096
[  270.201988][ T9836] EXT4-fs (loop2): Remounting filesystem read-only
[  270.218672][ T9836] EXT4-fs (loop2): 1 orphan inode deleted
[  270.236854][ T9836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  270.250317][ T9845] loop0: detected capacity change from 0 to 64
[  270.327599][   T28] audit: type=1804 audit(1779284184.048:31): pid=9845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1026" name="/newroot/259/bus/file1" dev="loop0" ino=3 res=1 errno=0
[  270.481927][ T9826] loop6: detected capacity change from 0 to 32768
[  270.537531][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.596456][ T9826] read_mapping_page failed!
[  270.596524][ T9826] ERROR: (device loop6): txCommit: 
[  270.596524][ T9826] 
[  271.507687][ T9864] loop2: detected capacity change from 0 to 32768
[  271.532404][ T9864] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  271.573017][ T9864] XFS (loop2): Ending clean mount
[  271.662884][ T5779] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  271.992301][  T786] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  272.004985][ T9882] loop0: detected capacity change from 0 to 512
[  272.038843][ T9882] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  272.126671][ T9882] EXT4-fs (loop0): 1 truncate cleaned up
[  272.134009][ T9882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.197321][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.228315][  T786] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.250166][  T786] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.261861][  T786] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  272.286727][  T786] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.332049][  T786] usb 7-1: config 0 descriptor??
[  272.353082][ T8349] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  272.461851][ T1031] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.482208][ T9890] loop0: detected capacity change from 0 to 764
[  272.552785][ T8349] usb 3-1: Using ep0 maxpacket: 32
[  272.576027][ T8349] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  272.588327][ T8349] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  272.620445][ T1031] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.622897][ T8349] usb 3-1: config 0 interface 0 has no altsetting 0
[  272.681788][ T8349] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  272.711498][ T8349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.735990][ T8349] usb 3-1: Product: syz
[  272.752625][ T8349] usb 3-1: Manufacturer: syz
[  272.766924][ T1031] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.770794][ T8349] usb 3-1: SerialNumber: syz
[  272.796133][  T786] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  272.836553][ T8349] usb 3-1: config 0 descriptor??
[  272.842749][  T786] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0
[  273.001787][ T1031] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.006222][  T786] cp2112 0003:10C4:EA90.000E: error requesting version
[  273.075022][  T786] cp2112: probe of 0003:10C4:EA90.000E failed with error -71
[  273.105828][  T786] usb 7-1: USB disconnect, device number 8
[  273.297317][ T8349] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  273.784050][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  273.798952][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  273.811310][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  273.821618][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  273.829531][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  273.862902][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  273.953250][ T5889] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  274.021061][ T5830] usb 3-1: USB disconnect, device number 12
[  274.120273][ T9907] loop6: detected capacity change from 0 to 1024
[  274.163316][ T5889] usb 1-1: Using ep0 maxpacket: 8
[  274.170854][ T5889] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  274.192732][ T5889] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  274.229814][ T5889] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  274.272479][ T5889] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  274.306683][ T8218] hfsplus: bad catalog entry type
[  274.313085][ T5889] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  274.349482][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.417705][ T2990] hfsplus: b-tree write err: -5, ino 25
[  274.428464][ T2990] hfsplus: b-tree write err: -5, ino 4
[  274.434899][ T2990] hfsplus: b-tree write err: -5, ino 2
[  274.600409][ T5889] usb 1-1: GET_CAPABILITIES returned 0
[  274.606252][ T5889] usbtmc 1-1:16.0: can't read capabilities
[  274.823738][ T5830] usb 1-1: USB disconnect, device number 15
[  275.248558][ T9897] chnl_net:caif_netlink_parms(): no params data found
[  275.944349][ T1031] hsr_slave_0: left promiscuous mode
[  275.951358][ T1031] hsr_slave_1: left promiscuous mode
[  275.962971][ T5084] Bluetooth: hci2: command tx timeout
[  275.984092][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  276.005102][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_0
[  276.015229][ T9942] loop0: detected capacity change from 0 to 4096
