last executing test programs:

25.828615104s ago: executing program 3 (id=382):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x20008d0, &(0x7f0000000680)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6e6f757365725f78617474722c636f686572656e63793d66756c6c2c646174613d77726974656261636b2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030312c61636c2c6e6f61636c2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030302c00a89f6b8d5800aa954e6c8735dcd52921ce08462fb4ce7c1600883251443ac332f4d17b77d29867e4321610936dbc5963e9fb59a032c92e32ebffc3b739951e866d52bff6bd63136a656222062a8eea0cf97480bc8ac6c0e8a2aa38ffa8fa758cd54b9ef39a7f536d7b85173a83c34d78e210ecf4d040817bbe989e9eb015acb84bb90577b8b405a48292eeca69f5275cb7b7027d4bf643bd69b034c0221a30"], 0x1, 0x442d, &(0x7f0000004480)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x81)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f00000001c0)='./file1\x00', 0x145142, 0xc1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x700000000000000)

25.08075985s ago: executing program 3 (id=385):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b00))
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2})

24.929268033s ago: executing program 3 (id=387):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0)
creat(&(0x7f0000000200)='./file5\x00', 0x10)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file5\x00', 0x2)

24.705796358s ago: executing program 3 (id=388):
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa02, &(0x7f0000003640)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
umount2(&(0x7f0000000240)='./file0/file0\x00', 0x2)

24.474675022s ago: executing program 3 (id=393):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="93378e66cf9b48cb59638401fcd1730172853a9fa89527986442ab60ae29f9c1", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
recvmmsg$unix(r1, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000003880)=""/4096, 0x1000}], 0x1}}], 0x2, 0x10, 0x0)

24.242207887s ago: executing program 3 (id=396):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r2=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000380)=@can={{0x4, 0x1, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "53c0f78386dccb57"}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

23.768833807s ago: executing program 32 (id=396):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r2=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000380)=@can={{0x4, 0x1, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "53c0f78386dccb57"}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

5.716668182s ago: executing program 1 (id=489):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56551, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054)

5.352681359s ago: executing program 4 (id=494):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xc, 0x2}, {0x2}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x4)

5.130989624s ago: executing program 4 (id=496):
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
io_setup(0x4, &(0x7f0000000180)=<r2=>0x0)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}])

5.056272305s ago: executing program 1 (id=498):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x10)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f0000000600)="dd0e90aed281adeb", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

4.82190686s ago: executing program 1 (id=500):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12011001a0b4c41058044a70553a010203010902"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x5, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

4.728795212s ago: executing program 4 (id=501):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x1b}}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x80)

4.410199719s ago: executing program 4 (id=505):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000005a40)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x74, 0x2d, 0x33, 0x74, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xa0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
ioctl$FICLONE(r2, 0x40049409, r1)

3.124788466s ago: executing program 2 (id=511):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x83}]}}}}}}}}, 0x0)

3.026385647s ago: executing program 2 (id=513):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6})
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)

2.336496452s ago: executing program 4 (id=516):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x20008d0, &(0x7f0000000400)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6e6f757365725f78617474722c636f686572656e63793d66756c6c2c646174613d77726974656261636b2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030312c61636c2c6e6f61636c2c6c6f63616c616c6c6f633d30303030303030303030303030303030302c00a89f6b8d5800aa954e6c8735dcd52921ce08462fb4ce7c1600883251443ac332f4d17b77d29867e4321610916dbc5963e9fb59a032c92e32ebffc3b739951e866d52bff6bd63136a656222062a8eea0cf97480bc8ac6c0e8a2aa38ffa8fa758cd54b9ef39a7f536d7b85173a83c34d78e210ecf4d040817bbe989e9eb015acb84b99b2ed90f71810cd92eeca69f5275cb7b7027d4babf643bd69b0a68134c022fe5dcd03834f547325ac2d1a5d16f074d898946ff71afa90180b317e645dd58a922e5d907462cd50dc23801c48c0d49ab012961d84d2eb85a3730a3f3177da048c3bc991216b11dca020afefc24ae7583b59534a0ab1fca82bf473216141db8e9864f7861d0500a920e1a8d3352d0662f586e743386e87b6c0c5ed6e4d192ef2990b44cedbb708e7a18b20dcd5573b603c4d659992647ffa8210abf4e9d232b52a8ea1dd1c045afd8e472cd1fbb775e89cca49d136a6"], 0x1, 0x4446, &(0x7f00000088c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)

2.192822875s ago: executing program 2 (id=518):
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
read(r1, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000000c0)={0x9ee, 0x1, 'client0\x00', 0x0, "a44bf30000051057", "c2382b4c6bb074dcb971c144adc7e6576c93d30263c40dbdd1b75d7917ca30cb", 0x15, 0x800})
tkill(r0, 0x7)

1.9197893s ago: executing program 2 (id=519):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000e1d000/0x2000)=nil, 0x2000, 0x3000001, 0x31, 0xffffffffffffffff, 0x2e098000)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0)
syz_clone3(&(0x7f0000000600)={0x80002200, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

1.900772201s ago: executing program 0 (id=520):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0x0, 0x2}, 0x1c)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002a60000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)

1.44472016s ago: executing program 0 (id=521):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0xa4, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x5}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x800, 0x2, 0x3, 0x0, {0xe, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x1, 0xc9b9, 0xb}}, @void, @void, @val={0x76, 0x6, {0x0, 0x1, 0x2b, 0x4}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xf5c}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x20, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x17, 0x2, "9e5ad9738d4f0772a1fff33003923fcaef532d"}]}]]}, 0xa4}}, 0x0)

1.278662343s ago: executing program 2 (id=522):
r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000640)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0xc, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r0, 0x22d2, 0x20, 0x0, 0x0, 0x0)

1.210163285s ago: executing program 0 (id=523):
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffb, 0x2}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000001080211000000505050505050d00003"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

952.62598ms ago: executing program 0 (id=524):
r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r1 = dup(r0)
r2 = fanotify_init(0x0, 0x40000)
fanotify_mark(r2, 0x1, 0x40000003, r1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000000001000500380010"], 0x178)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

952.26726ms ago: executing program 2 (id=525):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001040)="8a", 0x1}], 0x1, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000001}], 0x1, 0x48000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)

707.039655ms ago: executing program 0 (id=526):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)

622.085547ms ago: executing program 1 (id=527):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3114}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x4c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

259.344345ms ago: executing program 0 (id=528):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0)

258.898535ms ago: executing program 1 (id=529):
syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000140)='./file1\x00', 0x3000840, &(0x7f00000004c0)=ANY=[@ANYBLOB="6469725f756d61736b3d303030303030303030303030303030342c66696c655f756d61736b3d30303030303030303030303030303030303030313334302c696f636861727365743d6d61637475726b6973682c636f6465706167653d69736f383835392d362c63726561746f723d4ddd71752c00eace691af6ae10469da9b01baceb6a9486a6be7f83429052dab3e6e5e287ba3d79e809945e4361c0019a8ed88ae1c6c541bb9a966c0e4d7bde2f8e3add0af5a9c74c520f889381fbcf573e0000000000"], 0x11, 0x2e1, &(0x7f0000000ac0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mkdir(&(0x7f0000000040)='./bus\x00', 0xd2)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000))
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1)

95.351688ms ago: executing program 4 (id=530):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="10000000051480"], 0x10}, 0x1, 0x0, 0x0, 0x1}, 0xc0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x9, 0x30, 0x6e673fc2, 0x8}, &(0x7f00000002c0)=0x18)

