last executing test programs:

2m12.741918715s ago: executing program 1 (id=594):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
setreuid(0xffffffffffffffff, 0xee00)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x0, 0x0})

2m12.450042379s ago: executing program 1 (id=598):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0)

2m12.19020898s ago: executing program 1 (id=601):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000280)={[{@barrier}, {@flushoncommit}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x74]}}, {@barrier}, {@flushoncommit}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x40000, 0x24)
pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d80)='./file0\x00', 0x16c1050, &(0x7f0000000140)=ANY=[], 0x1, 0x5da1, &(0x7f0000018940)="$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")
unlink(&(0x7f0000000180)='./file1\x00')
write$FUSE_LSEEK(r0, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x1}}, 0x18)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x558}}, 0x40)

2m9.882912526s ago: executing program 1 (id=623):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
syz_emit_ethernet(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)

2m8.83819631s ago: executing program 1 (id=627):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002540)=@newtaction={0x410, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x3fc, 0x1, [@m_xt={0x1c4, 0xa, 0x0, 0x0, {{0x7}, {0x164, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0xc}, @TCA_IPT_TARG={0x101, 0x6, {0x8001, 'nat\x00', 0xe, 0x1000, "5b17aa89d80870c15066789ffc3b484ddb037d507299171c05cbd077a4e3492a17ecb2370233755138b3858be560a8a0cb8e4bee920720c0d5e6d1fe7c870c1e2793e60016110210e803f409c55aaa647ce7884c4be946c031bdec6333ecd98218bc11cfd095bbcc90498390fcc856d393bf3c1e92685be4ff1b597283aabf6ce58602822569bafb50f79407eb936cd6ee006572c3448ff2386905dacded248e5a9de4a07552adf37b6249ad9805b37df81c593f6ceb55e10eaf311fb28e1ac22a8be3885042ff867e12aa3133d4adbf6729e09eac0862"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffd}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x39, 0x6, "60d8256d6e17304151fd4e116cd17e9a9916f46a1108fe35c2253eb9e0a39371696c312986c3e3f087692e934a942246981749736d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x120, 0x34, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x4, 0x0, 0x136bcb9c}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7f, 0x6, 0x3}, 0x21}}]}, {0x9d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52bef8df8dc2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0xb4, 0x9, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x3, 0x87f3, 0x6}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x9, 0x6, 0x3, 0x8000}}, @TCA_ACT_BPF_FD={0x8}]}, {0x41, 0x6, "a09e88b2fafe2ad0dddad3cdaa9b726cf5b56034a46fe446c7d19b5780d1bd141230a65f0db61f93ab839c730b3903572c517419564b6cfe47716614b3"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x60, 0xd, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x11, 0x6, "d53a6627b5c2b2c1126462fd28"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x410}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

2m8.23040999s ago: executing program 1 (id=635):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0xffffffff, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x10, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8d4}, 0x4000)

2m7.759568328s ago: executing program 32 (id=635):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0xffffffff, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x10, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8d4}, 0x4000)

1m30.291676315s ago: executing program 3 (id=877):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000640)={0x0, 0x3}, &(0x7f0000000680)=0x8)

1m30.124062969s ago: executing program 3 (id=879):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x27c, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x268, 0x1, [@m_gact={0x1e4, 0x17, 0x0, 0x0, {{0x9}, {0x4}, {0x1b5, 0x6, "0f617356f0a663079abe295a350af32575b7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224474cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51ba59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc16198b2cfa20bc906e08c92c0642310e03f00a0ed12baa1df64f1bf0502f23ff4d6a5e05aa81fa19a9b88c32227231211d5d298a3c63d5549b1a72ad3a2c2dbf727e06036e6f15f608bea0e2a8ff93600a6133a9b45faa6924e7b9e8756e78750bdef4103fcd162842f48260e1dbb952cf91a4fdf9ca11cc86255d345cc97e3e5a060faa5892b6b343ae47592ed09d5829b187941331c8c321997cbc0395a6658c85915c1468ea768127b402af42155e96f11ef5f95a4118370c736689c029238b89e6a7a47d06e553b3f1968de8d30df98c713bd5d18d8c5e00aee2d650046089d3fd1abf65c454e7e5f582e3e17fde068a7d8cfdaf8831aca9c839662d70f7a7893073ad4a108e44a105d7ec27"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_simple={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x19, 0x2, 0x6, 0x50, 0x5}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1m30.002103419s ago: executing program 3 (id=880):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
r1 = fanotify_init(0x44, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000c00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

1m29.002298749s ago: executing program 3 (id=885):
openat$binderfs(0xffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x800, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000700)={0xffffffffffffff8c, 0x7d, 0x0, {{0x500, 0xfd, 0x0, 0x3, {0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x61, '\xf8\xf6i\xfbqm\xcf1^\xca\xb3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xd5\x8cc\xd6C\x05\xc4\xd4\xf1\xf1\xc4\xae\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23e)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102)
mkdir(&(0x7f0000000500)='./bus\x00', 0x4)
readlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000540)=""/100, 0x64)
chdir(&(0x7f0000000040)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x189040, 0x10a)
fsync(r1)
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(r2, 0xee01, r3)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffff7}]})
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x4c)
rt_sigqueueinfo(0x0, 0x40, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x140f, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x94}, 0x0)

1m28.979966641s ago: executing program 3 (id=886):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

1m28.904931737s ago: executing program 3 (id=887):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)="7b69e4", 0x3}], 0x1}, 0x4008000)

1m13.832324515s ago: executing program 33 (id=887):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)="7b69e4", 0x3}], 0x1}, 0x4008000)

5.211249839s ago: executing program 2 (id=1417):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

4.726311359s ago: executing program 4 (id=1419):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, 0x0, 0x30004081)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

4.688063372s ago: executing program 5 (id=1420):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x1f0, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbfc, {}, [{0x1dc, 0x1, [@m_xt={0xcc, 0xa, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0xc}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffd}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x31, 0x6, "60d8256d6e17304151fd4e116cd17e9a9916f46a1108e086c3e3f087692e934a942246981749736d0076440000"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0xcc, 0x34, 0x0, 0x0, {{0x9}, {0x4}, {0x9d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52bef8df8dc2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x40, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x11, 0x6, "d580a546831400088caf95593b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'})
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
pwritev(r1, 0x0, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
mkdir(0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, 0x0, 0x0)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg$inet6(r2, 0x0, 0x0, 0xc8040)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r3, 0x4b3d, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebdbe429d"})
syz_emit_ethernet(0x7a, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1f}}}}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xff00)

4.624285257s ago: executing program 2 (id=1421):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="81b641f1f3", 0x5}], 0x1}, 0x48005)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000004580)=""/4105, 0x1009}], 0x1)

4.509603956s ago: executing program 4 (id=1422):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010)
recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000280)=""/143, 0x8f}, 0x4}], 0x1, 0x0, 0x0)

4.509236096s ago: executing program 0 (id=1423):
r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00'], 0x1})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_usb_connect(0x6, 0x3f, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x606840, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r5 = dup(r4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
write$6lowpan_enable(r5, 0x0, 0x0)
syz_io_uring_setup(0x694f, 0x0, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$inet(r9, 0x0, 0x0)

4.321802591s ago: executing program 4 (id=1424):
openat$binderfs(0xffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x800, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000700)={0xffffffffffffff8c, 0x7d, 0x0, {{0x500, 0xfd, 0x0, 0x3, {0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x61, '\xf8\xf6i\xfbqm\xcf1^\xca\xb3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xd5\x8cc\xd6C\x05\xc4\xd4\xf1\xf1\xc4\xae\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23e)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102)
mkdir(&(0x7f0000000500)='./bus\x00', 0x4)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
readlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000540)=""/100, 0x64)
chdir(&(0x7f0000000040)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x189040, 0x10a)
fsync(r1)
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(r2, 0xee01, r3)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffff7}]})
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x4c)
rt_sigqueueinfo(0x0, 0x40, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x140f, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x94}, 0x0)

4.034732415s ago: executing program 4 (id=1425):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_io_uring_setup(0x67ca, &(0x7f00000006c0)={0x0, 0x5dda, 0x10100, 0x0, 0x268, 0x0, r3}, &(0x7f0000000140), &(0x7f00000000c0)=<r5=>0x0)
syz_io_uring_setup(0x80c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40000000, 0x54}, &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000040))
read$FUSE(r2, &(0x7f0000000740)={0x2020}, 0x2020)
syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
io_uring_enter(r4, 0x381b, 0x0, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000340), 0x11000)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$unix(0x1, 0x2, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r11, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r15=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="f7ff0000", @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r15, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
close(r13)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r16 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r16, &(0x7f0000000080)={0xc3ff, 0x1, 0x3, 0x1}, 0x8)

3.798235904s ago: executing program 5 (id=1426):
r0 = socket(0xa, 0x3, 0x3a)
sendmmsg$unix(r0, &(0x7f0000009d40)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000340)="e56399f8ad", 0x5}], 0x1, &(0x7f0000007f00)=ANY=[@ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="0c00000011004886010000001800"], 0xe0}}], 0x1, 0x0)

3.777356465s ago: executing program 0 (id=1427):
r0 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100))

3.579987361s ago: executing program 0 (id=1428):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x3b, 0x0, "9ded9d61b06dc81d103e0f6900b695edeff80e01663328c082467cf0b42433fa4d47dd6a7ee2e05eba7dfa68546306f79be4052eb940143e88471c090e7c9ac0a4089613564c75d3a57acf6eb249f175"}, 0xd8)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r1, 0x4, 0x40800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r2, 0x2000009)
sendfile(r1, r2, 0x0, 0x7ffff004)

3.446073402s ago: executing program 5 (id=1429):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8000c, 0x62}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x840)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
syz_emit_ethernet(0x7e, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f0000001140)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395e01f1e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba17281680c05bcb51e638e833e81bfa5c3688803"})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000002880)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

3.437325252s ago: executing program 2 (id=1430):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, 0x0, 0x30004081)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

3.405585166s ago: executing program 0 (id=1431):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0)
syz_emit_ethernet(0x9e, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000400}, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f000000c0c0))
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)

2.73037988s ago: executing program 5 (id=1432):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010)
recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000280)=""/143, 0x8f}, 0x4}], 0x1, 0x0, 0x0)

2.687999373s ago: executing program 2 (id=1433):
openat$binderfs(0xffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x800, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000700)={0xffffffffffffff8c, 0x7d, 0x0, {{0x500, 0xfd, 0x0, 0x3, {0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x61, '\xf8\xf6i\xfbqm\xcf1^\xca\xb3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xd5\x8cc\xd6C\x05\xc4\xd4\xf1\xf1\xc4\xae\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23e)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102)
mkdir(&(0x7f0000000500)='./bus\x00', 0x4)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
readlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000540)=""/100, 0x64)
chdir(&(0x7f0000000040)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x189040, 0x10a)
fsync(r1)
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(r2, 0xee01, r3)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffff7}]})
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x4c)
rt_sigqueueinfo(0x0, 0x40, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x140f, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x94}, 0x0)

2.556588364s ago: executing program 5 (id=1434):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_open_dev$sg(0x0, 0x0, 0x38dd80)
r0 = socket$inet6(0xa, 0xa, 0x400000)
sendmmsg$inet6(r0, 0x0, 0x0, 0xc8000)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080)
syz_open_procfs$pagemap(0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00')
r3 = socket(0x18, 0x0, 0x1)
connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e)
sendfile(r3, r2, 0x0, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000100)='./file0\x00')
r5 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$FUSE_CREATE_OPEN(r5, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0)
writev(r5, &(0x7f0000000280)=[{&(0x7f0000000300)="3018287d3bdaafc10a326f12d06dc47c9f7da25aca162bed5849489b6ef6cbc49bfe1de48b8f8d377e6448a6fb2b0d97f258ddd0ff1c61b460857f44ae8d6f753cbe4fd316c7988b445e1a10d77d2697c70aa3c51f06f322e9af408efde2ba4dff86346a8a78c08e4b7040a52c66492b325edd27b537b6a2ff493655f98af0a2302653a8fd0837e617", 0x89}, {&(0x7f0000000000)="40896ab0430c512d80d4632c3decdf5d039826313eab16cd00ec2dbc8a4966ed345d04e0c67491", 0x27}, {&(0x7f00000000c0)="08f71e19cdc4e15b71d088889f22ff63d767e0c6888b5f9bf27178ad5fcb4024d004acca963226", 0x27}, {&(0x7f00000003c0)="c5a290392355e4a47f1bd1564374630a1a8ef65ba69cc769d495356581ee394892fa5c00e6641da0dc90f3085737ec498d2ce71e9bc40e08a714705a90039974f61c40e8a7dd2b3b3b43de9458b544fa3e24275f152ab5808abb991b4f53600a0e9bff17ecd6bc048b36b27fe7a5fa0ed422f68788ad5792f936f6b2de56c1d012882f", 0x83}, {&(0x7f00000005c0)="c1c0370dace2908537652be32e1793108774471ffbcb1185c5733ba059d4dfa4847a5f99ef008de9682a557e795026d523e49db1067bd3da58cbfd06ddcb2f726f1fa596627759a5af61c2131452e0d9522b6a22767efcc12fa531a01895a9feeeb4a60b92462668e7f88631f53aafd316ba6c42a82ed41153d74d617c6c773b5b62ad82c98455846dd8a9126bb10b57b338fc", 0x93}, {&(0x7f0000000680)="38a164b611cecf7e56544d892167ecdf1e06bb46c1418525b56b55b0273c6a5c6b7ede90652329957289da5127d3fbc404b8184382affd759dea2ee1b972e1ed9cc11be1be5c9f1a82911919764cb483032a5f90d702252f301554f7de3af7bdb257b7ca7b999e95052a0821a824244ffb27f230c7de4dcba495784d50c4452a47d92b3291397a207071e08791a9d35c5191ca7300ab1596922f779b42f82534", 0xa0}, {&(0x7f0000000780)="3fa77b16415aca9a43eb91d4ef2b146955adb853dd5263dcfa986524ade79a4adbc80b3e47b1bd01076220c476c83216292f214349bbfda7ecbcddf1a9e3038f2882f0e239460100978fcf6fe51ab36f576f7393ba178d085b4eda3f53cdbc72a135aef232269c8d416b048781ba05664512839f5806f6774decf8cfcda6a6921ae1b4b3fed3153796d5f841172702b0054334a58d8abc6b8f556a7b4ad3c73cdee513e820ca818fadfc8ac82561ffcc356fb5b746b749fbeeafabb236713d72f28b34030b934db53088d2424ff49ea144f663b839591333af36197eb453959be84d08c6f5a8d0d1b4902e599edf8bd46a57b998904a25f26a", 0xf9}], 0x7)
sendfile(r5, r5, &(0x7f0000000080), 0x7f04)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0)