[  276.035188][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  276.064282][ T5564] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  276.077225][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_1
[  276.086628][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  276.102508][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  276.114826][ T1031] bridge_slave_1: left allmulticast mode
[  276.120710][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  276.131506][ T1031] bridge_slave_1: left promiscuous mode
[  276.137902][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.146424][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  276.155044][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  276.167788][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  276.176043][ T1031] bridge_slave_0: left allmulticast mode
[  276.183073][ T1031] bridge_slave_0: left promiscuous mode
[  276.189009][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.263807][ T5564] usb 3-1: Using ep0 maxpacket: 16
[  276.279822][ T5564] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  276.314637][ T5564] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  276.325139][ T1031] veth1_macvtap: left promiscuous mode
[  276.330737][ T1031] veth0_macvtap: left promiscuous mode
[  276.336753][ T5564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.338749][ T1031] veth1_vlan: left promiscuous mode
[  276.354680][ T1031] veth0_vlan: left promiscuous mode
[  276.361086][ T5564] usb 3-1: Product: syz
[  276.372010][ T5564] usb 3-1: Manufacturer: syz
[  276.377488][ T5564] usb 3-1: SerialNumber: syz
[  276.405645][ T5564] usb 3-1: config 0 descriptor??
[  276.698045][  T786] usb 3-1: USB disconnect, device number 13
[  277.531152][ T1031] team0 (unregistering): Port device team_slave_1 removed
[  277.632287][ T1031] team0 (unregistering): Port device team_slave_0 removed
[  277.747203][ T1031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  277.957932][ T9960] loop2: detected capacity change from 0 to 32768
[  278.053932][ T5084] Bluetooth: hci2: command tx timeout
[  278.074246][ T9960] syz.2.1067: attempt to access beyond end of device
[  278.074246][ T9960] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  278.138705][ T9960] metapage_write_end_io: I/O error
[  278.155612][  T112] blkno = 8ed2c, nblocks = 1
[  278.160309][  T112] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  278.160309][  T112] 
[  278.183890][ T9960] blkno = 8ed2c, nblocks = 1
[  278.188571][ T9960] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  278.188571][ T9960] 
[  278.201826][  T112] ERROR: (device loop2): remounting filesystem as read-only
[  278.206828][ T5084] Bluetooth: hci1: command tx timeout
[  278.250514][ T9960] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt
[  278.250514][ T9960] 
[  278.282443][ T9960] jfs_mkdir: dtSearch returned -5
[  278.341622][ T9960] ERROR: (device loop2): dtReadFirst: DT_GETPAGE: dtree page corrupt
[  278.341622][ T9960] 
[  278.358126][ T9960] jfs_readdir: unexpected rc = -5 from dtReadNext
[  278.398812][ T5779] syz-executor: attempt to access beyond end of device
[  278.398812][ T5779] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  278.413964][ T5779] metapage_write_end_io: I/O error
[  278.419498][ T5779] JFS: metapage_get_blocks failed
[  278.445444][ T5779] JFS: metapage_get_blocks failed
[  278.450576][ T5779] JFS: metapage_get_blocks failed
[  278.456337][ T5779] JFS: metapage_get_blocks failed
[  278.619692][ T1031] bond0 (unregistering): Released all slaves
[  278.743286][ T9897] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.750511][ T9897] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.758418][ T9897] bridge_slave_0: entered allmulticast mode
[  278.767982][ T9897] bridge_slave_0: entered promiscuous mode
[  278.780261][ T9897] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.832904][ T9897] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.840289][ T9897] bridge_slave_1: entered allmulticast mode
[  278.874370][ T9897] bridge_slave_1: entered promiscuous mode
[  279.085509][ T9897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.125964][ T9897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.151360][ T9967] loop2: detected capacity change from 0 to 512
[  279.225213][ T9967] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1068: inode has both inline data and extents flags
[  279.276077][ T9967] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1068: couldn't read orphan inode 15 (err -117)
[  279.332805][ T9897] team0: Port device team_slave_0 added
[  279.333239][ T9967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.389079][ T9897] team0: Port device team_slave_1 added
[  279.580597][ T9897] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.599387][ T9897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.625578][    C1] vkms_vblank_simulate: vblank timer overrun
[  279.648201][ T9897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  279.753313][ T9897] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.760936][ T9897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.821949][ T9897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.888804][ T1031] IPVS: stop unused estimator thread 0...