0s ago: executing program 1 (id=531):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)=r3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts.
[   75.465964][ T5776] cgroup: Unknown subsys name 'net'
[   75.609123][ T5776] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   77.228382][ T5776] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   79.242805][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.251752][   T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.259365][   T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.276909][   T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.284980][   T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   79.293389][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   79.308909][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   79.328892][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.342773][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   79.351774][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   79.364648][   T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.377096][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   79.395652][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   79.395732][   T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   79.409203][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.411889][   T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   79.425141][   T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   79.432617][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   79.434028][   T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   79.457528][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   79.465479][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   79.473292][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.480855][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   79.488397][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   79.887943][ T5795] chnl_net:caif_netlink_parms(): no params data found
[   80.100277][ T5799] chnl_net:caif_netlink_parms(): no params data found
[   80.147633][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.155623][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.163036][ T5795] bridge_slave_0: entered allmulticast mode
[   80.170104][ T5795] bridge_slave_0: entered promiscuous mode
[   80.184836][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.192275][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.199640][ T5795] bridge_slave_1: entered allmulticast mode
[   80.206605][ T5795] bridge_slave_1: entered promiscuous mode
[   80.217586][ T5786] chnl_net:caif_netlink_parms(): no params data found
[   80.251901][ T5790] chnl_net:caif_netlink_parms(): no params data found
[   80.300052][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.313049][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.419962][ T5795] team0: Port device team_slave_0 added
[   80.454726][ T5795] team0: Port device team_slave_1 added
[   80.483745][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.491115][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.498850][ T5799] bridge_slave_0: entered allmulticast mode
[   80.505854][ T5799] bridge_slave_0: entered promiscuous mode
[   80.514401][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.521580][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.528837][ T5799] bridge_slave_1: entered allmulticast mode
[   80.536118][ T5799] bridge_slave_1: entered promiscuous mode
[   80.601225][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.608495][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.635039][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.647082][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.654342][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.661605][ T5790] bridge_slave_0: entered allmulticast mode
[   80.668695][ T5790] bridge_slave_0: entered promiscuous mode
[   80.685643][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.693022][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.700337][ T5786] bridge_slave_0: entered allmulticast mode
[   80.707660][ T5786] bridge_slave_0: entered promiscuous mode
[   80.715368][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.722580][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.748562][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.766284][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.773550][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.780906][ T5790] bridge_slave_1: entered allmulticast mode
[   80.787717][ T5790] bridge_slave_1: entered promiscuous mode
[   80.796707][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.809551][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.818813][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.825950][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.833273][ T5786] bridge_slave_1: entered allmulticast mode
[   80.840373][ T5786] bridge_slave_1: entered promiscuous mode
[   80.905713][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.942325][ T5799] team0: Port device team_slave_0 added
[   80.973206][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.985330][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.997400][ T5799] team0: Port device team_slave_1 added
[   81.007238][ T5795] hsr_slave_0: entered promiscuous mode
[   81.013729][ T5795] hsr_slave_1: entered promiscuous mode
[   81.034105][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.109116][ T5790] team0: Port device team_slave_0 added
[   81.126882][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.133957][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.160160][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.173505][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.181066][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.207048][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.221892][ T5786] team0: Port device team_slave_0 added
[   81.229813][ T5790] team0: Port device team_slave_1 added
[   81.237138][ T5786] team0: Port device team_slave_1 added
[   81.317866][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.325215][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.351313][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.364616][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.371645][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.397663][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.427658][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.435288][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.461393][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.478478][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.485451][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.512214][ T5798] Bluetooth: hci2: command tx timeout
[   81.517804][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.529127][ T5798] Bluetooth: hci0: command tx timeout
[   81.554093][ T5799] hsr_slave_0: entered promiscuous mode
[   81.560720][ T5799] hsr_slave_1: entered promiscuous mode
[   81.566867][ T5799] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.575594][ T5799] Cannot create hsr debugfs directory
[   81.581202][ T5792] Bluetooth: hci1: command tx timeout
[   81.586947][ T5798] Bluetooth: hci3: command tx timeout
[   81.641492][ T5786] hsr_slave_0: entered promiscuous mode
[   81.651443][ T5786] hsr_slave_1: entered promiscuous mode
[   81.657548][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.666023][ T5786] Cannot create hsr debugfs directory
[   81.854334][ T5790] hsr_slave_0: entered promiscuous mode
[   81.867243][ T5790] hsr_slave_1: entered promiscuous mode
[   81.876673][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.888251][ T5790] Cannot create hsr debugfs directory
[   82.183099][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.202509][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.218076][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.229039][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.381100][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   82.403937][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   82.419863][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   82.430721][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   82.507672][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.529654][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.541438][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.552471][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.625383][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.639792][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.650141][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.676745][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   82.741386][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.799184][ T5795] 8021q: adding VLAN 0 to HW filter on device team0
[   82.842105][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.849546][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.882663][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.889835][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.931951][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.979923][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.999854][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   83.023517][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.052631][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.059817][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.086762][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.094003][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.107436][ T5799] 8021q: adding VLAN 0 to HW filter on device team0
[   83.162615][ T5790] 8021q: adding VLAN 0 to HW filter on device team0
[   83.192448][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.199994][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.244799][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.252070][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.266302][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.273451][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.283225][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.290379][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.463436][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.487382][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.578841][ T5798] Bluetooth: hci2: command tx timeout
[   83.584404][ T5798] Bluetooth: hci0: command tx timeout
[   83.637640][ T5795] veth0_vlan: entered promiscuous mode
[   83.652473][ T5795] veth1_vlan: entered promiscuous mode
[   83.659487][ T5792] Bluetooth: hci1: command tx timeout
[   83.665003][ T5798] Bluetooth: hci3: command tx timeout
[   83.821184][ T5795] veth0_macvtap: entered promiscuous mode
[   83.866064][ T5795] veth1_macvtap: entered promiscuous mode
[   83.926394][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.951354][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.971929][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.987799][ T5795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.996968][ T5795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.009343][ T5795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.018069][ T5795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.035722][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.130712][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.189744][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.190070][ T5786] veth0_vlan: entered promiscuous mode
[   84.197723][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.264610][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.276450][ T5786] veth1_vlan: entered promiscuous mode
[   84.283366][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.290697][ T5799] veth0_vlan: entered promiscuous mode
[   84.307549][ T5799] veth1_vlan: entered promiscuous mode
[   84.383408][ T5790] veth0_vlan: entered promiscuous mode
[   84.403805][ T5799] veth0_macvtap: entered promiscuous mode
[   84.421218][ T5790] veth1_vlan: entered promiscuous mode
[   84.436696][ T5786] veth0_macvtap: entered promiscuous mode
[   84.448850][ T5799] veth1_macvtap: entered promiscuous mode
[   84.491062][ T5786] veth1_macvtap: entered promiscuous mode
[   84.543737][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.557498][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.574891][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.589314][ T5881] syz.3.4[5881]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   84.604287][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.618123][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.631380][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.642136][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.654019][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.679386][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.690629][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.709303][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.716351][ T5881] loop3: detected capacity change from 0 to 8192