1.786249026s ago: executing program 2 (id=1435):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x1, 0x0, 0x0, 0xc, 0x2}]}}, 0x0, 0x26}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, &(0x7f0000000100)})
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041)
connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="550a00000000000061115000c00000001800000000000000fff200009500000027bb13b836f0a400000000b010fe29e92da7431695fed95bf5423dbaa13cce0bd44c8674e5d87728e74a2b3c434682343d39a0a55d4f53d5b2566fb1f2cf1adcaf0b84ca4aa47fc7907add115682d546b1650ff0203ea4471c3628d26a28fd00000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="ad4300000000009c260821"], 0x14}}, 0x0)

1.785938296s ago: executing program 0 (id=1436):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
shutdown(r1, 0x1)

1.757704558s ago: executing program 5 (id=1437):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x40, 0x5, 0x1, 0x13, 0x8, 0x5, 0x8, 0x3, 0xa, 0xfd, 0x1081, 0x1, 0x1, 0x7, 0x6, 0x101, 0xf7fffffe, 0x7f, 0x3, 0x40000003, 0x8c, 0xca9f, 0x3, 0x20001e58, 0xb, 0xe66, 0x3, 0x8, 0x4085, 0x0, 0x1]})

1.749367709s ago: executing program 4 (id=1438):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="81b641f1f3", 0x5}], 0x1}, 0x48005)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000004580)=""/4105, 0x1009}], 0x1)

1.558250245s ago: executing program 0 (id=1439):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsmount(r0, 0x0, 0x5)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)
syz_usbip_server_init(0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = eventfd(0x5)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={r5, 0x7, 0x2, r5})
read$eventfd(r5, &(0x7f0000000200), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='itimer_state\x00', r2}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', <r8=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r8, 0x11, 0x6, @random}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)

20.443289ms ago: executing program 2 (id=1440):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x110)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1000, &(0x7f0000000040), &(0x7f0000000a00)=""/4096, 0x7, 0x0, 0x0, 0x600, &(0x7f0000001a00), &(0x7f0000002a00)="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", 0x4, 0x0, 0x2}, 0x4c)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2}, 0x38)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x25)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x100000000, 0x4}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xbd000000}}, 0xe4)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
openat$ptmx(0xffffff9c, 0x0, 0x200, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=<r3=>0x0, &(0x7f00000006c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0)
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000008180)={0x2020}, 0x2020)

0s ago: executing program 4 (id=1441):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, 0x0, 0x30004081)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)

kernel console output (not intermixed with test programs):