[  279.906680][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.929019][ T9897] hsr_slave_0: entered promiscuous mode
[  279.955787][ T9897] hsr_slave_1: entered promiscuous mode
[  280.008297][ T9897] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  280.030073][ T9897] Cannot create hsr debugfs directory
[  280.107596][ T9943] chnl_net:caif_netlink_parms(): no params data found
[  280.126058][ T5084] Bluetooth: hci2: command tx timeout
[  280.273822][ T5084] Bluetooth: hci1: command tx timeout
[  280.353227][ T9988] loop2: detected capacity change from 0 to 8192
[  280.412788][ T9988] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  280.443931][ T9988] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  280.484838][ T9988] REISERFS (device loop2): using ordered data mode
[  280.491418][ T9988] reiserfs: using flush barriers
[  280.508627][ T1031] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.544438][ T9988] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  280.586227][ T9988] REISERFS (device loop2): checking transaction log (loop2)
[  280.692971][ T9943] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.700174][ T9943] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.722930][ T9943] bridge_slave_0: entered allmulticast mode
[  280.730515][ T9943] bridge_slave_0: entered promiscuous mode
[  280.787249][ T9983] loop0: detected capacity change from 0 to 32768
[  280.821404][ T9988] REISERFS (device loop2): Using tea hash to sort names
[  280.840809][ T9983] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  280.849454][ T9988] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  280.868139][ T1031] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.933981][ T9943] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.941183][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.983345][ T9943] bridge_slave_1: entered allmulticast mode
[  280.991449][ T9943] bridge_slave_1: entered promiscuous mode
[  281.175511][ T6728] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  281.195125][ T1031] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.321975][ T9943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.360030][ T9943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.471544][ T1031] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.757122][ T9943] team0: Port device team_slave_0 added
[  281.786295][ T9943] team0: Port device team_slave_1 added
[  281.903128][ T9943] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.918656][ T9943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.992872][ T9943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.085235][ T9943] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.092247][ T9943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.167517][ T9943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.208829][ T5084] Bluetooth: hci2: command tx timeout
[  282.353091][ T5084] Bluetooth: hci1: command tx timeout
[  282.478228][T10010] loop2: detected capacity change from 0 to 32768
[  282.549636][T10010] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  282.651218][T10010] XFS (loop2): Ending clean mount
[  282.656842][ T9897] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  282.709670][ T9943] hsr_slave_0: entered promiscuous mode
[  282.741494][ T9943] hsr_slave_1: entered promiscuous mode
[  282.763525][   T28] audit: type=1804 audit(1779284196.478:32): pid=10010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1075" name="/newroot/293/file1/file1" dev="loop2" ino=6150 res=1 errno=0
[  282.786601][ T9943] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  282.797096][ T9943] Cannot create hsr debugfs directory
[  282.806113][ T9897] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  282.877615][ T5779] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  283.154007][ T9897] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  283.246464][ T9897] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  284.130030][ T9897] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.247703][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  284.268665][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  284.296200][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  284.305428][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  284.325475][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  284.338937][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  284.438629][   T51] Bluetooth: hci1: command tx timeout
[  284.446157][T10032] loop2: detected capacity change from 0 to 32768
[  284.460397][ T9897] 8021q: adding VLAN 0 to HW filter on device team0
[  284.520843][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.528226][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.534087][T10032] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  284.588541][T10032] XFS (loop2): Ending clean mount
[  284.789559][ T5779] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  284.825035][ T9943] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  284.839164][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.846360][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.883817][ T9943] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  284.908611][ T9943] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  284.998743][ T9943] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  285.091084][ T1031] hsr_slave_0: left promiscuous mode