[   84.726961][ T5799] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.739574][ T5799] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.748745][ T5799] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.757598][ T5799] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.772553][ T5790] veth0_macvtap: entered promiscuous mode
[   84.782572][ T5881]  loop3: p1 p2 p4
[   84.787613][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.791381][ T5881] loop3: partition table partially beyond EOD, truncated
[   84.800500][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.816917][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.823541][ T5881] loop3: p1 start 3959422976 is beyond EOD, truncated
[   84.829209][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.847669][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.851403][ T5881] loop3: p2 size 515840 extends beyond EOD, truncated
[   84.872258][ T5790] veth1_macvtap: entered promiscuous mode
[   84.891887][ T5881] loop3: p4 size 1073741824 extends beyond EOD, truncated
[   84.911515][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.928295][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.937047][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.948745][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.012413][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.035363][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.046206][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.057522][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.068883][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.080198][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.129255][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.235628][ T5794] udevd[5794]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   85.254919][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   85.259926][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.285749][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.296209][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.309975][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.321417][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.333533][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.352551][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.426043][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.441246][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.452710][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.464317][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.506440][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.523179][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.640082][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.658569][ T5798] Bluetooth: hci0: command tx timeout
[   85.664024][ T5798] Bluetooth: hci2: command tx timeout
[   85.708123][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.720152][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.738373][ T5792] Bluetooth: hci1: command tx timeout
[   85.743923][ T5798] Bluetooth: hci3: command tx timeout
[   85.749901][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.758659][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.777322][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.822486][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.940383][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.963203][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.011719][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.085730][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.644690][ T5900] 9pnet: p9_errstr2errno: server reported unknown error _vlan
[   86.787917][   T23] cfg80211: failed to load regulatory.db
[   86.898450][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   87.108749][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   87.378809][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   88.003866][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   88.012583][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   88.208689][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[   88.218697][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   88.283985][ T5945] loop0: detected capacity change from 0 to 131072
[   88.318345][ T5798] Bluetooth: hci2: command tx timeout
[   88.323803][ T5798] Bluetooth: hci0: command tx timeout
[   88.324682][ T5792] Bluetooth: hci3: command tx timeout
[   88.331579][ T5798] Bluetooth: hci1: command tx timeout
[   88.378594][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   88.567968][ T5945] F2FS-fs (loop0): invalid crc value
[   88.660064][ T5945] F2FS-fs (loop0): Found nat_bits in checkpoint
[   88.730641][ T5945] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   88.781927][ T5971] loop3: detected capacity change from 0 to 512
[   88.809856][ T5898] loop1: detected capacity change from 0 to 32768
[   88.839271][ T5971] =======================================================
[   88.839271][ T5971] WARNING: The mand mount option has been deprecated and
[   88.839271][ T5971]          and is ignored by this kernel. Remove the mand
[   88.839271][ T5971]          option from the mount to silence this warning.
[   88.839271][ T5971] =======================================================
[   88.939267][   T27] audit: type=1800 audit(1759764721.540:2): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9" name="file1" dev="loop0" ino=7 res=0 errno=0
[   88.993201][ T5971] EXT4-fs: inline encryption not supported
[   89.021325][ T5971] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   89.072919][ T5971] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   89.225712][ T5971] EXT4-fs (loop3): 1 truncate cleaned up
[   89.234158][ T5971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.319042][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.365513][ T5976] loop2: detected capacity change from 0 to 256
[   89.474212][ T5898] jfs_rmdir: dtDelete returned -116
[   89.564179][ T5898] jfs_rmdir: dtDelete returned -116
[   89.871842][ T5981] loop1: detected capacity change from 0 to 64
[   90.584355][ T5979] loop3: detected capacity change from 0 to 32768
[   90.593736][ T5976] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 194)
[   90.625101][ T5976] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 194)
[   90.631734][ T5979] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.13 (5979)
[   90.748715][ T5979] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   90.767234][ T5979] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   90.793574][ T5979] BTRFS info (device loop3): setting nodatacow, compression disabled
[   90.826963][ T5979] BTRFS info (device loop3): max_inline at 0
[   90.861008][ T5979] BTRFS info (device loop3): enabling disk space caching
[   90.869185][ T5979] BTRFS info (device loop3): turning off barriers
[   90.876315][ T5979] BTRFS info (device loop3): turning on flush-on-commit
[   90.909330][ T5979] BTRFS info (device loop3): doing ref verification
[   90.918757][ T5979] BTRFS info (device loop3): force clearing of disk cache
[   90.936183][ T5979] BTRFS info (device loop3): enabling ssd optimizations
[   90.948272][ T5979] BTRFS info (device loop3): max_inline at 4096
[   90.954606][ T5979] BTRFS info (device loop3): disk space caching is enabled
[   91.002655][   T27] audit: type=1326 audit(1759764723.630:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.2.19" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4b758eec9 code=0x0
[   91.190105][ T5979] BTRFS info (device loop3): auto enabling async discard
[   91.222180][ T5979] BTRFS info (device loop3): rebuilding free space tree
[   91.352341][ T6011] loop0: detected capacity change from 0 to 1024
[   91.367239][ T6013] netlink: 'syz.1.21': attribute type 30 has an invalid length.
[   91.378019][ T5979] BTRFS info (device loop3): disabling free space tree
[   91.385612][ T6013] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.385739][ T6013] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.385770][ T6013] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.385799][ T6013] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.424352][ T5979] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   91.436216][ T6013] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   91.436774][ T5979] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   91.445706][ T6013] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   91.464742][ T6013] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   91.466681][ T6011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.473703][ T6013] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   91.629903][ T6013] Zero length message leads to an empty skb
[   91.828596][ T5858] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   91.841394][ T6019] loop1: detected capacity change from 0 to 256
[   91.860543][ T5795] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   91.889734][ T6019] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   92.077039][ T5858] usb 1-1: Using ep0 maxpacket: 8
[   92.112487][ T5858] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[   92.154109][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.179328][ T6023] loop2: detected capacity change from 0 to 1024
[   92.251319][ T5858] pvrusb2: Hardware description: Terratec Grabster AV400
[   92.282131][ T6025] netlink: 'syz.3.23': attribute type 1 has an invalid length.
[   92.305790][ T5858] pvrusb2: **********
[   92.320122][ T6023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.341697][ T5858] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[   92.367082][ T6029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.426911][ T5858] pvrusb2: Important functionality might not be entirely working.
[   92.460260][ T5858] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[   92.475152][ T6030] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.504929][ T5858] pvrusb2: **********
[   92.526861][ T2318] pvrusb2: Invalid write control endpoint
[   92.549888][ T6023] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   92.586640][ T6023] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   92.646247][ T6023] EXT4-fs (loop2): This should not happen!! Data will be lost
[   92.646247][ T6023] 
[   92.685915][ T6023] EXT4-fs (loop2): Total free blocks count 0
[   92.698074][ T2318] pvrusb2: Invalid write control endpoint
[   92.708265][ T6023] EXT4-fs (loop2): Free/Dirty block details
[   92.717025][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[   92.733851][ T6023] EXT4-fs (loop2): free_blocks=68451041280
[   92.740826][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[   92.751651][ T6023] EXT4-fs (loop2): dirty_blocks=80
[   92.756802][ T6023] EXT4-fs (loop2): Block reservation details
[   92.763009][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[   92.771888][ T6035] loop3: detected capacity change from 0 to 1024
[   92.779369][ T6023] EXT4-fs (loop2): i_reserved_data_blocks=5
[   92.782238][ T2318] pvrusb2: Device being rendered inoperable
[   92.788657][ T6033] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28
[   92.815330][ T6035] EXT4-fs: Ignoring removed nomblk_io_submit option
[   92.825423][ T6011] pvrusb2: Attempted to execute control transfer when device not ok
[   92.847013][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[   92.853970][  T787] usb 1-1: USB disconnect, device number 2
[   92.864816][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[   92.893115][ T6035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.895130][ T2318] pvrusb2: Attached sub-driver cx25840
[   92.916071][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[   92.935799][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[   93.115586][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.186955][ T6041] loop3: detected capacity change from 0 to 512
[   93.194321][ T6041] EXT4-fs: Ignoring removed nobh option
[   93.217663][ T6041] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.29: iget: bad i_size value: 38620345925642
[   93.290324][ T6041] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.29: couldn't read orphan inode 15 (err -117)
[   93.309484][ T6041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.338703][    T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   93.456790][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.528995][    T8] usb 3-1: Using ep0 maxpacket: 16
[   93.541967][    T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   93.561880][    T8] usb 3-1: config 0 has no interface number 0
[   93.593921][    T8] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   93.613559][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.627494][    T8] usb 3-1: Product: syz
[   93.630630][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.632286][    T8] usb 3-1: Manufacturer: syz
[   93.647751][    T8] usb 3-1: SerialNumber: syz
[   93.658040][    T8] usb 3-1: config 0 descriptor??
[   93.680766][    T8] gspca_main: spca1528-2.14.0 probing 04fc:1528
[   93.686769][ T6049] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   93.877088][ T6054] loop3: detected capacity change from 0 to 1024