fast_commit support!
[  120.151400][ T6546] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  120.265807][ T6546] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  120.334752][ T6551] loop1: detected capacity change from 0 to 32768
[  120.355095][ T6551] (syz.1.293,6551,0):ocfs2_sb_probe:755 ERROR: incompatible version: 2.33686018
[  120.368042][ T6551] (syz.1.293,6551,0):ocfs2_sb_probe:768 ERROR: This is an ocfs v1 filesystem which must be upgraded before mounting with ocfs v2
[  120.382448][ T6551] (syz.1.293,6551,0):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  120.391006][ T6551] (syz.1.293,6551,0):ocfs2_fill_super:1178 ERROR: status = -22
[  120.395733][ T6546] EXT4-fs (loop0): 1 truncate cleaned up
[  120.431150][ T6546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.641347][ T6564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.296'.
[  120.835611][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.141361][   T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  121.331201][   T23] usb 2-1: Using ep0 maxpacket: 16
[  121.359112][   T23] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  121.406843][   T23] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  121.417134][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.426115][   T23] usb 2-1: Product: syz
[  121.440577][   T23] usb 2-1: Manufacturer: syz
[  121.450839][   T23] usb 2-1: SerialNumber: syz
[  121.480199][   T23] usb 2-1: config 0 descriptor??
[  121.809244][ T6605] loop0: detected capacity change from 0 to 2048
[  121.892833][ T6605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.913773][ T6608] loop2: detected capacity change from 0 to 128
[  121.942930][   T28] audit: type=1800 audit(1756163443.832:20): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.308" name="file1" dev="loop0" ino=15 res=0 errno=0
[  121.988381][ T6604] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  122.038944][   T28] audit: type=1800 audit(1756163443.882:21): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.308" name="file1" dev="loop0" ino=15 res=0 errno=0
[  122.075001][ T6605] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  122.128582][ T6605] EXT4-fs (loop0): This should not happen!! Data will be lost
[  122.128582][ T6605] 
[  122.140802][ T6605] EXT4-fs (loop0): Total free blocks count 0
[  122.147113][ T6605] EXT4-fs (loop0): Free/Dirty block details
[  122.173546][ T6605] EXT4-fs (loop0): free_blocks=4096
[  122.178887][ T6605] EXT4-fs (loop0): dirty_blocks=16
[  122.208092][ T6605] EXT4-fs (loop0): Block reservation details
[  122.218233][ T6605] EXT4-fs (loop0): i_reserved_data_blocks=1
[  122.222368][ T6611] loop3: detected capacity change from 0 to 4096
[  122.275580][  T145] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  122.297942][ T5795] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  122.783893][ T6618] loop2: detected capacity change from 0 to 32768
[  122.804697][ T6618] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.311 (6618)
[  122.860086][ T6618] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  122.880293][ T6618] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  122.896039][ T6618] BTRFS info (device loop2): turning on flush-on-commit
[  122.910585][ T6618] BTRFS info (device loop2): doing ref verification
[  122.926669][ T6618] BTRFS info (device loop2): use no compression
[  122.948239][ T6618] BTRFS info (device loop2): force clearing of disk cache
[  122.957411][ T6618] BTRFS info (device loop2): max_inline at 4096
[  122.965761][ T6618] BTRFS info (device loop2): using free space tree
[  123.107363][ T6618] BTRFS info (device loop2): enabling ssd optimizations
[  123.119156][ T6618] BTRFS info (device loop2): auto enabling async discard
[  123.147994][ T6618] BTRFS info (device loop2): rebuilding free space tree
[  123.842724][ T6663] loop3: detected capacity change from 0 to 2048
[  123.995536][ T6666] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  124.028438][   T23] usb 2-1: USB disconnect, device number 3
[  124.186511][ T6668] loop0: detected capacity change from 0 to 1024
[  124.275469][ T6668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  124.304307][ T6668] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.402106][ T6668] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: comm syz.0.324: lblock 0 mapped to illegal pblock 0 (length 1)
[  124.421173][   T28] audit: type=1800 audit(1756163446.292:22): pid=6668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.324" name="file1" dev="loop0" ino=15 res=0 errno=0
[  124.448016][ T5785] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  124.480099][ T6668] EXT4-fs error (device loop0): ext4_ext_remove_space:2929: inode #15: comm syz.0.324: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  124.514190][ T6678] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: comm syz.0.324: lblock 0 mapped to illegal pblock 0 (length 1)
[  124.622826][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  124.652835][ T6676] loop1: detected capacity change from 0 to 8192
[  124.745988][ T6676] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  125.054774][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'.
[  125.115848][ T6691] netlink: 104 bytes leftover after parsing attributes in process `syz.1.330'.
[  125.258948][ T6695] binder: 6693:6695 unknown command 1074553619
[  125.271701][ T6695] binder: 6693:6695 ioctl c0306201 200000000540 returned -22
[  125.448384][ T6700] loop1: detected capacity change from 0 to 1024
[  125.521770][ T6700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.523131][ T6702] loop0: detected capacity change from 0 to 4096
[  125.547302][ T6700] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.596974][ T6700] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.334: bg 0: block 480: padding at end of block bitmap is not set
[  125.649305][ T6702] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  125.678540][ T6700] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117
[  125.691742][ T6700] EXT4-fs (loop1): This should not happen!! Data will be lost
[  125.691742][ T6700] 
[  125.787140][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.254418][ T6725] netlink: 56 bytes leftover after parsing attributes in process `syz.2.344'.
[  126.375276][ T6726] loop0: detected capacity change from 0 to 4096
[  126.402947][ T6726] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  126.442812][ T6730] input: syz1 as /devices/virtual/input/input6
[  126.549517][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'.
[  126.622827][   T28] audit: type=1804 audit(1756163448.512:23): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.345" name="/newroot/82/file0/bus" dev="loop0" ino=33 res=1 errno=0
[  127.071728][ T6749] process 'syz.0.356' launched './file0' with NULL argv: empty string added
[  127.177979][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'.
[  127.297864][ T6759] netlink: 56 bytes leftover after parsing attributes in process `syz.2.360'.
[  127.549859][ T6767] syz.0.362 uses obsolete (PF_INET,SOCK_PACKET)
[  127.587856][ T6767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.362'.
[  128.077144][   T28] audit: type=1326 audit(1756163449.972:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  128.129964][   T28] audit: type=1326 audit(1756163449.972:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  128.153014][   T28] audit: type=1326 audit(1756163449.972:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  128.191406][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  128.198040][   T28] audit: type=1326 audit(1756163449.972:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  128.233878][   T28] audit: type=1326 audit(1756163449.972:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  128.261936][   T28] audit: type=1326 audit(1756163449.972:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  128.290950][   T28] audit: type=1326 audit(1756163449.972:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  128.324436][   T28] audit: type=1326 audit(1756163449.972:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6788 comm="syz.2.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  128.381145][    T9] usb 1-1: Using ep0 maxpacket: 8
[  128.388500][    T9] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  128.401537][    T9] usb 1-1: config 0 has no interface number 0
[  128.435527][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  128.451163][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.465719][ T6800] 9pnet: p9_errstr2errno: server reported unknown error 18446744
[  128.469581][    T9] usb 1-1: Product: syz
[  128.479712][    T9] usb 1-1: Manufacturer: syz
[  128.489831][    T9] usb 1-1: SerialNumber: syz
[  128.502833][    T9] usb 1-1: config 0 descriptor??
[  128.523394][ T6797] loop2: detected capacity change from 0 to 8192
[  128.681844][ T6797] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  128.699513][ T6797] FAT-fs (loop2): Filesystem has been set read-only
[  128.728676][ T6797] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  128.732275][    T9] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[  128.761149][ T6797] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  128.761910][    T9] usb 1-1: No valid video chain found.
[  128.786341][ T6797] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  128.827528][    T9] usb 1-1: USB disconnect, device number 5
[  128.976916][ T6811] netlink: 48 bytes leftover after parsing attributes in process `syz.2.383'.
[  128.986128][ T6811] netlink: 48 bytes leftover after parsing attributes in process `syz.2.383'.
[  129.074267][ T6813] loop3: detected capacity change from 0 to 1024
[  130.006933][ T6842] loop0: detected capacity change from 0 to 1024
[  130.024998][ T6845] loop3: detected capacity change from 0 to 512
[  130.032951][ T6842] EXT4-fs: Ignoring removed nobh option
[  130.056826][ T6842] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  130.094884][ T6842] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.397: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  130.161807][ T6825] loop2: detected capacity change from 0 to 32768
[  130.165706][   T28] kauditd_printk_skb: 16 callbacks suppressed
[  130.165724][   T28] audit: type=1800 audit(1756163452.042:48): pid=6837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.396" name="/newroot/93/bus" dev="tmpfs" ino=522 res=0 errno=0
[  130.197675][ T6825] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.390 (6825)
[  130.254954][ T6842] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.397: couldn't read orphan inode 11 (err -117)
[  130.325602][ T6842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.346780][ T6825] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  130.394719][ T6825] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  130.403676][ T6845] EXT4-fs (loop3): Test dummy encryption mode enabled
[  130.430255][ T6845] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  130.451352][ T6825] BTRFS info (device loop2): turning on flush-on-commit
[  130.496153][ T6825] BTRFS info (device loop2): doing ref verification
[  130.517584][ T6845] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.398: corrupted in-inode xattr: e_name out of bounds
[  130.533429][ T6825] BTRFS info (device loop2): use no compression
[  130.539751][ T6825] BTRFS info (device loop2): force clearing of disk cache
[  130.583307][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.601839][ T6825] BTRFS info (device loop2): max_inline at 4096
[  130.608185][ T6825] BTRFS info (device loop2): using free space tree
[  130.636511][ T6845] EXT4-fs (loop3): 1 orphan inode deleted
[  130.682642][ T6845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.860303][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.881330][ T6825] BTRFS info (device loop2): enabling ssd optimizations
[  130.921404][ T6825] BTRFS info (device loop2): auto enabling async discard
[  130.949068][ T6825] BTRFS info (device loop2): rebuilding free space tree
[  131.518504][ T6890] loop1: detected capacity change from 0 to 2048
[  132.249031][ T6909] loop1: detected capacity change from 0 to 2048
[  132.272645][ T6909] EXT4-fs: Ignoring removed oldalloc option
[  132.379716][ T6908] loop3: detected capacity change from 0 to 4096
[  132.430275][ T6909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.587158][ T6909] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  132.621673][ T6909] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28
[  132.671549][ T6909] EXT4-fs (loop1): This should not happen!! Data will be lost
[  132.671549][ T6909] 
[  132.705095][ T6909] EXT4-fs (loop1): Total free blocks count 0
[  132.735313][ T6909] EXT4-fs (loop1): Free/Dirty block details
[  132.762093][ T6909] EXT4-fs (loop1): free_blocks=66060288
[  132.769223][ T6909] EXT4-fs (loop1): dirty_blocks=32
[  132.784644][ T5785] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  132.828013][ T6909] EXT4-fs (loop1): Block reservation details
[  132.839601][ T6909] EXT4-fs (loop1): i_reserved_data_blocks=2
[  132.896434][ T6915] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  132.925186][   T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  132.938795][   T50] Bluetooth: hci3: Injecting HCI hardware error event
[  132.947856][   T50] Bluetooth: hci3: hardware error 0x00
[  133.054807][ T6921] loop0: detected capacity change from 0 to 512
[  133.088667][ T6921] EXT4-fs: Ignoring removed i_version option
[  133.165289][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  133.173452][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  133.175222][ T6921] EXT4-fs (loop0): invalid first ino: 0
[  133.290041][ T6923] loop3: detected capacity change from 0 to 2364
[  133.807301][ T6937] loop1: detected capacity change from 0 to 2048
[  133.879142][ T6937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.934600][ T6937] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.071597][ T6937] fs-verity: sha512 using implementation "sha512-avx2"
[  134.120223][ T6949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.430'.
[  134.624100][ T6937] fs-verity (loop1, inode 15): Error -4 building Merkle tree
[  134.851726][ T6960] loop2: detected capacity change from 0 to 1024
[  134.860588][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.944467][ T6960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.086416][   T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  135.233463][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.555791][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  135.561650][ T6973] warning: `syz.2.439' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  135.695467][ T6977] loop2: detected capacity change from 0 to 128
[  135.738464][ T6977] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  135.757786][ T6977] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  135.761221][    T9] usb 2-1: Using ep0 maxpacket: 16
[  135.798111][    T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  135.807137][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.819661][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  135.831739][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  135.841962][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.850017][    T9] usb 2-1: Product: syz
[  135.854348][    T9] usb 2-1: Manufacturer: syz
[  135.859004][    T9] usb 2-1: SerialNumber: syz
[  136.083710][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  136.268481][ T6985] loop2: detected capacity change from 0 to 2048
[  136.300486][    T9] usb 2-1: 0:2 : does not exist
[  136.324380][ T6985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.366274][ T6985] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.771517][ T6996] input: syz1 as /devices/virtual/input/input7
[  137.134519][    T9] usb 2-1: USB disconnect, device number 4
[  137.170226][ T6985] fs-verity (loop2, inode 15): Error -4 building Merkle tree
[  137.362445][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.989401][ T7021] loop2: detected capacity change from 0 to 4096
[  138.022186][ T7021] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  138.275204][ T7029] input: syz1 as /devices/virtual/input/input8
[  138.886616][ T7046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  138.894432][ T7046] IPv6: NLM_F_CREATE should be set when creating new route
[  139.062731][ T7050] loop2: detected capacity change from 0 to 2364
[  139.075235][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.473'.
[  139.090802][ T7051] netlink: 32 bytes leftover after parsing attributes in process `syz.3.473'.
[  139.588540][ T7063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.477'.
[  139.638611][ T7063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.477'.
[  139.693645][ T7068] input: syz1 as /devices/virtual/input/input9
[  140.357199][ T7086] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2312746774 (148015793536 ns) > initial count (125048634752 ns). Using initial count to start timer.
[  140.572597][ T7096] comedi comedi0: comedi_parport: I/O port conflict (0xffffffff80000000,3)
[  140.925593][ T7106] loop0: detected capacity change from 0 to 256
[  140.981106][ T7106] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  141.030432][ T7106] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  141.076944][ T7106] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  141.219059][ T7112] netlink: 76 bytes leftover after parsing attributes in process `syz.1.500'.
[  142.182156][ T7138] input: syz1 as /devices/virtual/input/input10
[  142.708681][ T7145] loop1: detected capacity change from 0 to 32768
[  142.772438][ T7145] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  142.947191][ T5784] ocfs2: Unmounting device (7,1) on (node local)
[  143.088221][ T7157] loop1: detected capacity change from 0 to 128
[  143.941474][ T5876] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  144.141217][ T5876] usb 2-1: Using ep0 maxpacket: 32
[  144.148392][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.160051][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.169980][ T5876] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  144.179109][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.189332][ T5876] usb 2-1: config 0 descriptor??
[  144.197255][ T5876] hub 2-1:0.0: USB hub found
[  144.291157][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  144.408348][ T5876] hub 2-1:0.0: 1 port detected