[  285.118283][ T1031] hsr_slave_1: left promiscuous mode
[  285.140891][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  285.148662][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_0
[  285.163178][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  285.171771][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_1
[  285.191409][ T1031] bridge_slave_1: left allmulticast mode
[  285.197548][ T1031] bridge_slave_1: left promiscuous mode
[  285.204362][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.217749][ T1031] bridge_slave_0: left allmulticast mode
[  285.224175][ T1031] bridge_slave_0: left promiscuous mode
[  285.230058][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.267687][ T1031] veth1_macvtap: left promiscuous mode
[  285.273759][ T1031] veth0_macvtap: left promiscuous mode
[  285.279533][ T1031] veth1_vlan: left promiscuous mode
[  285.285518][ T1031] veth0_vlan: left promiscuous mode
[  285.597112][T10057] loop2: detected capacity change from 0 to 512
[  285.668560][T10057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.681436][T10057] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.717425][T10057] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  285.788819][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.442946][   T51] Bluetooth: hci0: command tx timeout
[  286.518739][ T5564] IPVS: starting estimator thread 0...
[  286.528763][T10070] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  286.632904][T10072] IPVS: using max 16 ests per chain, 38400 per kthread
[  286.695543][T10074] loop2: detected capacity change from 0 to 512
[  286.726177][T10074] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  286.769623][T10074] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.1088: bad orphan inode 131083
[  286.796607][T10074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.827614][ T1031] team0 (unregistering): Port device team_slave_1 removed
[  286.892901][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.920291][ T1031] team0 (unregistering): Port device team_slave_0 removed
[  287.019224][ T1031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  287.138009][ T1031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  287.142637][T10079] loop2: detected capacity change from 0 to 64
[  287.827037][ T1031] bond0 (unregistering): Released all slaves
[  288.367531][T10039] chnl_net:caif_netlink_parms(): no params data found
[  288.488589][ T1031] IPVS: stop unused estimator thread 0...
[  288.513039][   T51] Bluetooth: hci0: command tx timeout
[  288.550132][ T9943] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.644619][ T9943] 8021q: adding VLAN 0 to HW filter on device team0
[  288.656079][T10039] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.664068][T10039] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.671458][T10039] bridge_slave_0: entered allmulticast mode
[  288.680396][T10039] bridge_slave_0: entered promiscuous mode
[  288.714114][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.721263][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.754718][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.761926][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.827657][ T2980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.851697][T10039] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.860592][T10039] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.870438][T10039] bridge_slave_1: entered allmulticast mode
[  288.879134][T10039] bridge_slave_1: entered promiscuous mode
[  288.967303][ T2980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.048291][ T2980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.089152][T10039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  289.102097][T10039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  289.149346][T10039] team0: Port device team_slave_0 added
[  289.197807][ T2980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.216034][T10039] team0: Port device team_slave_1 added
[  289.257372][ T9897] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.288715][T10039] batman_adv: batadv0: Adding interface: batadv_slave_0
[  289.296171][T10039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  289.333374][T10039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  289.378412][T10039] batman_adv: batadv0: Adding interface: batadv_slave_1
[  289.403444][T10039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  289.434899][T10039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  289.651067][T10039] hsr_slave_0: entered promiscuous mode
[  289.670415][T10039] hsr_slave_1: entered promiscuous mode
[  289.677533][T10039] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  289.686554][T10039] Cannot create hsr debugfs directory
[  290.047939][ T9943] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.458020][ T9897] veth0_vlan: entered promiscuous mode
[  290.531621][ T9897] veth1_vlan: entered promiscuous mode
[  290.608590][   T51] Bluetooth: hci0: command tx timeout
[  290.762538][ T9897] veth0_macvtap: entered promiscuous mode