[   93.895217][ T6054] EXT4-fs: Ignoring removed orlov option
[   93.903729][ T6054] EXT4-fs: Ignoring removed nomblk_io_submit option
[   93.944071][ T6054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.074832][ T6060] netlink: 51 bytes leftover after parsing attributes in process `syz.1.35'.
[   94.118560][  T787] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   94.202434][ T6063] loop1: detected capacity change from 0 to 64
[   94.236230][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.298714][  T787] usb 1-1: Using ep0 maxpacket: 16
[   94.318966][  T787] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[   94.347814][  T787] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[   94.359291][  T787] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[   94.377928][  T787] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[   94.394658][  T787] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[   94.406188][  T787] usb 1-1: config 0 has no interface number 0
[   94.416061][  T787] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[   94.428048][  T787] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[   94.443201][  T787] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[   94.466127][  T787] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   94.485431][  T787] usb 1-1: config 0 interface 125 has no altsetting 0
[   94.492611][  T787] usb 1-1: config 0 interface 125 has no altsetting 2
[   94.512152][  T787] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[   94.531622][  T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.554874][  T787] usb 1-1: Product: syz
[   94.565003][  T787] usb 1-1: Manufacturer: syz
[   94.575353][  T787] usb 1-1: SerialNumber: syz
[   94.589210][  T787] usb 1-1: config 0 descriptor??
[   94.606807][  T787] usb 1-1: selecting invalid altsetting 2
[   94.935865][    T8] gspca_spca1528: reg_w err -71
[   94.947642][    T8] spca1528: probe of 3-1:0.1 failed with error -71
[   94.976196][    T8] usb 3-1: USB disconnect, device number 2
[   95.026952][ T6055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   95.048943][ T6055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   95.658949][  T787] get_1284_register timeout
[   95.663748][    C1] usb 1-1: async_complete: urb error -104
[   95.669784][    C1] usb 1-1: async_complete: urb error -104
[   95.675675][    C1] usb 1-1: async_complete: urb error -104
[   95.696335][  T787] uss720: probe of 1-1:0.125 failed with error -5
[   95.756166][   T23] usb 1-1: USB disconnect, device number 3
[   95.762354][ T5855] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   95.960394][ T5855] usb 2-1: config 0 has an invalid interface number: 149 but max is 0
[   95.998209][ T5855] usb 2-1: config 0 has no interface number 0
[   96.012082][ T5855] usb 2-1: too many endpoints for config 0 interface 149 altsetting 88: 114, using maximum allowed: 30
[   96.040292][ T5855] usb 2-1: config 0 interface 149 altsetting 88 has 0 endpoint descriptors, different from the interface descriptor's value: 114
[   96.080390][ T5855] usb 2-1: config 0 interface 149 has no altsetting 0
[   96.099029][ T5855] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   96.114633][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.132221][ T5855] usb 2-1: Product: syz
[   96.141049][ T5855] usb 2-1: Manufacturer: syz
[   96.145691][ T5855] usb 2-1: SerialNumber: syz
[   96.165218][ T5855] usb 2-1: config 0 descriptor??
[   96.446908][ T5855] usb 2-1: USB disconnect, device number 2
[   97.074746][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.100216][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.120923][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.138296][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.158274][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.187549][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.200934][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.226378][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.244354][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.266697][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.285548][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.312905][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.342585][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.363928][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.382292][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.392048][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.415911][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.431697][ T5855] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   97.470834][ T5855] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1
[   97.667168][ T6130] loop1: detected capacity change from 0 to 2048
[   97.724910][ T6128] fido_id[6128]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   97.776215][ T6130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.902161][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'.
[   97.945934][ T6130] EXT4-fs (loop1): shut down requested (2)
[   98.079937][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.618360][    T8] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   98.811117][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.829808][    T8] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   98.836820][ T6169] loop3: detected capacity change from 0 to 128
[   98.861916][    T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   98.875624][ T6169] EXT4-fs: Ignoring removed nobh option
[   98.897747][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.913222][ T6169] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   98.934347][    T8] usb 2-1: Product: syz
[   98.948734][   T58] wlan1: Trigger new scan to find an IBSS to join
[   98.959225][ T6169] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   98.998364][    T8] usb 2-1: Manufacturer: syz
[   99.003116][    T8] usb 2-1: SerialNumber: syz
[   99.089131][    T8] cdc_ncm 2-1:1.0: skipping garbage
[   99.298287][ T5855] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   99.479752][ T5855] usb 4-1: Using ep0 maxpacket: 16
[   99.505612][ T5855] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[   99.518230][ T5855] usb 4-1: config 0 has no interface number 0
[   99.524473][ T5855] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.558358][ T5855] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.576149][ T5855] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   99.624408][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.653437][ T5855] usb 4-1: config 0 descriptor??
[   99.885736][ T6193] loop0: detected capacity change from 0 to 4096
[   99.913318][ T6193] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  100.096231][    T8] cdc_ncm 2-1:1.0: bind() failure
[  100.117379][    T8] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  100.138993][    T8] cdc_ncm 2-1:1.1: bind() failure
[  100.332543][ T5855] uclogic 0003:28BD:0071.0002: pen parameters not found
[  100.347784][ T5855] uclogic 0003:28BD:0071.0002: interface is invalid, ignoring
[  100.375118][   T23] usb 2-1: USB disconnect, device number 3
[  100.564101][    T8] usb 4-1: USB disconnect, device number 2
[  100.565395][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'.
[  100.651360][  T787] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  100.686868][ T6203] loop0: detected capacity change from 0 to 2048
[  100.719543][ T6203] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.879688][  T787] usb 3-1: Using ep0 maxpacket: 16
[  100.897894][  T787] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  100.915323][  T787] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.926351][  T787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  100.939216][  T787] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  100.968459][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.976513][  T787] usb 3-1: Product: syz
[  100.991435][  T787] usb 3-1: Manufacturer: syz
[  100.996100][  T787] usb 3-1: SerialNumber: syz
[  101.176989][ T5795] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  101.471596][  T787] usb 3-1: 0:2 : does not exist
[  101.908001][ T5947] wlan1: Trigger new scan to find an IBSS to join
[  102.358183][    C0] sched: RT throttling activated
[  102.381458][ T5855] usb 3-1: USB disconnect, device number 3
[  102.826601][ T6225] loop3: detected capacity change from 0 to 40427
[  102.865476][ T6225] F2FS-fs (loop3): build fault injection attr: rate: 694, type: 0x7ffff
[  102.919860][ T6225] F2FS-fs (loop3): invalid crc value
[  102.974695][ T6225] F2FS-fs (loop3): Found nat_bits in checkpoint
[  103.231782][ T6225] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  103.449209][ T6225] F2FS-fs (loop3): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fb/0x5b0
[  103.595047][ T6239] loop2: detected capacity change from 0 to 512
[  103.625449][ T5795] syz-executor: attempt to access beyond end of device
[  103.625449][ T5795] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  103.674217][ T6239] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.105: corrupted in-inode xattr: invalid ea_ino
[  103.703443][ T5795] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  103.727149][ T6239] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.105: couldn't read orphan inode 15 (err -117)
[  103.748815][ T5795] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  103.787388][ T6216] loop1: detected capacity change from 0 to 262144
[  103.794780][ T6239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.850144][ T6216] F2FS-fs (loop1): invalid crc value
[  103.876367][ T6216] F2FS-fs (loop1): Found nat_bits in checkpoint
[  103.938480][ T6216] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  104.016036][ T6247] tipc: Started in network mode
[  104.021762][ T6247] tipc: Node identity 4, cluster identity 4711
[  104.027957][ T6247] tipc: Node number set to 4
[  104.035024][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.119483][   T27] audit: type=1800 audit(1759764736.730:4): pid=6216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.98" name="file1" dev="loop1" ino=7 res=0 errno=0
[  104.859555][ T5947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.048599][ T6251] loop0: detected capacity change from 0 to 32768
[  105.078474][ T6251] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.109 (6251)
[  105.128110][ T6251] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  105.141949][ T6251] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  105.178717][ T6251] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  105.198570][ T6251] BTRFS info (device loop0): use zstd compression, level 3
[  105.205831][ T6251] BTRFS info (device loop0): using free space tree
[  105.283405][ T6251] BTRFS info (device loop0): enabling ssd optimizations
[  105.302484][ T6251] BTRFS info (device loop0): auto enabling async discard
[  105.361235][ T6250] loop2: detected capacity change from 0 to 32768
[  105.461811][ T6250] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  105.509268][ T6250] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  105.644694][ T6250] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  105.686377][  T787] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  105.715725][  T787] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  105.842184][  T787] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 126ms
[  105.865922][  T787] gfs2: fsid=syz:syz.0: jid=0: Done
[  105.880857][ T6250] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  106.014933][ T5799] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  106.219705][ T6278] Bluetooth: MGMT ver 1.22
[  106.224521][ T6278] Bluetooth: hci0: unsupported parameter 5148
[  106.249726][ T6278] Bluetooth: hci0: unsupported parameter 65024
[  106.255970][ T6278] Bluetooth: hci0: unsupported parameter 5148
[  106.287585][ T6278] Bluetooth: hci0: unsupported parameter 65024
[  107.145067][ T6286] loop1: detected capacity change from 0 to 8192
[  107.889256][ T6282] loop3: detected capacity change from 0 to 40427
[  107.947848][ T6282] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  107.994659][ T6282] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  108.073924][ T6282] F2FS-fs (loop3): invalid crc value
[  108.255426][ T6282] F2FS-fs (loop3): Found nat_bits in checkpoint
[  108.451924][ T6282] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  108.486725][ T6282] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  108.924847][ T6282] syz.3.114: attempt to access beyond end of device
[  108.924847][ T6282] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  108.941560][ T6282] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  108.948906][ T6282] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  109.124354][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'.
[  109.340758][ T5858] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  109.572635][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.604679][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.632292][ T5858] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  109.653667][    C1] vcan0: j1939_tp_rxtimer: 0xffff888022efd000: rx timeout, send abort