[  144.471330][    T9] usb 3-1: Using ep0 maxpacket: 8
[  144.479098][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  144.488267][    T9] usb 3-1: config 4 has an invalid interface number: 30 but max is 0
[  144.497050][    T9] usb 3-1: config 4 has no interface number 0
[  144.503252][    T9] usb 3-1: config 4 interface 30 has no altsetting 0
[  144.515747][    T9] usb 3-1: string descriptor 0 read error: -22
[  144.522349][    T9] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  144.541000][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.560770][    T9] dw2102: su3000_identify_state
[  144.565959][    T9] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  144.573196][    T9] dw2102: su3000_power_ctrl: 1, initialized 0
[  144.579827][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  144.590503][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  144.601493][    T9] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  144.618394][    T9] usb 3-1: media controller created
[  144.626257][   T28] audit: type=1800 audit(1756163466.522:49): pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.527" name="/" dev="fuse" ino=0 res=0 errno=0
[  144.626391][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  144.672593][    T9] dw2102: i2c transfer failed.
[  144.677984][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  144.694096][    T9] dw2102: i2c transfer failed.
[  144.699012][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  144.709168][    T9] dw2102: i2c transfer failed.
[  144.716724][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  144.726003][    T9] dw2102: i2c transfer failed.
[  144.734787][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  144.740634][    T9] dw2102: i2c transfer failed.
[  144.750840][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  144.759846][    T9] dw2102: i2c transfer failed.
[  144.777639][ T7177] dw2102: i2c wr: len=66 is too big!
[  144.777639][ T7177] 
[  144.789889][    T9] dvb-usb: MAC address: 02:02:02:02:02:02
[  144.841593][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  144.883781][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  144.889598][    T9] dw2102: command 0x0e transfer failed.
[  144.902237][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  144.916070][    T9] dw2102: command 0x0e transfer failed.
[  145.014441][ T5876] hub 2-1:0.0: activate --> -90
[  145.241634][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  145.247478][    T9] dw2102: command 0x0e transfer failed.
[  145.277209][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  145.291240][    T9] dw2102: command 0x0e transfer failed.
[  145.327499][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  145.344957][    T9] dw2102: command 0x51 transfer failed.
[  145.350697][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  145.360173][    T9] dw2102: i2c probe for address 0x68 failed.
[  145.373925][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  145.380103][    T9] dw2102: i2c probe for address 0x69 failed.
[  145.388763][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  145.399347][    T9] dw2102: i2c probe for address 0x6a failed.
[  145.407090][    T9] dw2102: probing for demodulator failed. Is the external power switched on?
[  145.425705][    T9] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  145.435831][   T23] usb 2-1: USB disconnect, device number 5
[  145.436723][ T5876] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  145.494361][ T5876] usb 2-1-port1: connect-debounce failed
[  145.661579][    T9] rc_core: IR keymap rc-tt-1500 not found
[  145.702236][    T9] Registered IR keymap rc-empty
[  145.712867][    T9] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  145.733593][    T9] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input11
[  145.765250][    T9] dvb-usb: schedule remote query interval to 250 msecs.
[  145.791119][    T9] dw2102: su3000_power_ctrl: 0, initialized 1
[  145.814676][    T9] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  145.866013][    T9] usb 3-1: USB disconnect, device number 5
[  145.942840][ T7194] loop0: detected capacity change from 0 to 128
[  146.007188][    T9] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  146.872672][ T7219] loop0: detected capacity change from 0 to 128
[  147.310871][ T7231] loop0: detected capacity change from 0 to 256
[  147.420833][ T7231] FAT-fs (loop0): Directory bread(block 64) failed
[  147.435457][ T7231] FAT-fs (loop0): Directory bread(block 65) failed
[  147.451502][ T7231] FAT-fs (loop0): Directory bread(block 66) failed
[  147.468648][ T7231] FAT-fs (loop0): Directory bread(block 67) failed
[  147.488754][ T7231] FAT-fs (loop0): Directory bread(block 68) failed
[  147.501504][ T7231] FAT-fs (loop0): Directory bread(block 69) failed
[  147.509160][ T7231] FAT-fs (loop0): Directory bread(block 70) failed
[  147.517067][ T7231] FAT-fs (loop0): Directory bread(block 71) failed
[  147.554464][ T7231] FAT-fs (loop0): Directory bread(block 72) failed
[  147.562793][ T7231] FAT-fs (loop0): Directory bread(block 73) failed
[  147.814332][ T7243] loop0: detected capacity change from 0 to 128
[  148.452833][ T7259] netlink: 'syz.1.565': attribute type 3 has an invalid length.
[  149.109830][ T7273] binder_alloc: 7272: binder_alloc_buf, no vma
[  149.825676][ T7293] loop0: detected capacity change from 0 to 128
[  150.479509][ T7298] loop0: detected capacity change from 0 to 32768
[  150.566478][ T7298] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  150.716272][ T5787] ocfs2: Unmounting device (7,0) on (node local)
[  150.888043][ T7313] loop0: detected capacity change from 0 to 64
[  150.918928][ T7311] loop1: detected capacity change from 0 to 2048
[  150.997634][ T7311]  loop1: p1 < > p3
[  151.021976][ T7311] loop1: p3 size 134217728 extends beyond EOD, truncated
[  151.234228][ T5936] udevd[5936]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  151.255505][ T6206] udevd[6206]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  151.885115][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.604'.
[  152.447581][ T7336] loop1: detected capacity change from 0 to 32768
[  152.480574][ T7336] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.601 (7336)
[  152.552032][ T7336] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  152.574060][ T7336] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  152.590594][ T7336] BTRFS info (device loop1): turning on flush-on-commit
[  152.601619][ T7336] BTRFS info (device loop1): doing ref verification
[  152.608760][ T7336] BTRFS info (device loop1): use no compression
[  152.621253][ T7336] BTRFS info (device loop1): force clearing of disk cache
[  152.659442][ T7336] BTRFS info (device loop1): max_inline at 4096
[  152.671938][ T7336] BTRFS info (device loop1): using free space tree
[  152.844562][ T7336] BTRFS info (device loop1): enabling ssd optimizations
[  152.851245][ T5876] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  152.890847][ T7336] BTRFS info (device loop1): auto enabling async discard
[  152.941362][ T7336] BTRFS info (device loop1): rebuilding free space tree
[  153.047900][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short
[  153.068242][ T5876] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  153.104414][ T5876] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  153.120764][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.130487][ T5876] usb 4-1: Product: syz
[  153.143702][ T5876] usb 4-1: Manufacturer: syz
[  153.148760][ T5876] usb 4-1: SerialNumber: syz
[  153.152832][   T28] audit: type=1326 audit(1756163475.042:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.2.616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x0
[  154.050229][ T5784] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  154.107815][ T5876] usb 4-1: reset high-speed USB device number 4 using dummy_hcd
[  154.384414][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short
[  154.420022][ T7404] loop1: detected capacity change from 0 to 2048
[  154.439404][ T5876] usb 4-1: device firmware changed
[  154.489438][ T5876] usb 4-1: USB disconnect, device number 4
[  154.534636][ T7404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  154.740236][ T7404] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  154.770907][ T7404] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 288 with error 28
[  154.820333][ T7404] EXT4-fs (loop1): This should not happen!! Data will be lost
[  154.820333][ T7404] 
[  154.842811][ T7404] EXT4-fs (loop1): Total free blocks count 0
[  154.848878][ T7404] EXT4-fs (loop1): Free/Dirty block details
[  154.855015][ T7404] EXT4-fs (loop1): free_blocks=2415919104
[  154.860816][ T7404] EXT4-fs (loop1): dirty_blocks=304
[  154.866404][ T7404] EXT4-fs (loop1): Block reservation details
[  154.872586][ T7404] EXT4-fs (loop1): i_reserved_data_blocks=19
[  155.006714][ T5784] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  155.074403][ T5784] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  155.532325][   T11] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  155.660635][ T1134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.813928][ T1134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.979571][ T1134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.082149][ T7428] loop0: detected capacity change from 0 to 32768
[  156.096706][ T1134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.110678][ T7428] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.632 (7428)
[  156.150190][ T7428] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  156.164633][ T7428] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  156.176916][ T7428] BTRFS info (device loop0): turning on flush-on-commit
[  156.186939][ T7428] BTRFS info (device loop0): doing ref verification
[  156.219274][ T7428] BTRFS info (device loop0): use no compression
[  156.235795][ T7428] BTRFS info (device loop0): force clearing of disk cache
[  156.243522][ T7428] BTRFS info (device loop0): max_inline at 4096
[  156.250058][ T7428] BTRFS info (device loop0): using free space tree
[  156.433612][ T7428] BTRFS info (device loop0): enabling ssd optimizations
[  156.440629][ T7428] BTRFS info (device loop0): auto enabling async discard
[  156.486721][ T7428] BTRFS info (device loop0): rebuilding free space tree
[  157.301813][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  157.314298][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  157.324285][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  157.341476][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  157.353915][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  157.371174][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  157.418905][ T7468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  158.832844][ T7498] binder: 7497:7498 unknown command 0
[  158.844099][ T7498] binder: 7497:7498 ioctl c0306201 200000000080 returned -22
[  159.084796][ T5787] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  159.431410][   T50] Bluetooth: hci3: command tx timeout
[  159.711345][   T54] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  159.729205][ T1134] hsr_slave_0: left promiscuous mode
[  159.756976][ T1134] hsr_slave_1: left promiscuous mode
[  159.794589][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.808189][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.820528][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.833284][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.845034][ T1134] bridge_slave_1: left allmulticast mode
[  159.863462][ T1134] bridge_slave_1: left promiscuous mode
[  159.874816][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.926380][ T7498] syz.2.649 (7498): drop_caches: 2
[  159.935971][   T54] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  159.947312][ T1134] bridge_slave_0: left allmulticast mode
[  159.953320][   T54] usb 4-1: config 0 has no interface number 0
[  159.974900][ T1134] bridge_slave_0: left promiscuous mode
[  159.980795][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.018004][   T54] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  160.042243][   T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.050394][   T54] usb 4-1: Product: syz
[  160.068764][   T54] usb 4-1: Manufacturer: syz
[  160.090777][   T54] usb 4-1: SerialNumber: syz
[  160.103689][   T54] usb 4-1: config 0 descriptor??
[  160.171528][ T1134] veth1_macvtap: left promiscuous mode
[  160.185788][ T1134] veth0_macvtap: left promiscuous mode
[  160.216475][ T1134] veth1_vlan: left promiscuous mode
[  160.234272][ T1134] veth0_vlan: left promiscuous mode
[  160.320237][   T54] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  160.356006][   T54] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  160.391526][   T54] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  160.402050][   T54] usb 4-1: media controller created
[  160.470620][   T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  160.563916][   T54] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  160.641709][   T54] usb 4-1: USB disconnect, device number 5
[  161.276562][ T1134] team0 (unregistering): Port device team_slave_1 removed
[  161.356311][ T1134] team0 (unregistering): Port device team_slave_0 removed
[  161.416695][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.483714][   T50] Bluetooth: hci3: command tx timeout
[  161.500045][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.308797][ T1134] bond0 (unregistering): Released all slaves
[  162.563880][ T7470] chnl_net:caif_netlink_parms(): no params data found
[  163.056606][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.088843][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.109837][ T7470] bridge_slave_0: entered allmulticast mode
[  163.119371][ T7470] bridge_slave_0: entered promiscuous mode
[  163.138092][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.169819][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.202292][ T7470] bridge_slave_1: entered allmulticast mode
[  163.224970][ T7470] bridge_slave_1: entered promiscuous mode
[  163.304782][ T7563] netlink: 68 bytes leftover after parsing attributes in process `syz.2.662'.
[  163.357301][ T7470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.387129][ T7470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.561470][   T50] Bluetooth: hci3: command tx timeout
[  163.615199][ T7470] team0: Port device team_slave_0 added
[  163.718892][ T7470] team0: Port device team_slave_1 added
[  163.776841][ T7571] loop0: detected capacity change from 0 to 2048
[  163.843246][ T7571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.870191][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.903010][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.995235][ T7470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.020693][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.028426][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.075516][ T7470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.195804][ T7582] loop0: detected capacity change from 0 to 2048
[  164.240243][ T7582] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.328773][ T7470] hsr_slave_0: entered promiscuous mode
[  164.347080][ T7470] hsr_slave_1: entered promiscuous mode
[  164.372919][ T7470] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  164.380551][ T7470] Cannot create hsr debugfs directory
[  165.043790][ T7470] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  165.069543][ T7470] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  165.083048][ T7470] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  165.105976][ T7470] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  165.290343][ T7470] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.301161][ T5858] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  165.341904][ T7470] 8021q: adding VLAN 0 to HW filter on device team0
[  165.378005][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.385267][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.456782][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.464202][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.511425][ T5858] usb 1-1: Using ep0 maxpacket: 8
[  165.567200][ T5858] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  165.594930][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.640638][ T5858] pvrusb2: Hardware description: Terratec Grabster AV400
[  165.648241][   T50] Bluetooth: hci3: command tx timeout
[  165.668480][ T5858] pvrusb2: **********
[  165.681763][ T5858] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  165.692853][ T5858] pvrusb2: Important functionality might not be entirely working.
[  165.700998][ T5858] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  165.721815][ T5858] pvrusb2: **********
[  165.865482][ T2320] pvrusb2: Invalid write control endpoint
[  166.066543][ T2320] pvrusb2: Invalid write control endpoint
[  166.088438][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  166.115676][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  166.138627][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  166.174551][ T2320] pvrusb2: Device being rendered inoperable
[  166.193172][ T7598] pvrusb2: Attempted to execute control transfer when device not ok
[  166.221430][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  166.224535][    T9] usb 1-1: USB disconnect, device number 6
[  166.259283][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  166.286961][ T2320] pvrusb2: Attached sub-driver cx25840
[  166.298103][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  166.326190][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  166.389167][ T7470] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.450578][ T7627] input: syz1 as /devices/virtual/input/input12
[  167.130020][ T7470] veth0_vlan: entered promiscuous mode
[  167.157981][ T7470] veth1_vlan: entered promiscuous mode
[  167.264729][ T7470] veth0_macvtap: entered promiscuous mode
[  167.302130][ T7470] veth1_macvtap: entered promiscuous mode