[  290.802842][T10039] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  290.813399][T10039] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  290.823759][T10039] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  290.863159][ T9897] veth1_macvtap: entered promiscuous mode
[  290.871295][T10039] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  290.981334][ T9897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.997084][ T9897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.008495][ T9897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.019061][ T9897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.030385][ T9897] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.073092][ T9897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.084128][ T9897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.095678][ T9897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.106629][ T9897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.118778][ T9897] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.187215][ T9897] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.200995][ T9897] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.213258][ T9897] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.222106][ T9897] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.248986][ T9943] veth0_vlan: entered promiscuous mode
[  291.279307][ T9943] veth1_vlan: entered promiscuous mode
[  291.337473][ T2980] hsr_slave_0: left promiscuous mode
[  291.354721][ T2980] hsr_slave_1: left promiscuous mode
[  291.361323][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.378799][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_0
[  291.388466][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.406357][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_1
[  291.415176][ T2980] bridge_slave_1: left allmulticast mode
[  291.420882][ T2980] bridge_slave_1: left promiscuous mode
[  291.427070][ T2980] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.457384][ T2980] bridge_slave_0: left allmulticast mode
[  291.470443][ T2980] bridge_slave_0: left promiscuous mode
[  291.477617][ T2980] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.530439][ T2980] veth1_macvtap: left promiscuous mode
[  291.538621][ T2980] veth0_macvtap: left promiscuous mode
[  291.546764][ T2980] veth1_vlan: left promiscuous mode
[  291.552513][ T2980] veth0_vlan: left promiscuous mode
[  291.938592][ T2980] bond1 (unregistering): Released all slaves
[  292.659391][ T2980] team0 (unregistering): Port device team_slave_1 removed
[  292.672936][   T51] Bluetooth: hci0: command tx timeout
[  292.725535][ T2980] team0 (unregistering): Port device team_slave_0 removed
[  292.787404][ T2980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  293.332205][ T2980] bond0 (unregistering): Released all slaves
[  293.695096][ T9943] veth0_macvtap: entered promiscuous mode
[  293.752076][ T9943] veth1_macvtap: entered promiscuous mode
[  293.789100][T10039] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.806555][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.826910][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.890414][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.892055][T10039] 8021q: adding VLAN 0 to HW filter on device team0
[  293.909440][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.919497][ T9943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.932276][ T9943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.948437][ T9943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  293.959110][ T9943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.971072][ T9943] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.986095][ T9943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  293.997232][ T9943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.011914][ T9943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  294.023905][ T9943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.039786][ T9943] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.059374][ T9943] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.074140][ T9943] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.083546][ T9943] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.092291][ T9943] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.116071][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.124030][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.134238][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.141537][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.661557][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.697668][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.751019][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.781633][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.954768][ T2990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.041281][T10039] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.253808][ T2990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.312479][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1055'.
[  295.353017][T10177] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1055'.
[  295.425581][ T2990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.720047][ T2990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.765146][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1094'.