[  109.663891][ T5858] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  109.677599][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.720324][ T5858] usb 2-1: config 0 descriptor??
[  110.163332][    C1] vcan0: j1939_tp_rxtimer: 0xffff888022efd000: abort rx timeout. Force session deactivation
[  110.165305][ T5858] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  110.271556][ T5858] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  110.307138][ T6334] loop0: detected capacity change from 0 to 256
[  110.777975][ T6345] loop3: detected capacity change from 0 to 4096
[  110.825491][ T6345] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  110.938879][ T6345] ntfs3: loop3: Inode r=19 is not in use!
[  110.958321][ T6345] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  111.094467][ T6345] ntfs3: loop3: ino=1d, "file1" failed to open parent directory r=400 to update
[  111.127331][ T6345] ntfs3: loop3: ino=1d, "file1" failed to open parent directory r=400 to update
[  111.211426][ T5931] ntfs3: loop3: ino=1d, failed to open parent directory r=400 to update
[  111.478453][ T6352] input: syz1 as /devices/virtual/input/input5
[  111.593678][    C0] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1
[  111.624583][    T8] usb 2-1: USB disconnect, device number 4
[  112.541633][ T6379] syz.1.153 uses obsolete (PF_INET,SOCK_PACKET)
[  112.620101][    T9] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0
[  112.633905][    T9] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0
[  112.642151][    T9] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0
[  112.663651][    T9] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  112.791734][ T6383] fido_id[6383]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  112.838374][    T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  113.048868][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.070511][    T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  113.102605][    T8] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  113.123452][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  113.131942][    T8] usb 2-1: SerialNumber: syz
[  113.355781][    T8] usb 2-1: 0:2 : does not exist
[  113.417062][    T8] usb 2-1: USB disconnect, device number 5
[  113.526580][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  113.642873][ T6397] loop2: detected capacity change from 0 to 512
[  113.710803][ T6397] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #12: comm syz.2.158: corrupted in-inode xattr: overlapping e_value 
[  113.733930][ T6397] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.158: couldn't read orphan inode 12 (err -117)
[  113.748976][ T6397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.834667][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.938257][  T787] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  114.104216][ T6405] loop2: detected capacity change from 0 to 8192
[  114.118449][  T787] usb 4-1: Using ep0 maxpacket: 32
[  114.125857][  T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.161088][  T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.208355][  T787] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  114.221863][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.249802][  T787] usb 4-1: config 0 descriptor??
[  114.267881][  T787] hub 4-1:0.0: USB hub found
[  114.291614][ T6407] loop1: detected capacity change from 0 to 1024
[  114.319871][ T6407] EXT4-fs: Ignoring removed bh option
[  114.357130][ T6407] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  114.486131][ T6407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.496627][ T6403] loop0: detected capacity change from 0 to 32768
[  114.508286][  T787] hub 4-1:0.0: 1 port detected
[  114.521017][ T6403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.161 (6403)
[  114.548253][ T6403] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  114.591060][ T6403] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  114.599955][ T6403] BTRFS info (device loop0): using free space tree
[  114.759460][ T6403] BTRFS info (device loop0): enabling ssd optimizations
[  114.794747][ T6403] BTRFS info (device loop0): auto enabling async discard
[  114.841514][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.162696][  T787] hub 4-1:0.0: activate --> -90
[  115.220801][ T5799] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  115.576069][   T23] usb 4-1: USB disconnect, device number 3
[  116.313907][ T6455] xt_CT: No such helper "pptp"
[  116.745644][ T6451] loop1: detected capacity change from 0 to 32768
[  116.837431][ T6463] loop2: detected capacity change from 0 to 2048
[  116.891437][ T6451] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  117.071166][ T6463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.207870][ T5790] ocfs2: Unmounting device (7,1) on (node local)
[  117.401576][ T6463] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  117.455950][ T6476] process 'syz.1.179' launched '/dev/fd/4' with NULL argv: empty string added
[  117.518397][ T6463] EXT4-fs (loop2): Remounting filesystem read-only
[  117.756014][ T6483] loop1: detected capacity change from 0 to 512
[  117.768930][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.786069][ T6483] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  117.818412][ T6483] EXT4-fs (loop1): 1 truncate cleaned up
[  117.847466][ T6483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.984581][ T6483] syz.1.182 (pid 6483) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  118.028318][  T787] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  118.201457][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.319585][  T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.338406][  T787] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  118.347437][  T787] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  118.421340][  T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.439402][  T787] usb 1-1: config 0 descriptor??
[  118.693694][  T787] usb 1-1: USB disconnect, device number 4
[  119.663167][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'.
[  119.742073][ T6510] loop2: detected capacity change from 0 to 4096
[  119.778984][ T6510] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  119.813852][ T6510] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096)
[  119.882067][ T5794] udevd[5794]: incorrect nilfs2 checksum on /dev/loop2
[  119.939080][ T6512] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  120.429072][ T6519] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  120.621305][ T6521] syzkaller0: tun_chr_ioctl cmd 1074025676
[  120.627329][ T6521] syzkaller0: owner set to 803
[  120.733454][ T6525] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  121.188235][ T5778] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  121.411705][ T5778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.428005][ T5778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.452265][ T5778] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  121.466360][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.516799][ T5778] usb 2-1: config 0 descriptor??
[  121.960042][ T5778] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  121.967420][ T5778] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  122.003722][ T5778] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0005/input/input6
[  122.098624][ T5778] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  122.165417][ T6530] loop1: detected capacity change from 0 to 1024
[  122.447433][ T6548] loop0: detected capacity change from 0 to 512
[  122.532881][ T6548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.605094][    T8] usb 2-1: USB disconnect, device number 6
[  122.649323][ T6548] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  122.764674][ T6548] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #2: comm syz.0.208: corrupted inode contents
[  122.831287][ T6548] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #2: comm syz.0.208: mark_inode_dirty error
[  122.848066][ T6548] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #2: comm syz.0.208: corrupted inode contents
[  122.869757][ T6548] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.208: mark_inode_dirty error
[  123.049529][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.103425][ T6461] Set syz1 is full, maxelem 65536 reached
[  123.272819][ T5931] hfsplus: b-tree write err: -5, ino 4
[  123.354598][ T6559] Bluetooth: hci0: service_discovery: too big uuid_count value 4459
[  124.511557][ T6585] loop3: detected capacity change from 0 to 64
[  124.699395][   T27] audit: type=1800 audit(1759764757.320:5): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.219" name="file1" dev="loop3" ino=21 res=0 errno=0
[  124.721741][ T6587] loop1: detected capacity change from 0 to 764
[  124.845639][   T27] audit: type=1800 audit(1759764757.470:6): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.219" name="file1" dev="loop3" ino=21 res=0 errno=0
[  125.203385][ T6594] bridge_slave_0: left allmulticast mode
[  125.228360][ T6594] bridge_slave_0: left promiscuous mode
[  125.234293][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.283451][ T6594] bridge_slave_1: left allmulticast mode
[  125.293808][ T6594] bridge_slave_1: left promiscuous mode
[  125.302759][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.332453][ T6594] bond0: (slave bond_slave_0): Releasing backup interface
[  125.388935][ T6594] bond0: (slave bond_slave_1): Releasing backup interface
[  125.405853][ T6574] loop0: detected capacity change from 0 to 65536
[  125.492036][ T6594] team0: Port device team_slave_0 removed
[  125.519401][ T6594] team0: Port device team_slave_1 removed
[  125.551218][ T6594] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.553617][ T6574] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  125.559391][ T6594] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.580700][ T6594] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.589453][ T6594] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.611694][ T6599] netlink: 'syz.1.224': attribute type 10 has an invalid length.
[  125.645417][ T6599] netlink: 40 bytes leftover after parsing attributes in process `syz.1.224'.
[  125.773773][ T6599] batman_adv: batadv0: Adding interface: virt_wifi0
[  125.796420][ T6599] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.824565][ T6599] batman_adv: batadv0: Interface activated: virt_wifi0
[  125.842736][ T6574] XFS (loop0): Ending clean mount
[  125.979854][ T5799] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  126.897140][ T6635] ALSA: mixer_oss: invalid OSS volume '/root/syz.uG4m6o'
[  126.910433][ T6635] ALSA: mixer_oss: invalid OSS volume '1ffffffff000-200000000000'
[  126.922741][ T6635] ALSA: mixer_oss: invalid OSS volume '200000000000-200001000000'
[  127.015974][ T6624] loop1: detected capacity change from 0 to 32768
[  127.033495][ T6624] XFS: ikeep mount option is deprecated.
[  127.043248][ T6622] loop2: detected capacity change from 0 to 40427
[  127.064306][ T6624] XFS: ikeep mount option is deprecated.
[  127.075392][ T6640] netlink: 32 bytes leftover after parsing attributes in process `syz.0.236'.
[  127.086719][ T6640] netlink: 32 bytes leftover after parsing attributes in process `syz.0.236'.
[  127.095887][ T6624] XFS: noikeep mount option is deprecated.
[  127.104133][ T6622] F2FS-fs (loop2): heap/no_heap options were deprecated
[  127.115780][ T6622] F2FS-fs (loop2): Image doesn't support compression
[  127.125100][ T6622] F2FS-fs (loop2): heap/no_heap options were deprecated
[  127.146257][ T6622] F2FS-fs (loop2): invalid crc value
[  127.155696][ T6624] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.172941][ T6622] F2FS-fs (loop2): Found nat_bits in checkpoint
[  127.318522][ T6622] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  127.354431][ T6624] XFS (loop1): Ending clean mount
[  127.582115][   T27] audit: type=1800 audit(1759764760.210:7): pid=6657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.230" name="file1" dev="loop1" ino=9286 res=0 errno=0
[  127.640004][ T6622] syz.2.228: attempt to access beyond end of device
[  127.640004][ T6622] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  127.660058][ T6624] XFS (loop1): User initiated shutdown received.
[  127.660507][ T6622] syz.2.228: attempt to access beyond end of device
[  127.660507][ T6622] loop2: rw=1, sector=45128, nr_sectors = 24 limit=40427
[  127.702239][ T6624] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497).  Shutting down filesystem.
[  127.717969][ T6622] syz.2.228: attempt to access beyond end of device
[  127.717969][ T6622] loop2: rw=1, sector=45184, nr_sectors = 16 limit=40427
[  127.745252][ T6624] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  127.879520][ T5790] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.895540][ T5786] syz-executor: attempt to access beyond end of device
[  127.895540][ T5786] loop2: rw=2049, sector=45200, nr_sectors = 8 limit=40427