[  167.340004][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.351494][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.361935][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.385055][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.405300][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.417044][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.433719][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.477674][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.511201][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.532163][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.561304][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.586499][ T7470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.611221][ T7470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.648982][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.700380][ T7470] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.710413][ T7470] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.720320][ T7470] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.739822][ T7470] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.788463][ T7660] netlink: 76 bytes leftover after parsing attributes in process `syz.0.683'.
[  167.943410][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.964162][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.048220][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.064057][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.353890][ T7745] input: syz1 as /devices/virtual/input/input13
[  170.546810][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.710'.
[  172.443289][ T7809] loop0: detected capacity change from 0 to 8
[  172.564281][ T7809] SQUASHFS error: lzo decompression failed, data probably corrupt
[  172.584001][ T7809] SQUASHFS error: Failed to read block 0x91: -5
[  172.599020][ T7809] SQUASHFS error: Unable to read metadata cache entry [8f]
[  172.614601][ T7809] SQUASHFS error: Unable to read inode 0x11f
[  173.573477][ T7845] loop0: detected capacity change from 0 to 1024
[  173.581133][ T7845] EXT4-fs: Ignoring removed bh option
[  173.639032][ T7845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  173.877973][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  173.942822][ T7855] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  174.358864][ T7865] input: syz1 as /devices/virtual/input/input14
[  174.590479][ T7873] loop0: detected capacity change from 0 to 64
[  174.905826][ T7847] loop4: detected capacity change from 0 to 32768
[  175.142709][ T7884] loop0: detected capacity change from 0 to 64
[  175.398741][   T42] kworker/u4:2: attempt to access beyond end of device
[  175.398741][   T42] loop0: rw=1, sector=161, nr_sectors = 1 limit=64
[  175.419880][   T42] buffer_io_error: 9 callbacks suppressed
[  175.419894][   T42] Buffer I/O error on dev loop0, logical block 161, lost async page write
[  175.458446][   T42] kworker/u4:2: attempt to access beyond end of device
[  175.458446][   T42] loop0: rw=1, sector=162, nr_sectors = 1 limit=64
[  175.476001][   T42] Buffer I/O error on dev loop0, logical block 162, lost async page write
[  175.485538][   T42] kworker/u4:2: attempt to access beyond end of device
[  175.485538][   T42] loop0: rw=1, sector=163, nr_sectors = 1 limit=64
[  175.499407][   T42] Buffer I/O error on dev loop0, logical block 163, lost async page write
[  175.508304][   T42] kworker/u4:2: attempt to access beyond end of device
[  175.508304][   T42] loop0: rw=1, sector=167, nr_sectors = 1 limit=64
[  175.521939][   T42] Buffer I/O error on dev loop0, logical block 167, lost async page write
[  175.530716][   T42] kworker/u4:2: attempt to access beyond end of device
[  175.530716][   T42] loop0: rw=1, sector=169, nr_sectors = 1 limit=64
[  175.544474][   T42] Buffer I/O error on dev loop0, logical block 169, lost async page write
[  175.553334][   T42] kworker/u4:2: attempt to access beyond end of device
[  175.553334][   T42] loop0: rw=1, sector=171, nr_sectors = 1 limit=64
[  175.567843][   T42] Buffer I/O error on dev loop0, logical block 171, lost async page write
[  175.576688][   T42] kworker/u4:2: attempt to access beyond end of device
[  175.576688][   T42] loop0: rw=1, sector=172, nr_sectors = 1 limit=64
[  175.592416][   T42] Buffer I/O error on dev loop0, logical block 172, lost async page write
[  175.601534][   T42] kworker/u4:2: attempt to access beyond end of device
[  175.601534][   T42] loop0: rw=1, sector=173, nr_sectors = 1 limit=64
[  175.615658][   T42] Buffer I/O error on dev loop0, logical block 173, lost async page write
[  175.624727][   T42] kworker/u4:2: attempt to access beyond end of device
[  175.624727][   T42] loop0: rw=1, sector=174, nr_sectors = 1 limit=64
[  175.647531][   T42] Buffer I/O error on dev loop0, logical block 174, lost async page write
[  175.657923][   T42] kworker/u4:2: attempt to access beyond end of device
[  175.657923][   T42] loop0: rw=1, sector=175, nr_sectors = 1 limit=64
[  175.673536][   T42] Buffer I/O error on dev loop0, logical block 175, lost async page write
[  175.937664][ T7899] loop0: detected capacity change from 0 to 128
[  175.979797][ T7899] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  176.001383][ T7899] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  176.138872][   T28] audit: type=1326 audit(1756163498.032:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057a38ebe9 code=0x7ffc0000
[  176.197368][   T28] audit: type=1326 audit(1756163498.032:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057a38ebe9 code=0x7ffc0000
[  176.220221][   T28] audit: type=1326 audit(1756163498.062:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f057a38ebe9 code=0x7ffc0000
[  176.242511][   T28] audit: type=1326 audit(1756163498.062:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057a38ebe9 code=0x7ffc0000
[  176.272567][   T28] audit: type=1326 audit(1756163498.062:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057a38ebe9 code=0x7ffc0000
[  176.322256][ T5787] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  177.189892][ T7928] loop0: detected capacity change from 0 to 512
[  177.254556][ T5795] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  177.464264][ T7931] loop0: detected capacity change from 0 to 128
[  177.794627][   T50] Bluetooth: hci1: unexpected subevent 0x01 length: 37 > 18
[  177.802858][   T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  177.814262][   T50] CPU: 1 PID: 50 Comm: kworker/u5:0 Not tainted 6.6.102-syzkaller #0
[  177.822418][   T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  177.832524][   T50] Workqueue: hci1 hci_rx_work
[  177.837280][   T50] Call Trace:
[  177.840598][   T50]  <TASK>
[  177.843574][   T50]  dump_stack_lvl+0x16c/0x230
[  177.848308][   T50]  ? show_regs_print_info+0x20/0x20
[  177.853556][   T50]  ? load_image+0x3b0/0x3b0
[  177.858131][   T50]  sysfs_create_dir_ns+0x256/0x280
[  177.863397][   T50]  ? hci_rx_work+0x43a/0xd80
[  177.868043][   T50]  ? sysfs_warn_dup+0xa0/0xa0
[  177.872786][   T50]  ? do_raw_spin_unlock+0x121/0x230
[  177.878051][   T50]  kobject_add_internal+0x6b8/0xc70
[  177.883411][   T50]  kobject_add+0x156/0x220
[  177.887909][   T50]  ? __rwlock_init+0x150/0x150
[  177.892751][   T50]  ? kobject_init+0x1e0/0x1e0
[  177.897566][   T50]  ? _raw_spin_unlock+0x28/0x40
[  177.902472][   T50]  ? get_device_parent+0x366/0x390
[  177.907613][   T50]  device_add+0x408/0xc20
[  177.911977][   T50]  hci_conn_add_sysfs+0xd5/0x1e0
[  177.916947][   T50]  le_conn_complete_evt+0xc37/0x1220
[  177.922262][   T50]  ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0
[  177.928525][   T50]  ? bt_info+0x160/0x160
[  177.932792][   T50]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  177.938458][   T50]  ? skb_pull_data+0xfb/0x200
[  177.943187][   T50]  hci_le_conn_complete_evt+0x187/0x440
[  177.948936][   T50]  ? hci_remote_host_features_evt+0x160/0x160
[  177.955043][   T50]  hci_event_packet+0x795/0x1210
[  177.960037][   T50]  ? bis_list+0x290/0x290
[  177.964408][   T50]  ? lockdep_hardirqs_on+0x98/0x150
[  177.969643][   T50]  ? hci_send_to_monitor+0xd7/0x4f0
[  177.974874][   T50]  hci_rx_work+0x43a/0xd80
[  177.979327][   T50]  ? process_scheduled_works+0x957/0x15b0
[  177.985077][   T50]  process_scheduled_works+0xa45/0x15b0
[  177.990849][   T50]  ? assign_work+0x400/0x400
[  177.995472][   T50]  ? assign_work+0x39e/0x400
[  178.000093][   T50]  worker_thread+0xa55/0xfc0
[  178.004736][   T50]  kthread+0x2fa/0x390
[  178.008829][   T50]  ? pr_cont_work+0x560/0x560
[  178.013537][   T50]  ? kthread_blkcg+0xd0/0xd0
[  178.018152][   T50]  ret_from_fork+0x48/0x80
[  178.022617][   T50]  ? kthread_blkcg+0xd0/0xd0
[  178.027228][   T50]  ret_from_fork_asm+0x11/0x20
[  178.032167][   T50]  </TASK>
[  178.039725][   T50] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  178.053915][   T50] Bluetooth: hci1: failed to register connection device
[  178.100818][ T7941] loop0: detected capacity change from 0 to 256
[  178.161201][ T7941] exfat: Unknown parameter 'zero_size_dir'
[  178.439280][ T7950] loop0: detected capacity change from 0 to 512
[  178.496549][ T7950] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  178.527504][ T7950] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  178.835569][ T7953] loop0: detected capacity change from 0 to 2048
[  178.851419][ T7953] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2362, location=2362
[  178.892322][ T7953] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  178.903246][ T7953] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  178.916844][ T7953] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.927511][ T7958] netlink: 76 bytes leftover after parsing attributes in process `syz.4.780'.
[  179.184693][ T7962] loop0: detected capacity change from 0 to 512
[  179.220347][ T7962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.273449][ T7962] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.532594][ T7973] mkiss: ax0: crc mode is auto.
[  179.663906][ T7967] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  179.725545][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.856397][ T7984] vlan2: entered promiscuous mode
[  179.876686][ T7984] vlan2: entered allmulticast mode
[  179.921502][ T7984] hsr_slave_1: entered allmulticast mode
[  179.937587][ T7988] loop4: detected capacity change from 0 to 256
[  179.988001][ T7988] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  180.034677][ T7988] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  180.057163][ T7988] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  180.359671][ T7998] loop0: detected capacity change from 0 to 1024
[  180.541487][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  180.742939][    T9] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  180.761173][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.790574][    T9] usb 5-1: config 0 descriptor??
[  182.624816][    T9] usb 5-1: Cannot set autoneg
[  182.638553][    T9] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71
[  182.675165][    T9] usb 5-1: USB disconnect, device number 2
[  183.394075][ T8055] overlayfs: failed to clone upperpath
[  183.925480][ T8076] pim6reg: entered allmulticast mode
[  183.954875][ T8076] netlink: 'syz.0.819': attribute type 10 has an invalid length.
[  184.034505][ T8076] team0: Port device netdevsim0 added
[  184.771200][   T54] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  184.981394][   T54] usb 1-1: Using ep0 maxpacket: 32
[  185.021909][   T54] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  185.030093][   T54] usb 1-1: config 0 has no interface number 0
[  185.068895][   T54] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  185.081366][   T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.106414][   T54] usb 1-1: Product: syz
[  185.110642][   T54] usb 1-1: Manufacturer: syz
[  185.125691][   T54] usb 1-1: SerialNumber: syz
[  185.149554][   T54] usb 1-1: config 0 descriptor??
[  185.221832][   T54] smsc95xx v2.0.0
[  185.521211][ T5858] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  185.601602][   T54] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  185.601633][   T54] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  185.741506][ T5858] usb 5-1: Using ep0 maxpacket: 8
[  185.760712][ T5858] usb 5-1: config 0 interface 0 has no altsetting 0
[  185.780091][ T5858] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  185.810263][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.830206][ T5858] usb 5-1: config 0 descriptor??
[  186.328342][ T5858] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  186.560034][ T5858] usb 5-1: USB disconnect, device number 3
[  187.650394][   T54] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71
[  187.650638][   T54] smsc95xx: probe of 1-1:0.67 failed with error -71
[  187.662471][   T54] usb 1-1: USB disconnect, device number 7
[  188.631167][ T8181] netlink: 40 bytes leftover after parsing attributes in process `syz.4.846'.
[  188.805738][ T8171] loop0: detected capacity change from 0 to 32768
[  188.842608][ T8171] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.841 (8171)
[  188.885183][ T8171] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  188.899543][ T8171] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  188.919814][ T8171] BTRFS info (device loop0): turning on flush-on-commit
[  188.937620][ T8171] BTRFS info (device loop0): doing ref verification
[  188.954622][ T8171] BTRFS info (device loop0): use no compression
[  188.971807][ T8171] BTRFS info (device loop0): force clearing of disk cache
[  188.994221][ T8171] BTRFS info (device loop0): max_inline at 4096
[  189.005076][ T8171] BTRFS info (device loop0): using free space tree
[  189.226402][ T8171] BTRFS info (device loop0): enabling ssd optimizations
[  189.226465][ T8171] BTRFS info (device loop0): auto enabling async discard
[  189.228462][ T8171] BTRFS info (device loop0): rebuilding free space tree
[  189.796777][ T8214] loop4: detected capacity change from 0 to 4096
[  189.867310][ T8215] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  190.680487][ T8229] loop8: detected capacity change from 0 to 7
[  190.716602][ T8229] Dev loop8: unable to read RDB block 7
[  190.728859][ T8229]  loop8: unable to read partition table
[  190.741677][ T8229] loop8: partition table beyond EOD, truncated
[  190.761727][ T8229] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  191.377935][ T5787] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  191.857120][ T8247] loop0: detected capacity change from 0 to 1024
[  191.925325][ T8251] loop4: detected capacity change from 0 to 256
[  191.953568][ T8251] exfat: Deprecated parameter 'namecase'
[  191.991531][ T8251] exfat: Deprecated parameter 'namecase'
[  192.029431][ T8251] exfat: Deprecated parameter 'utf8'
[  192.088440][ T8251] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d)
[  192.640564][ T8263] loop4: detected capacity change from 0 to 32768
[  192.656604][ T8263] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.872 (8263)
[  192.684571][ T8263] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  192.695677][ T8263] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  192.706148][ T8263] BTRFS info (device loop4): turning on flush-on-commit
[  192.713906][ T8263] BTRFS info (device loop4): doing ref verification
[  192.720718][ T8263] BTRFS info (device loop4): use no compression
[  192.732278][ T8263] BTRFS info (device loop4): force clearing of disk cache
[  192.739517][ T8263] BTRFS info (device loop4): max_inline at 4096
[  192.749756][ T8263] BTRFS info (device loop4): using free space tree
[  192.813805][ T8263] BTRFS info (device loop4): enabling ssd optimizations
[  192.831183][ T8263] BTRFS info (device loop4): auto enabling async discard
[  192.853950][ T8263] BTRFS info (device loop4): rebuilding free space tree
[  193.091191][ T8284] input: syz1 as /devices/virtual/input/input18
[  194.309268][ T7470] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  194.599912][ T8303] loop4: detected capacity change from 0 to 64
[  194.613555][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  194.620105][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  194.673868][   T28] audit: type=1800 audit(1756163516.572:56): pid=8303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.881" name="bus" dev="loop4" ino=21 res=0 errno=0
[  196.009185][ T8319] loop4: detected capacity change from 0 to 32768
[  196.029381][ T8319] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.890 (8319)
[  196.049655][ T8319] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  196.066532][ T8319] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  196.082301][ T8319] BTRFS info (device loop4): turning on flush-on-commit
[  196.089550][ T8319] BTRFS info (device loop4): doing ref verification
[  196.097019][ T8319] BTRFS info (device loop4): use no compression
[  196.103800][ T8319] BTRFS info (device loop4): force clearing of disk cache
[  196.111916][ T8319] BTRFS info (device loop4): max_inline at 4096
[  196.118261][ T8319] BTRFS info (device loop4): using free space tree
[  196.205749][ T8319] BTRFS info (device loop4): enabling ssd optimizations
[  196.226198][ T8319] BTRFS info (device loop4): auto enabling async discard
[  196.249517][ T8319] BTRFS info (device loop4): rebuilding free space tree
[  196.355054][ T8343] loop0: detected capacity change from 0 to 64
[  197.883307][   T28] audit: type=1326 audit(1756163519.782:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  197.920469][   T28] audit: type=1326 audit(1756163519.782:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  197.948904][   T28] audit: type=1326 audit(1756163519.782:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  197.979480][   T28] audit: type=1326 audit(1756163519.782:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  198.006408][   T28] audit: type=1326 audit(1756163519.782:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  198.032854][ T7470] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  198.034581][   T28] audit: type=1326 audit(1756163519.782:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  198.067580][   T28] audit: type=1326 audit(1756163519.782:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  198.091278][   T28] audit: type=1326 audit(1756163519.782:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  198.115917][   T28] audit: type=1326 audit(1756163519.782:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.2.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  198.645156][ T8365] loop4: detected capacity change from 0 to 32768
[  198.652926][ T8365] (syz.4.901,8365,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "preferred_slot=00+00000000000000001" or missing value
[  198.666791][ T8365] (syz.4.901,8365,0):ocfs2_fill_super:1178 ERROR: status = -22