[  296.265684][T10039] veth0_vlan: entered promiscuous mode
[  296.305809][T10039] veth1_vlan: entered promiscuous mode
[  296.480197][T10039] veth0_macvtap: entered promiscuous mode
[  296.702484][T10039] veth1_macvtap: entered promiscuous mode
[  296.905215][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.931376][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.953013][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.998458][ T5812] ------------[ cut here ]------------
[  297.004508][ T5812] sysfs group 'power' not found for kobject 'ueagle-atm!eagleI.fw'
[  297.017472][ T5829] usb 3-1: [UEAGLE-ATM] firmware is not available
[  297.027192][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.042828][ T5812] WARNING: CPU: 1 PID: 5812 at fs/sysfs/group.c:284 sysfs_remove_group+0x178/0x2a0
[  297.052222][ T5812] Modules linked in:
[  297.056369][ T5812] CPU: 1 PID: 5812 Comm: kworker/1:4 Not tainted syzkaller #0
[  297.064596][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  297.074963][ T5812] Workqueue: events request_firmware_work_func
[  297.081191][ T5812] RIP: 0010:sysfs_remove_group+0x178/0x2a0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  297.087120][ T5812] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 0a 1e c9 ff 49 8b 17 48 c7 c7 c0 bc da 8a 48 89 de e8 28 98 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 92 e2 70 ff
[  297.106894][ T5812] RSP: 0018:ffffc90004a4f800 EFLAGS: 00010246
[  297.113050][ T5812] RAX: b2ad847eecde9400 RBX: ffffffff8b41cb60 RCX: ffff88805f595a00
[  297.121074][ T5812] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  297.129133][ T5812] RBP: dffffc0000000000 R08: ffff8880b8f28c13 R09: 1ffff110171e5182
[  297.133411][T10039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  297.137232][ T5812] R10: dffffc0000000000 R11: ffffed10171e5183 R12: 1ffffffff1683970
[  297.156109][ T5812] R13: 0000000000000001 R14: ffff88805e751000 R15: ffff88802e5a7008
[  297.164849][ T5812] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  297.174115][ T5812] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  297.180834][ T5812] CR2: 00005567fe841950 CR3: 000000003024f000 CR4: 00000000003506e0
[  297.188908][ T5812] DR0: 0000000000000000 DR1: 0000000000000958 DR2: 0000000000000000
[  297.197054][ T5812] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  297.203664][T10039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.205190][ T5812] Call Trace:
[  297.218318][ T5812]  <TASK>
[  297.221282][ T5812]  ? sysfs_unmerge_group+0x10d/0x130
[  297.226677][ T5812]  device_del+0x251/0x910
[  297.231078][ T5812]  ? kill_device+0x160/0x160
[  297.236019][ T5812]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[  297.242050][ T5812]  ? _raw_spin_unlock+0x40/0x40
[  297.247105][ T5812]  ? complete_all+0xd0/0x1d0
[  297.251964][ T5812]  firmware_fallback_sysfs+0x682/0x930
[  297.257598][ T5812]  _request_firmware+0xf27/0x1510
[  297.262817][ T5812]  ? request_firmware+0x50/0x50
[  297.268387][ T5812]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  297.274663][ T5812]  ? read_lock_is_recursive+0x20/0x20
[  297.280098][ T5812]  request_firmware_work_func+0xb0/0x1b0
[  297.285897][ T5812]  ? process_scheduled_works+0x96f/0x15d0
[  297.291679][ T5812]  process_scheduled_works+0xa5d/0x15d0
[  297.297363][ T5812]  ? worker_attach_to_pool+0x380/0x380
[  297.302940][ T5812]  ? assign_work+0x3d2/0x5d0
[  297.304593][T10039] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.307562][ T5812]  worker_thread+0xa55/0xfc0
[  297.319518][ T5812]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  297.325844][ T5812]  ? _raw_spin_unlock+0x40/0x40
[  297.330747][ T5812]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  297.337032][ T5812]  kthread+0x2fa/0x390