[  127.923212][ T5786] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  128.205060][ T6661] loop1: detected capacity change from 0 to 512
[  128.263461][ T6661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.296712][ T6661] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  128.489992][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.577185][ T6659] loop3: detected capacity change from 0 to 32768
[  128.624294][ T6659] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.239 (6659)
[  128.673582][ T6659] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  128.716799][ T6659] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  128.752251][ T6659] BTRFS info (device loop3): using free space tree
[  128.885879][ T6659] BTRFS info (device loop3): enabling ssd optimizations
[  128.908234][ T6659] BTRFS info (device loop3): auto enabling async discard
[  129.021381][ T6690] loop2: detected capacity change from 0 to 512
[  129.080303][ T6690] EXT4-fs: Ignoring removed nomblk_io_submit option
[  129.115046][ T6690] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  129.136050][ T6690] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  129.206712][ T6690] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.241: Allocating blocks 41-42 which overlap fs metadata
[  129.236831][ T6690] EXT4-fs (loop2): Remounting filesystem read-only
[  129.259181][ T6690] Quota error (device loop2): write_blk: dquota write failed
[  129.268103][ T6690] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  129.282399][ T6690] Quota error (device loop2): write_blk: dquota write failed
[  129.290324][ T6690] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  129.291110][ T5795] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  129.301004][ T6690] EXT4-fs (loop2): 1 truncate cleaned up
[  129.318014][ T6690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.423542][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.771299][    T8] IPVS: starting estimator thread 0...
[  129.918511][ T6704] IPVS: using max 17 ests per chain, 40800 per kthread
[  129.936558][ T6706] sctp: [Deprecated]: syz.1.248 (pid 6706) Use of struct sctp_assoc_value in delayed_ack socket option.
[  129.936558][ T6706] Use struct sctp_sack_info instead
[  130.110348][ T6710] Bluetooth: hci0: invalid length 0, exp 2 for type 1
[  130.308579][   T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  130.541020][   T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.553770][   T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  130.565292][   T23] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  130.575015][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  130.583663][   T23] usb 2-1: SerialNumber: syz
[  130.817055][   T23] usb 2-1: 0:2 : does not exist
[  130.843738][   T23] usb 2-1: USB disconnect, device number 7
[  130.900966][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  131.122570][ T6732] loop2: detected capacity change from 0 to 512
[  131.171447][ T6732] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.259: casefold flag without casefold feature
[  131.224974][ T6732] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.259: couldn't read orphan inode 15 (err -117)
[  131.256020][ T6732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.346819][ T6732] fscrypt (loop2, inode 18): Unsupported encryption modes (contents 0, filenames 78)
[  131.429416][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.799275][ T6748] loop1: detected capacity change from 0 to 512
[  131.862754][ T6748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.878932][ T6739] loop3: detected capacity change from 0 to 32768
[  131.905826][ T6739] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.262 (6739)
[  131.916976][ T6748] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  131.969915][ T6748] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.265: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  132.002675][ T6748] EXT4-fs (loop1): Remounting filesystem read-only
[  132.044877][ T6739] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  132.090938][ T6739] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  132.122067][ T6739] BTRFS info (device loop3): turning on sync discard
[  132.142383][ T6739] BTRFS info (device loop3): enabling disk space caching
[  132.179466][ T6739] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  132.216764][ T6739] BTRFS info (device loop3): trying to use backup root at mount time
[  132.242895][ T6739] BTRFS info (device loop3): force clearing of disk cache
[  132.258815][ T6739] BTRFS info (device loop3): disk space caching is enabled
[  132.402539][ T6739] BTRFS info (device loop3): rebuilding free space tree
[  132.511424][ T6739] BTRFS info (device loop3): disabling free space tree
[  132.532632][ T6776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.550642][ T6739] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  132.574933][ T6739] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  132.783504][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.864429][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  132.960961][ T5795] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.157926][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  133.221490][ T6782] loop1: detected capacity change from 0 to 128
[  133.291342][ T6784] loop0: detected capacity change from 0 to 512
[  133.329492][ T6784] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  133.386404][ T6784] EXT4-fs (loop0): 1 truncate cleaned up
[  133.409868][ T6784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.819784][ T6801] loop1: detected capacity change from 0 to 512
[  133.845754][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.859464][ T6801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.092747][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.123458][ T6808] netlink: 'syz.0.282': attribute type 10 has an invalid length.
[  134.137357][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.145198][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.183044][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.190321][ T6808] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.197931][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.205220][ T6808] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.242324][ T6810] netlink: 104 bytes leftover after parsing attributes in process `syz.1.283'.
[  134.247039][ T6808] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  134.594565][ T6819] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  134.792639][ T6822] trusted_key: syz.2.288 sent an empty control message without MSG_MORE.
[  136.033327][ T6844] loop2: detected capacity change from 0 to 32768
[  136.071466][ T6844] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  136.457132][ T6877] syz.0.309[6877] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  136.457288][ T6877] syz.0.309[6877] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  136.479598][ T6844] XFS (loop2): Ending clean mount
[  136.540289][ T6844] XFS (loop2): Quotacheck needed: Please wait.
[  136.687069][ T6844] XFS (loop2): Quotacheck: Done.
[  136.747667][ T6883] loop3: detected capacity change from 0 to 64
[  136.813364][ T6859] loop1: detected capacity change from 0 to 32768
[  136.860880][ T6859] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.304 (6859)
[  136.917017][ T6859] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  136.930999][ T6886] syz.3.311: attempt to access beyond end of device
[  136.930999][ T6886] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  136.976764][ T6859] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  136.993146][ T6886] Buffer I/O error on dev loop3, logical block 134217734, async page read
[  137.024950][ T6859] BTRFS info (device loop1): using free space tree
[  137.042853][ T6886] syz.3.311: attempt to access beyond end of device
[  137.042853][ T6886] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  137.073099][ T6886] Buffer I/O error on dev loop3, logical block 134217734, async page read
[  137.087062][ T6886] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only
[  137.098168][ T6886] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  137.109055][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  137.109428][ T6886] overlayfs: failed to get uuid (/bus, err=-95); falling back to uuid=null.
[  137.127835][ T6883] syz.3.311: attempt to access beyond end of device
[  137.127835][ T6883] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  137.147729][ T6883] Buffer I/O error on dev loop3, logical block 134217734, async page read
[  137.161354][ T6883] syz.3.311: attempt to access beyond end of device
[  137.161354][ T6883] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  137.176565][ T6883] Buffer I/O error on dev loop3, logical block 134217734, async page read
[  137.209013][   T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  137.303126][ T6859] BTRFS info (device loop1): enabling ssd optimizations
[  137.320292][ T5795] syz-executor: attempt to access beyond end of device
[  137.320292][ T5795] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  137.378333][ T6859] BTRFS info (device loop1): auto enabling async discard
[  137.410991][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.423390][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.438637][ T5795] Buffer I/O error on dev loop3, logical block 134217734, async page read
[  137.457717][   T23] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  137.479459][ T5795] syz-executor: attempt to access beyond end of device
[  137.479459][ T5795] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  137.506970][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.528885][ T5795] Buffer I/O error on dev loop3, logical block 134217734, async page read
[  137.539325][   T23] usb 1-1: config 0 descriptor??
[  137.577076][ T5795] Trying to free block not in datazone
[  137.870052][ T5790] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  137.960681][   T23] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[  137.982295][   T23] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[  138.011382][   T23] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0006/input/input7
[  138.172891][   T23] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0
[  138.295023][   T23] usb 1-1: USB disconnect, device number 5
[  138.455710][ T6921] fido_id[6921]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  138.734384][ T6927] loop3: detected capacity change from 0 to 512
[  138.750897][ T6927] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  138.776044][ T6927] EXT4-fs (loop3): 1 truncate cleaned up
[  138.802161][ T6927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.107087][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.373647][ T6946] bridge_slave_0: left allmulticast mode
[  139.385644][ T6946] bridge_slave_0: left promiscuous mode
[  139.395057][ T6946] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.403729][ T6947] ALSA: mixer_oss: invalid OSS volume '/root/syz.R0ZE06'
[  139.418042][ T6946] bridge_slave_1: left allmulticast mode
[  139.430398][ T6947] ALSA: mixer_oss: invalid OSS volume '1ffffffff000-200000000000'
[  139.430408][ T6946] bridge_slave_1: left promiscuous mode
[  139.430764][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.456112][ T6947] ALSA: mixer_oss: invalid OSS volume '200000000000-200001000000'
[  139.474003][ T6946] bond0: (slave bond_slave_0): Releasing backup interface
[  139.505372][ T6946] bond0: (slave bond_slave_1): Releasing backup interface
[  139.614835][ T6946] team0: Port device team_slave_0 removed
[  139.640746][ T6946] team0: Port device team_slave_1 removed
[  139.647427][ T6946] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.663306][ T6950] loop2: detected capacity change from 0 to 764
[  139.672003][ T6946] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.688707][ T6946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.698394][ T6946] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.807874][ T6948] netlink: 'syz.3.328': attribute type 10 has an invalid length.
[  139.849085][ T6940] loop0: detected capacity change from 0 to 32768
[  139.862512][ T6948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.328'.
[  139.879693][ T6940] XFS: ikeep mount option is deprecated.
[  139.900577][ T6940] XFS: ikeep mount option is deprecated.
[  139.925725][ T6940] XFS: noikeep mount option is deprecated.
[  139.936736][ T6948] batman_adv: batadv0: Adding interface: virt_wifi0
[  139.949948][ T6948] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.977842][ T6948] batman_adv: batadv0: Interface activated: virt_wifi0
[  139.992499][ T6940] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  140.016356][ T6957] loop2: detected capacity change from 0 to 512
[  140.142333][ T6957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.163771][ T6957] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  140.321144][ T6940] XFS (loop0): Ending clean mount
[  140.378409][ T5797] Bluetooth: hci4: command 0x1003 tx timeout