[  199.279907][ T8386] input: syz1 as /devices/virtual/input/input19
[  204.331710][ T8443] netlink: 40 bytes leftover after parsing attributes in process `syz.2.934'.
[  205.090521][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  205.090536][   T28] audit: type=1326 audit(1756163526.982:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8454 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f00a9f85ba7 code=0x7ffc0000
[  205.132724][   T28] audit: type=1326 audit(1756163526.982:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8454 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f00a9f2ade9 code=0x7ffc0000
[  205.155096][   T28] audit: type=1326 audit(1756163526.982:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8454 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f00a9f85ba7 code=0x7ffc0000
[  205.178338][   T28] audit: type=1326 audit(1756163526.982:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8454 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f00a9f2ade9 code=0x7ffc0000
[  205.200574][   T28] audit: type=1326 audit(1756163526.982:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8454 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f00a9f85ba7 code=0x7ffc0000
[  205.223463][   T28] audit: type=1326 audit(1756163526.982:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8454 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f00a9f2ade9 code=0x7ffc0000
[  205.254914][   T28] audit: type=1326 audit(1756163526.982:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8454 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f00a9f85ba7 code=0x7ffc0000
[  205.278464][   T28] audit: type=1326 audit(1756163526.982:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8454 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f00a9f2ade9 code=0x7ffc0000
[  205.300809][   T28] audit: type=1326 audit(1756163526.982:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8454 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f00a9f85ba7 code=0x7ffc0000
[  205.328123][   T28] audit: type=1326 audit(1756163526.982:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8454 comm="syz.0.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f00a9f2ade9 code=0x7ffc0000
[  205.731275][ T5838] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  205.846999][ T8465] input: syz1 as /devices/virtual/input/input20
[  205.930887][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  205.946400][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  205.959844][ T5838] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  205.970557][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.982831][ T5838] usb 5-1: config 0 descriptor??
[  205.992200][ T5838] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  208.468036][    T8] usb 5-1: USB disconnect, device number 4
[  208.950113][ T8495] overlayfs: failed to resolve './file1': -2
[  209.209693][ T8493] loop4: detected capacity change from 0 to 32768
[  209.217559][ T8493] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.953 (8493)
[  209.236823][ T8493] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  209.247085][ T8493] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  209.256897][ T8493] BTRFS info (device loop4): turning on flush-on-commit
[  209.265043][ T8493] BTRFS info (device loop4): doing ref verification
[  209.271802][ T8493] BTRFS info (device loop4): use no compression
[  209.278067][ T8493] BTRFS info (device loop4): force clearing of disk cache
[  209.285286][ T8493] BTRFS info (device loop4): max_inline at 4096
[  209.291622][ T8493] BTRFS info (device loop4): using free space tree
[  209.320874][ T8493] BTRFS info (device loop4): enabling ssd optimizations
[  209.329810][ T8493] BTRFS info (device loop4): auto enabling async discard
[  209.342931][ T8493] BTRFS info (device loop4): rebuilding free space tree
[  209.759626][ T7470] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  210.423206][ T8525] loop0: detected capacity change from 0 to 8
[  210.488499][ T8527] input: syz1 as /devices/virtual/input/input21
[  210.775133][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  210.785508][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  210.795418][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  210.806758][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  210.814896][ T5796] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  210.822453][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  210.832968][ T8532] overlayfs: failed to resolve './file1': -2
[  211.020116][ T8534] loop0: detected capacity change from 0 to 1024
[  211.055063][ T8534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  211.068284][ T8534] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.139300][   T28] kauditd_printk_skb: 72 callbacks suppressed
[  211.139315][   T28] audit: type=1800 audit(1756163533.032:153): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.964" name="file1" dev="loop0" ino=15 res=0 errno=0
[  211.183318][ T8534] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: comm syz.0.964: lblock 0 mapped to illegal pblock 0 (length 1)
[  211.230036][ T8534] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  211.265996][ T8534] EXT4-fs (loop0): This should not happen!! Data will be lost
[  211.265996][ T8534] 
[  211.354664][ T8529] chnl_net:caif_netlink_parms(): no params data found
[  211.357709][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  211.522703][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.536252][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.546249][ T8529] bridge_slave_0: entered allmulticast mode
[  211.562799][ T8529] bridge_slave_0: entered promiscuous mode
[  211.582076][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.589754][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.603282][ T8529] bridge_slave_1: entered allmulticast mode
[  211.616709][ T8529] bridge_slave_1: entered promiscuous mode
[  211.689855][ T8529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.706394][ T8529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.769341][ T8529] team0: Port device team_slave_0 added
[  211.789266][ T8529] team0: Port device team_slave_1 added
[  211.839322][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.847929][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.880550][ T8529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.908351][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.923587][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.955993][ T8529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.039808][ T8529] hsr_slave_0: entered promiscuous mode
[  212.051345][ T5802] Bluetooth: hci1: command 0x0406 tx timeout
[  212.059179][ T5802] Bluetooth: hci0: command 0x0406 tx timeout
[  212.067206][ T5796] Bluetooth: hci2: command 0x0406 tx timeout
[  212.084246][ T8529] hsr_slave_1: entered promiscuous mode
[  212.119407][ T8529] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  212.130019][ T8529] Cannot create hsr debugfs directory
[  212.531483][ T3425] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.568592][ T8555] netlink: 76 bytes leftover after parsing attributes in process `syz.2.968'.
[  212.633034][ T3425] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.744602][ T3425] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.829081][ T8562] overlayfs: failed to resolve './file1': -2
[  212.870328][ T3425] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.891796][ T8529] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  212.909921][ T8529] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  212.921428][   T50] Bluetooth: hci4: command tx timeout
[  212.924003][ T8529] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  212.946206][ T8529] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  213.182154][ T8529] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.235858][ T8529] 8021q: adding VLAN 0 to HW filter on device team0
[  213.296732][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.304033][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.310933][ T8574] loop0: detected capacity change from 0 to 128
[  213.324716][ T8574] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  213.349243][ T8574] ext4 filesystem being mounted at /253/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  213.417407][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.424638][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.573918][ T5787] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  213.990591][ T8588] netlink: 76 bytes leftover after parsing attributes in process `syz.2.976'.
[  214.139088][ T8529] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.385499][ T8581] loop0: detected capacity change from 0 to 32768
[  214.406140][ T8581] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.975 (8581)
[  214.431319][ T3425] hsr_slave_0: left promiscuous mode
[  214.437444][ T8581] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  214.450901][ T3425] hsr_slave_1: left promiscuous mode
[  214.460016][ T3425] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.468573][ T8581] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  214.475018][ T3425] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.488003][ T3425] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.495778][ T8581] BTRFS info (device loop0): turning on flush-on-commit
[  214.498578][ T3425] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.522021][ T8581] BTRFS info (device loop0): doing ref verification
[  214.528729][ T8581] BTRFS info (device loop0): use no compression
[  214.536009][ T3425] bridge_slave_1: left allmulticast mode
[  214.543466][ T8597] overlayfs: failed to resolve './file0': -2
[  214.548262][ T3425] bridge_slave_1: left promiscuous mode
[  214.558458][ T3425] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.574651][ T8581] BTRFS info (device loop0): force clearing of disk cache
[  214.584537][ T3425] bridge_slave_0: left allmulticast mode
[  214.590879][ T3425] bridge_slave_0: left promiscuous mode
[  214.597868][ T8581] BTRFS info (device loop0): max_inline at 4096
[  214.611314][ T3425] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.622232][ T8581] BTRFS info (device loop0): using free space tree
[  214.665797][ T3425] veth0_macvtap: left promiscuous mode
[  214.674986][ T3425] veth1_vlan: left promiscuous mode
[  214.680459][ T3425] veth0_vlan: left promiscuous mode
[  214.693462][ T8581] BTRFS info (device loop0): enabling ssd optimizations
[  214.701210][ T8581] BTRFS info (device loop0): auto enabling async discard
[  214.715894][ T8581] BTRFS info (device loop0): rebuilding free space tree
[  215.008356][   T50] Bluetooth: hci4: command tx timeout
[  215.456170][ T5787] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  215.956800][ T3425] team0 (unregistering): Port device team_slave_1 removed
[  216.054276][ T3425] team0 (unregistering): Port device team_slave_0 removed
[  216.119685][ T8635] overlayfs: failed to resolve './file0': -2
[  216.161890][ T3425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.228568][ T3425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.879311][ T3425] bond0 (unregistering): Released all slaves
[  217.039057][ T8624] netlink: 76 bytes leftover after parsing attributes in process `syz.4.984'.
[  217.092364][   T50] Bluetooth: hci4: command tx timeout
[  217.543930][ T3425] IPVS: stop unused estimator thread 0...
[  217.547061][ T8651] loop0: detected capacity change from 0 to 256
[  217.589711][ T8651] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  217.612104][ T8529] veth0_vlan: entered promiscuous mode
[  217.635026][ T8529] veth1_vlan: entered promiscuous mode
[  217.668923][ T8651] 9pnet_fd: Insufficient options for proto=fd
[  217.703677][ T8529] veth0_macvtap: entered promiscuous mode
[  217.715248][ T8651] block device autoloading is deprecated and will be removed.
[  217.725688][ T8529] veth1_macvtap: entered promiscuous mode
[  217.765990][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.790151][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.802586][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.819019][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.830279][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.841194][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.853121][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.879696][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.911583][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.924746][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.935575][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.946513][ T8529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.957645][ T8529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.992154][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.019224][ T8529] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.032441][ T8529] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.041956][ T8529] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.050713][ T8529] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.184254][ T8657] overlayfs: failed to resolve './file0': -2
[  218.218959][ T3425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.258191][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.261762][ T3425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.293754][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.468397][ T8662] input: syz1 as /devices/virtual/input/input22
[  218.674250][ T8670] netlink: 76 bytes leftover after parsing attributes in process `syz.5.999'.
[  219.094335][ T8685] loop5: detected capacity change from 0 to 4096
[  219.161633][   T50] Bluetooth: hci4: command tx timeout
[  219.421984][ T8697] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1010'.
[  220.630342][ T8733] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1023'.
[  221.377308][ T8748] loop5: detected capacity change from 0 to 32768
[  221.385164][ T8748] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1031 (8748)
[  221.400189][ T8748] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  221.410670][ T8748] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  221.419454][ T8748] BTRFS info (device loop5): turning on flush-on-commit
[  221.426719][ T8748] BTRFS info (device loop5): doing ref verification
[  221.433396][ T8748] BTRFS info (device loop5): use no compression
[  221.439664][ T8748] BTRFS info (device loop5): force clearing of disk cache
[  221.448283][ T8748] BTRFS info (device loop5): max_inline at 4096
[  221.454641][ T8748] BTRFS info (device loop5): using free space tree
[  221.484758][ T8748] BTRFS info (device loop5): enabling ssd optimizations
[  221.493740][ T8748] BTRFS info (device loop5): auto enabling async discard
[  221.503733][ T8748] BTRFS info (device loop5): rebuilding free space tree
[  221.957136][ T8783] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1038'.
[  222.117701][ T8529] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  222.252107][ T8789] loop4: detected capacity change from 0 to 2048
[  222.372357][ T8789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.430033][ T8789] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.485859][ T8789] EXT4-fs error (device loop4): __ext4_new_inode:1075: comm syz.4.1040: reserved inode found cleared - inode=1
[  222.556080][ T7470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.691921][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'.
[  222.762793][ T8805] bond0: (slave bond_slave_1): Releasing backup interface
[  222.873721][ T8810] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1048'.
[  223.232063][ T8821] overlayfs: failed to clone upperpath
[  223.369888][ T8815] loop4: detected capacity change from 0 to 32768
[  223.391870][ T8815] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1050 (8815)
[  223.415359][ T8815] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  223.431857][ T8815] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  223.440680][ T8815] BTRFS info (device loop4): turning on flush-on-commit
[  223.459771][ T8815] BTRFS info (device loop4): doing ref verification
[  223.466841][ T8815] BTRFS info (device loop4): use no compression
[  223.473449][ T8815] BTRFS info (device loop4): force clearing of disk cache
[  223.485856][ T8815] BTRFS info (device loop4): max_inline at 4096
[  223.497071][ T8815] BTRFS info (device loop4): using free space tree
[  223.569642][ T8815] BTRFS info (device loop4): enabling ssd optimizations
[  223.569667][ T8815] BTRFS info (device loop4): auto enabling async discard
[  223.580236][ T8815] BTRFS info (device loop4): rebuilding free space tree
[  224.310482][ T8854] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1059'.
[  224.848263][ T7470] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  225.766517][ T8893] overlayfs: failed to clone upperpath
[  225.799839][ T8881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.825430][ T8881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.845361][ T8881] bond0 (unregistering): Released all slaves
[  225.880356][ T8887] sp0: Synchronizing with TNC
[  225.880404][ T8888] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1071'.
[  225.900324][ T8895] lo: entered allmulticast mode
[  225.905987][ T8895] tunl0: entered allmulticast mode
[  225.935598][ T8895] gre0: entered allmulticast mode
[  226.016606][ T8895] gretap0: entered allmulticast mode
[  226.046007][ T8895] erspan0: entered allmulticast mode
[  226.075893][ T8895] ip_vti0: entered allmulticast mode
[  226.097762][ T8895] ip6_vti0: entered allmulticast mode
[  226.125805][ T8895] sit0: entered allmulticast mode
[  226.183249][ T8895] ip6tnl0: entered allmulticast mode
[  226.212699][ T8895] ip6gre0: entered allmulticast mode
[  226.240103][ T8895] syz_tun: entered allmulticast mode
[  226.269597][ T8895] ip6gretap0: entered allmulticast mode
[  226.303283][ T8895] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.312952][ T8895] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.322946][ T8895] bridge0: entered allmulticast mode
[  226.346769][ T8895] vcan0: entered allmulticast mode
[  226.364996][ T8895] bond0: entered allmulticast mode
[  226.370278][ T8895] bond_slave_0: entered allmulticast mode
[  226.376475][ T8895] bond_slave_1: entered allmulticast mode
[  226.409801][ T8895] team0: entered allmulticast mode
[  226.415316][ T8895] team_slave_0: entered allmulticast mode