[  297.341140][ T5812]  ? pr_cont_work+0x560/0x560
[  297.346165][ T5812]  ? kthread_blkcg+0xd0/0xd0
[  297.350801][ T5812]  ret_from_fork+0x48/0x80
[  297.355560][ T5812]  ? kthread_blkcg+0xd0/0xd0
[  297.360187][ T5812]  ret_from_fork_asm+0x11/0x20
[  297.365047][ T5812]  </TASK>
[  297.368133][ T5812] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  297.375444][ T5812] CPU: 1 PID: 5812 Comm: kworker/1:4 Not tainted syzkaller #0
[  297.382931][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  297.393011][ T5812] Workqueue: events request_firmware_work_func
[  297.399219][ T5812] Call Trace:
[  297.402526][ T5812]  <TASK>
[  297.405510][ T5812]  dump_stack_lvl+0x18c/0x250
[  297.410238][ T5812]  ? show_regs_print_info+0x20/0x20
[  297.415470][ T5812]  ? load_image+0x420/0x420
[  297.420021][ T5812]  panic+0x2dc/0x730
[  297.423944][ T5812]  ? bpf_jit_dump+0xd0/0xd0
[  297.428472][ T5812]  ? ret_from_fork_asm+0x11/0x20
[  297.433428][ T5812]  __warn+0x2e0/0x470
[  297.437511][ T5812]  ? sysfs_remove_group+0x178/0x2a0
[  297.442734][ T5812]  ? sysfs_remove_group+0x178/0x2a0
[  297.447940][ T5812]  report_bug+0x2be/0x4f0
[  297.452304][ T5812]  ? sysfs_remove_group+0x178/0x2a0
[  297.457527][ T5812]  ? sysfs_remove_group+0x178/0x2a0
[  297.462730][ T5812]  ? sysfs_remove_group+0x17a/0x2a0
[  297.467957][ T5812]  handle_bug+0xcf/0x120
[  297.472230][ T5812]  exc_invalid_op+0x1a/0x50
[  297.476749][ T5812]  asm_exc_invalid_op+0x1a/0x20
[  297.481614][ T5812] RIP: 0010:sysfs_remove_group+0x178/0x2a0
[  297.487440][ T5812] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 0a 1e c9 ff 49 8b 17 48 c7 c7 c0 bc da 8a 48 89 de e8 28 98 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 92 e2 70 ff
[  297.507057][ T5812] RSP: 0018:ffffc90004a4f800 EFLAGS: 00010246
[  297.513136][ T5812] RAX: b2ad847eecde9400 RBX: ffffffff8b41cb60 RCX: ffff88805f595a00
[  297.521201][ T5812] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  297.529266][ T5812] RBP: dffffc0000000000 R08: ffff8880b8f28c13 R09: 1ffff110171e5182
[  297.537341][ T5812] R10: dffffc0000000000 R11: ffffed10171e5183 R12: 1ffffffff1683970
[  297.545422][ T5812] R13: 0000000000000001 R14: ffff88805e751000 R15: ffff88802e5a7008
[  297.553416][ T5812]  ? sysfs_unmerge_group+0x10d/0x130
[  297.558806][ T5812]  device_del+0x251/0x910
[  297.563163][ T5812]  ? kill_device+0x160/0x160
[  297.567769][ T5812]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[  297.573775][ T5812]  ? _raw_spin_unlock+0x40/0x40
[  297.578667][ T5812]  ? complete_all+0xd0/0x1d0
[  297.583286][ T5812]  firmware_fallback_sysfs+0x682/0x930
[  297.588775][ T5812]  _request_firmware+0xf27/0x1510
[  297.593833][ T5812]  ? request_firmware+0x50/0x50
[  297.598709][ T5812]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  297.604701][ T5812]  ? read_lock_is_recursive+0x20/0x20
[  297.610105][ T5812]  request_firmware_work_func+0xb0/0x1b0
[  297.615766][ T5812]  ? process_scheduled_works+0x96f/0x15d0
[  297.621493][ T5812]  process_scheduled_works+0xa5d/0x15d0
[  297.627158][ T5812]  ? worker_attach_to_pool+0x380/0x380
[  297.632641][ T5812]  ? assign_work+0x3d2/0x5d0
[  297.637263][ T5812]  worker_thread+0xa55/0xfc0
[  297.642577][ T5812]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  297.648486][ T5812]  ? _raw_spin_unlock+0x40/0x40
[  297.653352][ T5812]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  297.659387][ T5812]  kthread+0x2fa/0x390
[  297.663489][ T5812]  ? pr_cont_work+0x560/0x560
[  297.668184][ T5812]  ? kthread_blkcg+0xd0/0xd0
[  297.672793][ T5812]  ret_from_fork+0x48/0x80
[  297.677225][ T5812]  ? kthread_blkcg+0xd0/0xd0
[  297.681822][ T5812]  ret_from_fork_asm+0x11/0x20
[  297.686610][ T5812]  </TASK>
[  297.689900][ T5812] Kernel Offset: disabled
[  297.694413][ T5812] Rebooting in 86400 seconds..