[  140.386152][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  140.570470][   T27] audit: type=1800 audit(1759764773.200:8): pid=6966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.325" name="file1" dev="loop0" ino=9286 res=0 errno=0
[  140.610761][ T6940] XFS (loop0): User initiated shutdown received.
[  140.644695][ T6940] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497).  Shutting down filesystem.
[  140.668379][ T6940] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  140.765261][ T5799] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  140.919551][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.014970][ T6973] loop3: detected capacity change from 0 to 512
[  141.051307][ T6973] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  141.112506][ T6973] EXT4-fs (loop3): 1 truncate cleaned up
[  141.113202][ T6977] loop2: detected capacity change from 0 to 512
[  141.126529][ T6973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.147366][ T6973] EXT4-fs error (device loop3): ext4_nfs_get_inode:1551: inode #11: comm syz.3.335: iget: bad extra_isize 46 (inode size 256)
[  141.193474][ T6977] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  141.290050][ T6977] EXT4-fs (loop2): 1 truncate cleaned up
[  141.297046][ T6977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.401735][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.613285][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.747236][ T6991] bridge_slave_0: left allmulticast mode
[  141.760453][ T6991] bridge_slave_0: left promiscuous mode
[  141.784474][ T6993] loop0: detected capacity change from 0 to 764
[  141.791352][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.827977][ T6991] bridge_slave_1: left allmulticast mode
[  141.860644][ T6991] bridge_slave_1: left promiscuous mode
[  141.860889][ T6991] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.901727][ T6991] bond0: (slave bond_slave_0): Releasing backup interface
[  141.967178][ T6991] bond0: (slave bond_slave_1): Releasing backup interface
[  142.117667][ T6991] team0: Port device team_slave_0 removed
[  142.175207][ T6991] team0: Port device team_slave_1 removed
[  142.226775][ T6991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.239654][ T6991] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.250583][ T6991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.259100][ T6991] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.311902][ T6994] netlink: 'syz.2.340': attribute type 10 has an invalid length.
[  142.344477][ T6994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.340'.
[  142.358116][ T6994] batman_adv: batadv0: Adding interface: virt_wifi0
[  142.365024][ T6994] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.408499][ T6994] batman_adv: batadv0: Interface activated: virt_wifi0
[  142.545239][ T6989] loop3: detected capacity change from 0 to 32768
[  142.686630][ T7009] loop2: detected capacity change from 0 to 2048
[  142.714546][ T7009] EXT4-fs: Ignoring removed nobh option
[  142.782869][ T7009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.827071][ T7009] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.872228][   T27] audit: type=1800 audit(1759764775.500:9): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.346" name="file0" dev="loop2" ino=13 res=0 errno=0
[  142.932474][ T7009] fs-verity: sha256 using implementation "sha256-avx2"
[  143.093698][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.187247][ T7017] ALSA: seq fatal error: cannot create timer (-16)
[  143.263004][ T7019] loop1: detected capacity change from 0 to 512
[  143.271648][ T7021] loop3: detected capacity change from 0 to 16
[  143.290126][ T7019] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  143.324408][ T7023] loop2: detected capacity change from 0 to 128
[  143.341596][ T7019] EXT4-fs (loop1): 1 truncate cleaned up
[  143.358599][ T7021] erofs: (device loop3): mounted with root inode @ nid 36.
[  143.358915][ T7019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.429700][ T7023] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  143.531801][ T7023] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.792542][ T7031] loop3: detected capacity change from 0 to 764
[  143.864194][ T5786] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  143.877509][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.938899][ T7033] syz_tun: entered allmulticast mode
[  144.019861][ T7032] syz_tun: left allmulticast mode
[  144.105492][ T7037] loop1: detected capacity change from 0 to 128
[  144.191981][ T7037] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  144.277711][ T7037] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  144.334004][ T7046] bond0: (slave bridge0): Releasing backup interface
[  144.389537][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.396996][ T7046] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.455080][ T5790] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  144.503400][ T7046] bridge_slave_0: left allmulticast mode
[  144.524125][ T7046] bridge_slave_0: left promiscuous mode
[  144.538745][ T7046] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.568656][ T7046] bridge_slave_1: left allmulticast mode
[  144.590715][ T7046] bridge_slave_1: left promiscuous mode
[  144.610925][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.643722][ T7046] bond0: (slave bond_slave_0): Releasing backup interface
[  144.694996][ T7046] bond0: (slave bond_slave_1): Releasing backup interface
[  144.791690][ T7046] team0: Port device team_slave_0 removed
[  144.832846][ T7046] team0: Port device team_slave_1 removed
[  144.853277][ T7046] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.870696][ T7046] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.887917][ T7046] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.891459][ T7060] loop2: detected capacity change from 0 to 512
[  144.901195][ T7046] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.926365][ T7060] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  144.960625][ T7060] EXT4-fs (loop2): 1 truncate cleaned up
[  145.005231][ T7060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.045411][ T7048] netlink: 'syz.0.355': attribute type 10 has an invalid length.
[  145.064375][ T7048] netlink: 40 bytes leftover after parsing attributes in process `syz.0.355'.
[  145.244483][ T7068] loop3: detected capacity change from 0 to 1024
[  145.453204][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.691353][ T7086] "syz.2.372" (7086) uses obsolete ecb(arc4) skcipher
[  146.023095][ T7094] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  146.035970][ T7094] batman_adv: batadv0: Removing interface: virt_wifi0
[  146.106203][ T7094] netlink: 'syz.3.376': attribute type 10 has an invalid length.
[  146.114077][ T7094] netlink: 40 bytes leftover after parsing attributes in process `syz.3.376'.
[  146.125000][ T7094] batman_adv: batadv0: Adding interface: virt_wifi0
[  146.132477][ T7094] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.163887][ T7094] batman_adv: batadv0: Interface activated: virt_wifi0
[  146.253457][ T7090] loop2: detected capacity change from 0 to 32768
[  146.269955][ T7090] XFS: ikeep mount option is deprecated.
[  146.293713][ T7090] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  146.422305][ T7090] XFS (loop2): Ending clean mount
[  146.457199][ T7090] XFS (loop2): Quotacheck needed: Please wait.
[  146.546138][ T7112] loop3: detected capacity change from 0 to 512
[  146.558242][ T7090] XFS (loop2): Quotacheck: Done.
[  146.579920][ T7112] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  146.636055][ T7112] EXT4-fs (loop3): 1 truncate cleaned up
[  146.645890][ T7112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.752712][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  146.916790][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.144705][ T7121] loop2: detected capacity change from 0 to 4096
[  147.161664][ T7121] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  147.256366][ T7121] ntfs3: loop2: ino=0, attr_set_size
[  147.277808][ T7121] ntfs3: loop2: ino=0, attr_set_size
[  147.287731][ T7121] ntfs3: loop2: ino=0, attr_set_size
[  147.326524][ T7121] ntfs3: loop2: ino=0, attr_set_size
[  147.368807][ T7121] syz.2.380 (7121) used greatest stack depth: 20848 bytes left
[  147.634349][ T7123] loop3: detected capacity change from 0 to 32768
[  147.684530][ T7123] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  147.800231][   T27] audit: type=1800 audit(1759764780.430:10): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.382" name="file1" dev="loop3" ino=17059 res=0 errno=0
[  147.866664][ T5795] ocfs2: Unmounting device (7,3) on (node local)
[  148.038806][ T7137] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  148.046169][ T7137] batman_adv: batadv0: Removing interface: virt_wifi0
[  148.085863][ T7138] netlink: 'syz.2.386': attribute type 10 has an invalid length.
[  148.100977][ T7138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.386'.
[  148.123344][ T7138] batman_adv: batadv0: Adding interface: virt_wifi0
[  148.130979][ T7138] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.162814][ T7138] batman_adv: batadv0: Interface activated: virt_wifi0
[  148.312649][ T7142] loop3: detected capacity change from 0 to 1764
[  148.496190][ T7146] loop2: detected capacity change from 0 to 512
[  148.511971][ T7146] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  148.572548][ T7146] EXT4-fs (loop2): 1 truncate cleaned up
[  148.587346][ T7146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.904670][ T7158] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  149.012809][ T5931] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.065147][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.167834][ T5931] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.301028][ T5931] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.502266][ T5931] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.980084][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  149.992244][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  150.005417][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  150.016619][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  150.024679][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  150.032317][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  150.627890][ T7172] loop2: detected capacity change from 0 to 40427
[  150.645623][ T7172] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  150.666096][ T7172] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  150.717878][ T7172] F2FS-fs (loop2): invalid crc value
[  150.736454][ T7172] F2FS-fs (loop2): Found nat_bits in checkpoint
[  151.009511][ T7172] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  151.021472][ T7208] netlink: 11 bytes leftover after parsing attributes in process `syz.0.411'.
[  151.036161][ T7172] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  151.380576][ T7216] input: syz0 as /devices/virtual/input/input8
[  151.707173][ T2128] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  151.756533][ T2128] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  151.853955][ T2128] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  152.139262][ T5792] Bluetooth: hci2: command tx timeout
[  152.355145][ T7177] chnl_net:caif_netlink_parms(): no params data found
[  152.619093][ T5778] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  152.838220][ T5778] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  152.847324][ T5778] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  152.921373][ T5778] usb 2-1: Product: syz
[  152.925605][ T5778] usb 2-1: Manufacturer: syz
[  152.952332][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.973410][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.979569][ T5778] usb 2-1: SerialNumber: syz
[  153.001473][ T7177] bridge_slave_0: entered allmulticast mode
[  153.023181][ T7177] bridge_slave_0: entered promiscuous mode
[  153.026939][ T5778] usb 2-1: config 0 descriptor??
[  153.051229][ T5778] ch341 2-1:0.0: ch341-uart converter detected
[  153.063089][ T7254] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  153.138744][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.145928][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.191732][ T7177] bridge_slave_1: entered allmulticast mode
[  153.216953][ T7177] bridge_slave_1: entered promiscuous mode
[  153.382062][ T7177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.405071][ T7231] loop2: detected capacity change from 0 to 40427
[  153.431614][ T5931] hsr_slave_0: left promiscuous mode
[  153.446324][ T7231] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff
[  153.456327][ T5931] hsr_slave_1: left promiscuous mode
[  153.477252][ T7231] F2FS-fs (loop2): invalid crc value
[  153.483033][ T5931] batman_adv: batadv0: Removing interface: virt_wifi0
[  153.496455][ T7231] F2FS-fs (loop2): Found nat_bits in checkpoint
[  153.584754][ T5931] veth1_macvtap: left promiscuous mode
[  153.597896][ T5931] veth0_macvtap: left promiscuous mode
[  153.618523][ T5931] veth1_vlan: left promiscuous mode
[  153.632111][ T5931] veth0_vlan: left promiscuous mode