[  226.422193][ T8895] team_slave_1: entered allmulticast mode
[  226.454645][ T8895] nlmon0: entered allmulticast mode
[  226.471421][ T8895] caif0: entered allmulticast mode
[  226.486387][ T8895] batadv0: entered allmulticast mode
[  226.519847][ T8895] vxcan0: entered allmulticast mode
[  226.542450][ T8895] vxcan1: entered allmulticast mode
[  226.547344][ T8897] loop5: detected capacity change from 0 to 1024
[  226.559041][ T8895] veth0: entered allmulticast mode
[  226.599115][ T8895] veth1: entered allmulticast mode
[  226.607811][ T8897] hfsplus: bad catalog folder thread
[  226.643093][ T8895] wg0: entered allmulticast mode
[  226.670685][ T8895] wg1: entered allmulticast mode
[  226.705960][ T8895] wg2: entered allmulticast mode
[  226.739271][ T8895] veth0_to_bridge: entered allmulticast mode
[  226.795591][ T8895] veth1_to_bridge: entered allmulticast mode
[  226.849906][ T8895] veth0_to_bond: entered allmulticast mode
[  226.895603][ T8895] veth1_to_bond: entered allmulticast mode
[  226.944956][ T8895] veth0_to_team: entered allmulticast mode
[  227.006698][ T8895] veth1_to_team: entered allmulticast mode
[  227.060673][ T8895] veth0_to_batadv: entered allmulticast mode
[  227.081284][ T8895] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.107078][ T8899] loop5: detected capacity change from 0 to 32768
[  227.115406][ T8899] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1076 (8899)
[  227.128661][ T8895] batadv_slave_0: entered allmulticast mode
[  227.138700][ T8899] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  227.149532][ T8899] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  227.165745][ T8899] BTRFS info (device loop5): turning on flush-on-commit
[  227.166077][ T8895] veth1_to_batadv: entered allmulticast mode
[  227.189284][ T8899] BTRFS info (device loop5): doing ref verification
[  227.192252][ T8895] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.196307][ T8899] BTRFS info (device loop5): use no compression
[  227.215569][ T8899] BTRFS info (device loop5): force clearing of disk cache
[  227.223253][ T8899] BTRFS info (device loop5): max_inline at 4096
[  227.229659][ T8899] BTRFS info (device loop5): using free space tree
[  227.230583][ T8895] batadv_slave_1: entered allmulticast mode
[  227.261613][ T8895] xfrm0: entered allmulticast mode
[  227.287905][ T8895] veth0_to_hsr: entered allmulticast mode
[  227.312169][ T8899] BTRFS info (device loop5): enabling ssd optimizations
[  227.319311][ T8899] BTRFS info (device loop5): auto enabling async discard
[  227.327440][ T8895] hsr_slave_0: entered allmulticast mode
[  227.332417][ T8899] BTRFS info (device loop5): rebuilding free space tree
[  227.347638][ T8895] veth1_to_hsr: entered allmulticast mode
[  227.402273][ T8895] hsr0: entered allmulticast mode
[  227.456798][ T8895] veth1_virt_wifi: entered allmulticast mode
[  227.487907][ T8895] veth0_virt_wifi: entered allmulticast mode
[  227.508764][ T8895] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  227.523012][ T8895] veth1_vlan: entered allmulticast mode
[  227.568075][ T8895] veth0_vlan: entered allmulticast mode
[  227.634319][ T8895] vlan0: entered allmulticast mode
[  227.639703][ T8895] vlan1: entered allmulticast mode
[  227.659648][ T8895] macvlan0: entered allmulticast mode
[  227.770454][ T8895] macvlan1: entered allmulticast mode
[  227.793134][ T8895] ipvlan0: entered allmulticast mode
[  227.798675][ T8895] ipvlan1: entered allmulticast mode
[  227.818999][ T8895] veth1_macvtap: entered allmulticast mode
[  227.911894][ T8895] veth0_macvtap: entered allmulticast mode
[  227.981788][ T8895] macvtap0: entered allmulticast mode
[  228.043816][ T8895] macsec0: entered allmulticast mode
[  228.081923][ T8895] geneve0: entered allmulticast mode
[  228.132608][ T8895] geneve1: entered allmulticast mode
[  228.172703][ T8895] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  228.220155][ T8895] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  228.269888][ T8895] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  228.325079][ T8895] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[  228.378309][ T8895] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode
[  228.417683][ T8895] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  228.437881][ T8895] veth2: entered allmulticast mode
[  228.451521][ T8895] veth3: left promiscuous mode
[  228.456453][ T8895] veth3: entered allmulticast mode
[  228.462045][ T8895] gretap1: entered allmulticast mode
[  228.468397][ T8895] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.477567][ T8895] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.486768][ T8895] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.495984][ T8895] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.505354][ T8895] geneve2: entered allmulticast mode
[  228.514849][ T8529] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  228.535203][ T8895] vlan2: left promiscuous mode
[  228.552229][ T8895] vlan3: entered allmulticast mode
[  229.481293][  T788] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  229.636871][ T8942] overlayfs: failed to clone upperpath
[  229.661173][  T788] usb 5-1: Using ep0 maxpacket: 16
[  229.674798][  T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  229.713604][  T788] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  229.731669][  T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.747949][  T788] usb 5-1: Product: syz
[  229.755260][  T788] usb 5-1: Manufacturer: syz
[  229.759938][  T788] usb 5-1: SerialNumber: syz
[  229.767896][  T788] usb 5-1: config 0 descriptor??
[  229.792496][  T788] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  229.818786][ T8946] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1087'.
[  229.822203][  T788] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  229.990235][   T28] audit: type=1326 audit(1756163551.882:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.5.1088" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d7c38ebe9 code=0x0
[  230.082996][ T8940] loop0: detected capacity change from 0 to 32768
[  230.101333][ T8940] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1085 (8940)
[  230.139653][ T8940] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  230.150878][ T8940] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  230.159927][ T8940] BTRFS info (device loop0): turning on flush-on-commit
[  230.167134][ T8940] BTRFS info (device loop0): doing ref verification
[  230.173939][ T8940] BTRFS info (device loop0): use no compression
[  230.180279][ T8940] BTRFS info (device loop0): force clearing of disk cache
[  230.188238][ T8940] BTRFS info (device loop0): max_inline at 4096
[  230.194693][ T8940] BTRFS info (device loop0): using free space tree
[  230.225388][ T8940] BTRFS info (device loop0): enabling ssd optimizations
[  230.233538][ T8940] BTRFS info (device loop0): auto enabling async discard
[  230.249327][ T8940] BTRFS info (device loop0): rebuilding free space tree
[  230.381152][   T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  230.413947][  T788] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  230.561119][   T27] usb 6-1: Using ep0 maxpacket: 16
[  230.571340][   T27] usb 6-1: config 0 has an invalid interface number: 161 but max is 0
[  230.588890][   T27] usb 6-1: config 0 has no interface number 0
[  230.600150][   T27] usb 6-1: config 0 interface 161 has no altsetting 0
[  230.617043][   T27] usb 6-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01
[  230.639273][   T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.667294][   T27] usb 6-1: Product: syz
[  230.685264][   T27] usb 6-1: Manufacturer: syz
[  230.703461][   T27] usb 6-1: SerialNumber: syz
[  230.712804][   T27] usb 6-1: config 0 descriptor??
[  230.721027][   T27] ums-jumpshot 6-1:0.161: USB Mass Storage device detected
[  230.743454][   T27] ums-jumpshot 6-1:0.161: Quirks match for vid 05dc pid 0001: 2
[  230.841529][  T788] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  230.850335][  T788] em28xx 5-1:0.0: board has no eeprom
[  231.074313][ T8976] overlayfs: failed to clone upperpath
[  231.223082][ T5787] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  231.771100][ T5891] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  231.953886][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.965268][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.975116][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  231.979598][ T8936] em28xx 5-1:0.0: writing to i2c device at 0x0 failed (error=-5)
[  231.989002][ T5891] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  232.009675][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.032729][  T788] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  232.033192][ T5891] usb 1-1: config 0 descriptor??
[  232.041604][  T788] em28xx 5-1:0.0: dvb set to bulk mode.
[  232.061702][    T8] em28xx 5-1:0.0: Binding DVB extension
[  232.077682][  T788] usb 5-1: USB disconnect, device number 5
[  232.097049][  T788] em28xx 5-1:0.0: Disconnecting em28xx
[  232.158390][    T8] em28xx 5-1:0.0: Registering input extension
[  232.168083][  T788] em28xx 5-1:0.0: Closing input extension
[  232.191813][  T788] em28xx 5-1:0.0: Freeing device
[  232.463173][ T5891] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  232.480428][ T5891] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  232.630660][ T8985] loop4: detected capacity change from 0 to 4096
[  232.832610][ T8992] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1097'.
[  232.974297][ T5891] usb 6-1: USB disconnect, device number 2
[  233.118406][  T788] usb 1-1: USB disconnect, device number 8
[  233.387826][ T9001] loop5: detected capacity change from 0 to 32768
[  233.395839][ T9001] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1101 (9001)
[  233.410773][ T9001] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  233.421216][ T9001] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  233.431694][ T9001] BTRFS info (device loop5): turning on flush-on-commit
[  233.438730][ T9001] BTRFS info (device loop5): doing ref verification
[  233.445488][ T9001] BTRFS info (device loop5): use no compression
[  233.451841][ T9001] BTRFS info (device loop5): force clearing of disk cache
[  233.459065][ T9001] BTRFS info (device loop5): max_inline at 4096
[  233.465417][ T9001] BTRFS info (device loop5): using free space tree
[  233.495383][ T9001] BTRFS info (device loop5): enabling ssd optimizations
[  233.505208][ T9001] BTRFS info (device loop5): auto enabling async discard
[  233.514129][ T9001] BTRFS info (device loop5): rebuilding free space tree
[  233.756522][ T9024] input: syz1 as /devices/virtual/input/input28
[  233.919532][ T9029] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1106'.
[  234.216365][ T9033] overlayfs: failed to clone upperpath
[  234.575382][ T8529] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  234.866313][ T9043] loop5: detected capacity change from 0 to 512
[  234.877994][ T9043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  234.917725][ T8529] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.084758][ T9050] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1115'.
[  235.749004][ T9060] loop4: detected capacity change from 0 to 32768
[  235.758877][ T9060] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1120 (9060)
[  235.782874][ T9060] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  235.796835][ T9060] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  235.807741][ T9060] BTRFS info (device loop4): turning on flush-on-commit
[  235.814882][ T9060] BTRFS info (device loop4): doing ref verification
[  235.821916][ T9060] BTRFS info (device loop4): use no compression
[  235.828290][ T9060] BTRFS info (device loop4): force clearing of disk cache
[  235.835835][ T9060] BTRFS info (device loop4): max_inline at 4096
[  235.842285][ T9060] BTRFS info (device loop4): using free space tree
[  235.892214][ T9060] BTRFS info (device loop4): enabling ssd optimizations
[  235.899373][ T9060] BTRFS info (device loop4): auto enabling async discard
[  235.915312][ T9060] BTRFS info (device loop4): rebuilding free space tree
[  235.993387][ T9085] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1124'.
[  237.190922][ T7470] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  237.611273][ T9114] input: syz1 as /devices/virtual/input/input29
[  237.729915][ T9119] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1138'.
[  238.355808][ T9128] loop5: detected capacity change from 0 to 32768
[  238.364406][ T9128] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1142 (9128)
[  238.379908][ T9128] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  238.392560][ T9128] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  238.401499][ T9128] BTRFS info (device loop5): turning on flush-on-commit
[  238.408474][ T9128] BTRFS info (device loop5): doing ref verification
[  238.420238][ T9128] BTRFS info (device loop5): use no compression
[  238.429701][ T9128] BTRFS info (device loop5): force clearing of disk cache
[  238.437452][ T9128] BTRFS info (device loop5): max_inline at 4096
[  238.445553][ T9128] BTRFS info (device loop5): using free space tree
[  238.515388][ T9128] BTRFS info (device loop5): enabling ssd optimizations
[  238.536563][ T9128] BTRFS info (device loop5): auto enabling async discard
[  238.548562][ T9128] BTRFS info (device loop5): rebuilding free space tree
[  238.706636][ T9153] loop0: detected capacity change from 0 to 256
[  238.753793][ T9153] FAT-fs (loop0): Directory bread(block 64) failed
[  238.760418][ T9153] FAT-fs (loop0): Directory bread(block 65) failed
[  238.791209][ T9153] FAT-fs (loop0): Directory bread(block 66) failed
[  238.808022][ T9153] FAT-fs (loop0): Directory bread(block 67) failed
[  238.825726][ T9153] FAT-fs (loop0): Directory bread(block 68) failed
[  238.841276][ T9153] FAT-fs (loop0): Directory bread(block 69) failed
[  238.848048][ T9153] FAT-fs (loop0): Directory bread(block 70) failed
[  238.861082][ T9153] FAT-fs (loop0): Directory bread(block 71) failed
[  238.867780][ T9153] FAT-fs (loop0): Directory bread(block 72) failed
[  238.881077][ T9153] FAT-fs (loop0): Directory bread(block 73) failed
[  239.130446][ T9157] overlayfs: failed to resolve './file0': -2
[  239.375974][ T9159] loop0: detected capacity change from 0 to 4096
[  239.403723][ T9159] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  239.575520][ T9161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1149'.
[  239.798999][ T8529] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  240.204709][ T9177] overlayfs: failed to resolve './file0': -2
[  240.293037][ T9183] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1158'.
[  241.506287][ T9201] overlayfs: failed to resolve './file0': -2
[  241.752232][ T9209] input: syz1 as /devices/virtual/input/input30
[  242.709365][ T9223] overlayfs: failed to resolve './file1': -2
[  242.767854][   T50] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  242.937094][ T9233] input: syz1 as /devices/virtual/input/input31
[  243.315655][ T9227] loop0: detected capacity change from 0 to 32768
[  243.323889][ T9227] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1178 (9227)
[  243.339537][ T9227] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  243.350005][ T9227] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  243.359579][ T9227] BTRFS info (device loop0): turning on flush-on-commit
[  243.366688][ T9227] BTRFS info (device loop0): doing ref verification
[  243.373422][ T9227] BTRFS info (device loop0): use no compression
[  243.379745][ T9227] BTRFS info (device loop0): force clearing of disk cache
[  243.386985][ T9227] BTRFS info (device loop0): max_inline at 4096
[  243.393328][ T9227] BTRFS info (device loop0): using free space tree
[  243.426858][ T9227] BTRFS info (device loop0): enabling ssd optimizations
[  243.434066][ T9227] BTRFS info (device loop0): auto enabling async discard
[  243.448284][ T9227] BTRFS info (device loop0): rebuilding free space tree
[  243.713470][ T9258] loop4: detected capacity change from 0 to 512
[  243.733969][ T9258] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  243.746929][ T9258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002]
[  243.764968][ T9258] EXT4-fs (loop4): orphan cleanup on readonly fs
[  243.830347][ T9258] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1185: bg 0: block 361: padding at end of block bitmap is not set
[  243.886898][ T9258] EXT4-fs (loop4): Remounting filesystem read-only
[  243.910264][ T9258] EXT4-fs (loop4): 1 truncate cleaned up
[  243.917761][ T9258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  244.035940][ T9258] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1185: dx entry: limit 0 != root limit 125
[  244.071635][ T9258] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1185: Corrupt directory, running e2fsck is recommended
[  244.115205][ T9258] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1185: dx entry: limit 0 != root limit 125
[  244.153390][ T9258] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1185: Corrupt directory, running e2fsck is recommended
[  244.188628][ T9263] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1185: dx entry: limit 0 != root limit 125
[  244.209021][ T9264] overlayfs: failed to resolve './file1': -2
[  244.215728][ T9263] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1185: Corrupt directory, running e2fsck is recommended
[  244.315250][ T7470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  244.487271][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1190'.
[  244.694841][ T9275] overlayfs: failed to clone upperpath
[  244.715768][ T9277] input: syz1 as /devices/virtual/input/input32
[  244.818521][ T5787] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  245.264771][ T9284] overlayfs: failed to resolve './file1': -2
[  245.543230][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1201'.
[  245.880094][ T9310] input: syz1 as /devices/virtual/input/input33
[  246.615545][ T9336] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  246.638596][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'.
[  246.744930][ T9342] loop8: detected capacity change from 0 to 7
[  246.752725][ T9342] Dev loop8: unable to read RDB block 7
[  246.758434][ T9342]  loop8: unable to read partition table
[  246.764928][ T9342] loop8: partition table beyond EOD, truncated
[  246.771524][ T9342] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  246.962815][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1224'.
[  247.079687][ T9354] input: syz1 as /devices/virtual/input/input34
[  247.413293][ T9366] loop0: detected capacity change from 0 to 2048
[  247.428108][ T9366] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  247.845389][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1238'.
[  248.041161][  T788] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  248.221337][  T788] usb 5-1: Using ep0 maxpacket: 8
[  248.228618][  T788] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.252189][  T788] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  248.267124][  T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.280445][  T788] usb 5-1: config 0 descriptor??
[  248.295009][  T788] gspca_main: vc032x-2.14.0 probing 046d:0892
[  248.741341][   T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  248.931202][   T27] usb 1-1: Using ep0 maxpacket: 32
[  248.942819][   T27] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  248.951249][   T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.961446][   T27] usb 1-1: config 0 has no interface number 0
[  248.967587][   T27] usb 1-1: config 0 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  248.989628][   T27] usb 1-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=4a.5b
[  248.998807][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.007668][   T27] usb 1-1: Product: syz
[  249.011997][   T27] usb 1-1: Manufacturer: syz
[  249.021066][   T27] usb 1-1: SerialNumber: syz
[  249.027976][   T27] usb 1-1: config 0 descriptor??
[  249.038111][   T27] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  249.083494][   T27] snd-usb-audio: probe of 1-1:0.128 failed with error -2
[  249.257561][   T27] usb 1-1: USB disconnect, device number 9
[  249.508356][  T788] gspca_vc032x: reg_w err -71
[  249.521549][  T788] vc032x: probe of 5-1:0.0 failed with error -71
[  249.540390][  T788] usb 5-1: USB disconnect, device number 6
[  249.608220][ T9408] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1250'.
[  250.181432][ T9419] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  250.208319][ T9419] CIFS: Unable to determine destination address
[  250.510606][ T9432] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1260'.
[  250.686459][ T9440] loop4: detected capacity change from 0 to 512
[  250.699600][ T9440] EXT4-fs: Ignoring removed nomblk_io_submit option
[  250.713672][ T9440] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  250.749256][ T9440] EXT4-fs (loop4): 1 truncate cleaned up
[  250.762611][ T9440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.874997][ T9452] loop0: detected capacity change from 0 to 256
[  250.892443][ T9452] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  250.903504][ T9452] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  250.909895][ T9454] loop5: detected capacity change from 0 to 128
[  250.924506][ T7470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.925534][ T9454] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  250.950179][ T9454] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  250.987829][ T9452] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  251.558542][ T9465] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1272'.
[  252.043828][ T9486] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1281'.
[  252.204599][ T9491] kvm: pic: non byte read
[  253.019900][ T9513] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1291'.
[  253.383981][ T9519] loop0: detected capacity change from 0 to 4096
[  253.404756][ T9519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.500028][ T9525] EXT4-fs (loop0): shut down requested (0)
[  253.710294][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.815272][ T9534] overlayfs: missing 'lowerdir'
[  253.869534][ T9538] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1300'.
[  253.918331][ T9541] loop0: detected capacity change from 0 to 1024
[  253.929425][ T9541] EXT4-fs: Ignoring removed nomblk_io_submit option
[  253.990400][ T9541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.031211][ T5891] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  254.087981][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.222663][ T5891] usb 6-1: config 0 has an invalid interface number: 133 but max is 0
[  254.231410][ T5891] usb 6-1: config 0 has no interface number 0
[  254.240606][ T5891] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  254.249772][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.257984][ T5891] usb 6-1: Product: syz
[  254.262316][ T5891] usb 6-1: Manufacturer: syz
[  254.266939][ T5891] usb 6-1: SerialNumber: syz
[  254.273604][ T5891] usb 6-1: config 0 descriptor??
[  254.487051][ T5891] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected
[  254.497190][ T5891] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81
[  254.505476][ T5891] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1
[  254.513833][ T5891] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2
[  254.525304][ T5891] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  254.698398][ T9532] loop5: detected capacity change from 0 to 512
[  254.982836][  T788] usb 6-1: USB disconnect, device number 3
[  254.998548][  T788] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  255.024078][  T788] keyspan 6-1:0.133: device disconnected
[  255.076414][ T9561] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1310'.
[  255.093630][ T9562] overlayfs: missing 'lowerdir'
[  255.568029][ T9586] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1317'.
[  255.907971][ T9593] overlayfs: missing 'lowerdir'
[  255.982773][ T9595] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1321'.
[  256.044674][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  256.051302][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  258.884844][ T9605] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14)
[  258.891947][ T9605] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  258.922842][ T9605] vhci_hcd vhci_hcd.0: Device attached
[  259.131858][ T9617] vhci_hcd: connection closed
[  259.147833][ T9622] overlayfs: missing 'lowerdir'
[  259.167860][ T1134] vhci_hcd: stop threads
[  259.182296][ T1134] vhci_hcd: release socket
[  259.196095][ T1134] vhci_hcd: disconnect device
[  259.271766][ T8916] usb 34-1: enqueue for inactive port 0
[  259.580377][ T9635] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1334'.
[  259.832512][ T8916] usb usb34-port1: attempt power cycle
[  260.552227][ T9641] genirq: Flags mismatch irq 31. 00000000 (pcmmio) vs. 00000000 (virtio1-input.0)
[  260.658110][ T8916] usb usb34-port1: unable to enumerate USB device
[  261.045223][ T9645] ubi31: attaching mtd0
[  261.058491][ T9645] ubi31: scanning is finished
[  261.063537][ T9645] ubi31: empty MTD device detected
[  261.124739][ T9649] sp0: Synchronizing with TNC
[  261.268524][ T9645] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  261.281703][ T9650] overlayfs: missing 'lowerdir'
[  261.287038][ T9645] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  261.310779][ T9645] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  261.351255][ T9645] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  261.369107][ T9645] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  261.389479][ T9645] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  261.420051][ T9645] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1760861703
[  261.444348][ T9645] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  261.475836][ T9653] ubi31: background thread "ubi_bgt31d" started, PID 9653
[  262.100508][ T9664] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1343'.
[  265.650461][ T9686] overlayfs: missing 'lowerdir'
[  266.080040][ T9695] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1353'.
[  266.106226][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'.
[  266.117822][ T9696] lo: left allmulticast mode
[  266.140898][ T9696] tunl0: left allmulticast mode
[  266.180221][ T9696] gre0: left allmulticast mode
[  266.262111][ T9696] gretap0: left allmulticast mode
[  266.298055][ T9696] erspan0: left allmulticast mode
[  266.317139][ T9696] ip_vti0: left allmulticast mode
[  266.344843][ T9696] ip6_vti0: left allmulticast mode
[  266.362448][ T9696] sit0: left allmulticast mode
[  266.404853][ T9696] ip6tnl0: left allmulticast mode
[  266.422435][ T9696] ip6gre0: left allmulticast mode
[  266.439296][ T9696] syz_tun: left allmulticast mode
[  266.458279][ T9696] ip6gretap0: left allmulticast mode
[  266.479707][ T9696] bridge0: left allmulticast mode
[  266.495328][ T9696] vcan0: left allmulticast mode
[  266.511769][ T9696] bond0: left allmulticast mode
[  266.527186][ T9696] 8021q: adding VLAN 0 to HW filter on device bond0
[  266.542726][ T9696] team0: left allmulticast mode
[  266.558639][ T9696] 8021q: adding VLAN 0 to HW filter on device team0
[  266.617913][ T9696] nlmon0: left allmulticast mode
[  266.661986][ T9696] caif0: left allmulticast mode
[  266.685012][ T9696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  266.772335][ T9696] syz.2.1350 (9696) used greatest stack depth: 19368 bytes left
[  266.982444][ T9615] Set syz1 is full, maxelem 65536 reached
[  267.132434][ T9707] comedi comedi3: board detection failed
[  267.277463][ T9714] overlayfs: missing 'workdir'
[  267.453228][ T9720] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1363'.
[  268.678024][ T9743] overlayfs: missing 'workdir'
[  268.711394][ T9747] input: syz1 as /devices/virtual/input/input35
[  268.993066][ T9752] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1375'.
[  270.471223][   T27] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  270.672639][   T27] usb 6-1: config index 0 descriptor too short (expected 39, got 27)
[  270.680835][   T27] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  270.701057][   T27] usb 6-1: config 0 interface 0 has no altsetting 0
[  270.713668][   T27] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  270.731100][   T27] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  270.739334][   T27] usb 6-1: Product: syz
[  270.745357][   T27] usb 6-1: Manufacturer: syz
[  270.750424][   T27] usb 6-1: SerialNumber: syz
[  270.760101][   T27] usb 6-1: config 0 descriptor??
[  270.800374][   T27] hub 6-1:0.0: bad descriptor, ignoring hub
[  270.811393][   T27] hub: probe of 6-1:0.0 failed with error -5
[  270.834644][   T27] usb 6-1: selecting invalid altsetting 0
[  270.889720][ T9776] overlayfs: missing 'workdir'
[  271.341108][ T5876] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  271.457338][ T9793] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1387'.
[  271.466549][ T9772] usb 6-1: reset high-speed USB device number 4 using dummy_hcd
[  271.533154][ T5876] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  271.549327][ T5876] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  271.573038][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  271.601937][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  271.642062][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  271.680801][ T5876] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  271.704990][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  271.733458][ T5876] usb 5-1: Product: syz
[  271.737701][ T5876] usb 5-1: Manufacturer: syz
[  271.768269][ T5876] cdc_wdm 5-1:1.0: skipping garbage
[  271.781160][ T5876] cdc_wdm 5-1:1.0: skipping garbage
[  271.815540][ T5876] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  271.831507][ T5876] cdc_wdm 5-1:1.0: Unknown control protocol
[  271.968020][ T9772] usb 6-1: failed to restore interface 0 altsetting 251 (error=-71)
[  271.979486][ T5891] usb 6-1: USB disconnect, device number 4
[  272.044717][ T5876] usb 5-1: USB disconnect, device number 7
[  272.202535][ T9772] ip6tnl1: entered promiscuous mode
[  272.207842][ T9772] ip6tnl1: entered allmulticast mode
[  272.230404][ T9772] team0: Device ip6tnl1 is of different type
[  272.879391][ T9808] overlayfs: missing 'lowerdir'
[  273.315530][ T9816] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1396'.
[  273.952753][ T9831] overlayfs: missing 'lowerdir'
[  275.742862][ T9853] mmap: syz.2.1409 (9853): VmData 37482496 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  276.023743][ T9860] overlayfs: missing 'lowerdir'
[  276.532733][   T28] audit: type=1326 audit(1756163598.432:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  278.161785][   T28] audit: type=1326 audit(1756163598.432:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  278.961146][   T28] audit: type=1326 audit(1756163598.562:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  279.116729][   T28] audit: type=1326 audit(1756163598.562:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  279.240773][   T28] audit: type=1326 audit(1756163598.562:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  279.341427][   T28] audit: type=1326 audit(1756163598.712:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  279.427412][   T28] audit: type=1326 audit(1756163598.712:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  279.470379][ T9887] Illegal XDP return value 4294967274 on prog  (id 241) dev N/A, expect packet loss!
[  279.520555][   T28] audit: type=1326 audit(1756163598.712:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  279.634405][   T28] audit: type=1326 audit(1756163598.922:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  279.680102][ T9892] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  279.706092][ T9892] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  279.752771][   T28] audit: type=1326 audit(1756163598.922:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.2.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d598ebe9 code=0x7ffc0000
[  280.115742][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'.
[  281.368220][ T9917] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  281.377276][ T9917] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  281.661206][ T9919] 9pnet_virtio: no channels available for device syz
[  283.724155][   T50] Bluetooth: hci3: command 0x0406 tx timeout
[  283.800987][    C1] sched: RT throttling activated
[  283.864914][ T9931] comedi comedi3: pcl818: I/O port conflict (0x40,16)
[  283.888897][ T9935] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  283.900261][ T9931] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN
[  283.912064][ T9931] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  283.920526][ T9931] CPU: 0 PID: 9931 Comm: syz.5.1437 Not tainted 6.6.102-syzkaller #0
[  283.928642][ T9931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  283.938752][ T9931] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  283.944360][ T9931] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c9 a3 e0 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 a8 a3 e0 f9 4d 8b 24 24 48 83 c3
[  283.964022][ T9931] RSP: 0018:ffffc9000c727a10 EFLAGS: 00010206
[  283.970394][ T9931] RAX: 0000000000000005 RBX: ffff88802cf58500 RCX: 0000000000080000
[  283.978378][ T9931] RDX: ffffc9000cf9b000 RSI: 000000000000258e RDI: 000000000000258f
[  283.986367][ T9931] RBP: 0000000000000001 R08: ffff88814c64b92f R09: 1ffff110298c9725
[  283.994355][ T9931] R10: dffffc0000000000 R11: ffffed10298c9726 R12: 0000000000000028
[  284.002355][ T9931] R13: dffffc0000000000 R14: ffff88814c64b800 R15: dffffc0000000000
[  284.010363][ T9931] FS:  00007f5d7a5f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  284.019316][ T9931] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  284.025928][ T9931] CR2: 00007f00a9fecd08 CR3: 000000005e223000 CR4: 00000000003506f0
[  284.034320][ T9931] Call Trace:
[  284.037707][ T9931]  <TASK>
[  284.040664][ T9931]  pcl818_detach+0x66/0xd0
[  284.045215][ T9931]  comedi_device_detach+0x131/0x6f0
[  284.050473][ T9931]  comedi_device_attach+0x561/0x660
[  284.055730][ T9931]  comedi_unlocked_ioctl+0x68d/0xf90
[  284.061057][ T9931]  ? tomoyo_path_number_perm+0x477/0x590
[  284.066728][ T9931]  ? comedi_poll+0x8c0/0x8c0
[  284.071546][ T9931]  ? __fget_files+0x28/0x4d0
[  284.076160][ T9931]  ? bpf_lsm_file_ioctl+0x9/0x10
[  284.081115][ T9931]  ? security_file_ioctl+0x80/0xa0
[  284.086246][ T9931]  ? comedi_poll+0x8c0/0x8c0
[  284.090942][ T9931]  __se_sys_ioctl+0xfd/0x170
[  284.095560][ T9931]  do_syscall_64+0x55/0xb0
[  284.099999][ T9931]  ? clear_bhb_loop+0x40/0x90
[  284.104722][ T9931]  ? clear_bhb_loop+0x40/0x90
[  284.109414][ T9931]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  284.115335][ T9931] RIP: 0033:0x7f5d7c38ebe9
[  284.119776][ T9931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.139395][ T9931] RSP: 002b:00007f5d7a5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  284.147825][ T9931] RAX: ffffffffffffffda RBX: 00007f5d7c5b5fa0 RCX: 00007f5d7c38ebe9
[  284.155817][ T9931] RDX: 00002000000003c0 RSI: 0000000040946400 RDI: 0000000000000003
[  284.163816][ T9931] RBP: 00007f5d7c411e19 R08: 0000000000000000 R09: 0000000000000000
[  284.171798][ T9931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  284.179785][ T9931] R13: 00007f5d7c5b6038 R14: 00007f5d7c5b5fa0 R15: 00007ffc0d4ff748
[  284.187779][ T9931]  </TASK>
[  284.190834][ T9931] Modules linked in:
[  284.210570][ T9931] ---[ end trace 0000000000000000 ]---
[  284.217767][ T9931] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  284.223478][ T9931] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c9 a3 e0 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 a8 a3 e0 f9 4d 8b 24 24 48 83 c3
[  284.243387][ T9931] RSP: 0018:ffffc9000c727a10 EFLAGS: 00010206
[  284.249526][ T9931] RAX: 0000000000000005 RBX: ffff88802cf58500 RCX: 0000000000080000
[  284.257662][ T9931] RDX: ffffc9000cf9b000 RSI: 000000000000258e RDI: 000000000000258f
[  284.265723][ T9931] RBP: 0000000000000001 R08: ffff88814c64b92f R09: 1ffff110298c9725
[  284.318785][ T9931] R10: dffffc0000000000 R11: ffffed10298c9726 R12: 0000000000000028
[  284.327065][ T9931] R13: dffffc0000000000 R14: ffff88814c64b800 R15: dffffc0000000000
[  284.337447][ T9931] FS:  00007f5d7a5f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  284.362656][ T9931] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  284.369476][ T9931] CR2: 00007f39d682cf98 CR3: 000000005e223000 CR4: 00000000003526e0
[  284.378521][ T9931] Kernel panic - not syncing: Fatal exception
[  284.384947][ T9931] Kernel Offset: disabled
[  284.389543][ T9931] Rebooting in 86400 seconds..