[  153.640012][ T7231] F2FS-fs (loop2): Start checkpoint disabled!
[  153.662271][ T7231] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  153.723595][   T27] audit: type=1800 audit(1759764786.350:11): pid=7231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.413" name="file1" dev="loop2" ino=10 res=0 errno=0
[  153.747710][ T7231] F2FS-fs (loop2): inject kvmalloc in f2fs_kvmalloc of f2fs_insert_range+0x314/0x3d0
[  153.930729][   T58] kworker/u4:4: attempt to access beyond end of device
[  153.930729][   T58] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  153.953019][   T58] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  153.960420][   T58] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  154.081391][ T5778] usb 2-1: ch341-uart converter now attached to ttyUSB0
[  154.283830][ T5855] usb 2-1: USB disconnect, device number 8
[  154.328957][ T5855] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  154.368724][ T5855] ch341 2-1:0.0: device disconnected
[  154.791641][ T7280] loop2: detected capacity change from 0 to 1024
[  155.237139][ T7284] loop2: detected capacity change from 0 to 4096
[  155.318352][ T7287] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  155.441040][ T7289] loop1: detected capacity change from 0 to 1024
[  155.556649][ T7290] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  155.576230][ T7290] Remounting filesystem read-only
[  155.608878][ T7289] hfsplus: xattr searching failed
[  155.634169][ T7289] hfsplus: xattr searching failed
[  155.656318][ T5786] NILFS (loop2): discard dirty page: offset=8192, ino=6
[  155.665255][ T5786] NILFS (loop2): discard dirty block: blocknr=25, size=4096
[  156.239408][ T5931] bond0 (unregistering): Released all slaves
[  156.312197][ T7177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.358497][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.434'.
[  156.393363][ T7297] sch_tbf: burst 0 is lower than device bridge1 mtu (1514) !
[  156.525364][ T7177] team0: Port device team_slave_0 added
[  156.550179][ T7177] team0: Port device team_slave_1 added
[  156.677223][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.702249][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.803138][ T7177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.891269][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.911890][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.978265][ T7177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.152575][ T7177] hsr_slave_0: entered promiscuous mode
[  157.198629][ T7177] hsr_slave_1: entered promiscuous mode
[  158.098959][ T7177] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  158.131804][ T7177] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  158.147071][ T7345] loop0: detected capacity change from 0 to 512
[  158.173049][ T7177] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  158.181733][ T7345] EXT4-fs: Ignoring removed i_version option
[  158.216423][ T7177] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  158.234895][ T7345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.328340][ T5858] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  158.434985][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.561728][ T5858] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  158.592543][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  158.628339][ T5858] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  158.668422][ T5858] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[  158.677520][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.694876][ T7177] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.725532][ T5858] usb 3-1: config 0 descriptor??
[  158.743468][ T7177] 8021q: adding VLAN 0 to HW filter on device team0
[  158.751574][ T7340] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  158.774444][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.781651][ T5931] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.799279][ T7359] loop0: detected capacity change from 0 to 8192
[  158.863030][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.870251][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.212518][ T5858] uclogic 0003:5543:0005.0007: No inputs registered, leaving
[  159.239380][ T5858] uclogic 0003:5543:0005.0007: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.2-1/input0
[  159.412866][ T5858] usb 3-1: USB disconnect, device number 4
[  159.496385][ T7177] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.886166][ T7177] veth0_vlan: entered promiscuous mode
[  159.914743][ T7177] veth1_vlan: entered promiscuous mode
[  159.967801][ T7177] veth0_macvtap: entered promiscuous mode
[  160.022673][ T7177] veth1_macvtap: entered promiscuous mode
[  160.137726][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.196948][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.233034][ T7177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.273338][ T7177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.307735][ T7177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.330462][ T7177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.374089][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'.
[  160.692150][ T5941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.708562][ T5855] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  160.734707][ T5941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.820466][ T5941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.838573][ T5941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.871998][ T7398] loop0: detected capacity change from 0 to 32768
[  160.911031][ T5855] usb 3-1: config 0 has no interfaces?
[  160.935419][ T5855] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  160.976279][ T7398] 
[  160.976279][ T7398]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  160.976279][ T7398] 
[  160.976991][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.051857][ T5855] usb 3-1: config 0 descriptor??
[  161.117771][   T27] audit: type=1800 audit(1759764793.740:12): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.459" name="file1" dev="loop0" ino=4 res=0 errno=0
[  161.138767][ T7398] 
[  161.138767][ T7398]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.138767][ T7398] 
[  161.158973][ T7398] 
[  161.158973][ T7398]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.158973][ T7398] 
[  161.210191][  T111] 
[  161.210191][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.210191][  T111] 
[  161.237127][ T7414] bridge_slave_0: left allmulticast mode
[  161.249573][ T7415] 
[  161.249573][ T7415]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.249573][ T7415] 
[  161.266731][ T5855] usb 3-1: USB disconnect, device number 5
[  161.271535][ T7398] 
[  161.271535][ T7398]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.271535][ T7398] 
[  161.294995][ T7414] bridge_slave_0: left promiscuous mode
[  161.328054][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.338217][ T7415] 
[  161.338217][ T7415]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.338217][ T7415] 
[  161.361614][ T7414] bridge_slave_1: left allmulticast mode
[  161.377762][ T7414] bridge_slave_1: left promiscuous mode
[  161.383625][ T7398] 
[  161.383625][ T7398]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.383625][ T7398] 
[  161.406396][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.421799][ T7415] 
[  161.421799][ T7415]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.421799][ T7415] 
[  161.454261][ T7414] bond0: (slave bond_slave_0): Releasing backup interface
[  161.465309][ T7415] 
[  161.465309][ T7415]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.465309][ T7415] 
[  161.488832][ T7415] 
[  161.488832][ T7415]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.488832][ T7415] 
[  161.508288][ T7415] 
[  161.508288][ T7415]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.508288][ T7415] 
[  161.523766][ T7414] bond0: (slave bond_slave_1): Releasing backup interface
[  161.533327][ T7415] 
[  161.533327][ T7415]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.533327][ T7415] 
[  161.562738][ T7415] 
[  161.562738][ T7415]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.562738][ T7415] 
[  161.592458][ T7415] 
[  161.592458][ T7415]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.592458][ T7415] 
[  161.607471][ T7414] team0: Port device team_slave_0 removed
[  161.625014][ T7415] 
[  161.625014][ T7415]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.625014][ T7415] 
[  161.681120][ T7414] team0: Port device team_slave_1 removed
[  161.685855][ T7415] 
[  161.685855][ T7415]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.685855][ T7415] 
[  161.708872][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.716348][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.744379][ T5799] 
[  161.744379][ T5799]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.744379][ T5799] 
[  161.761103][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.782360][ T7409] loop1: detected capacity change from 0 to 32768
[  161.795240][ T7414] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.799063][ T5799] 
[  161.799063][ T5799]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.799063][ T5799] 
[  161.806194][ T7409] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.456 (7409)
[  161.875740][ T7417] netlink: 'syz.4.398': attribute type 10 has an invalid length.
[  161.927282][ T7409] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  161.981360][ T7409] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  162.017063][ T7417] netlink: 40 bytes leftover after parsing attributes in process `syz.4.398'.
[  162.018262][ T7409] BTRFS info (device loop1): using free space tree
[  162.081118][ T7417] batman_adv: batadv0: Adding interface: virt_wifi0
[  162.087769][ T7417] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.114849][ T7417] batman_adv: batadv0: Interface activated: virt_wifi0
[  162.303326][ T7409] BTRFS info (device loop1): enabling ssd optimizations
[  162.363439][ T7409] BTRFS info (device loop1): auto enabling async discard
[  162.680060][ T7453] capability: warning: `syz.0.461' uses deprecated v2 capabilities in a way that may be insecure
[  162.946237][ T5790] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  163.022178][ T7457] kvm: Disabled LAPIC found during irq injection
[  163.133686][ T5794] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5794)
[  163.300629][ T7426] loop2: detected capacity change from 0 to 40427
[  163.388430][ T7426] F2FS-fs (loop2): invalid crc value
[  163.491731][ T7426] F2FS-fs (loop2): Found nat_bits in checkpoint
[  163.711244][ T7426] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  163.868244][   T27] audit: type=1800 audit(1759764796.490:13): pid=7426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.458" name="file1" dev="loop2" ino=10 res=0 errno=0
[  164.160334][ T7487] syz.2.458: attempt to access beyond end of device
[  164.160334][ T7487] loop2: rw=2049, sector=77824, nr_sectors = 2296 limit=40427
[  164.264888][ T7426] syz.2.458: attempt to access beyond end of device
[  164.264888][ T7426] loop2: rw=2049, sector=80120, nr_sectors = 272 limit=40427
[  164.304846][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.468'.
[  164.496362][ T5786] syz-executor: attempt to access beyond end of device
[  164.496362][ T5786] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  164.564811][ T7495] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  164.583958][ T5786] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  164.612852][ T7495] bond1: (slave vti0): Error -95 calling set_mac_address
[  165.647089][ T7516] loop1: detected capacity change from 0 to 8192
[  165.703561][ T7516] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  165.771070][ T7516] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  165.782794][ T7516] REISERFS (device loop1): using ordered data mode
[  165.789659][ T7516] reiserfs: using flush barriers
[  165.820265][ T7516] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  165.869281][ T7516] REISERFS (device loop1): checking transaction log (loop1)
[  165.903322][ T7516] REISERFS (device loop1): Using r5 hash to sort names
[  165.934362][ T7516] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  166.666499][ T7550] loop2: detected capacity change from 0 to 512
[  166.702026][ T7550] EXT4-fs: Ignoring removed bh option
[  166.766694][ T7554] loop1: detected capacity change from 0 to 512
[  166.796935][ T7556] loop4: detected capacity change from 0 to 256
[  166.805536][ T7550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.832512][ T7554] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  166.846272][ T7550] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  166.869150][ T7556] exfat: Unknown parameter 'namecascard'
[  166.943301][ T7554] EXT4-fs (loop1): 1 truncate cleaned up
[  166.997173][ T7554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.254271][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.346143][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.572678][ T7584] loop2: detected capacity change from 0 to 16
[  167.592343][ T7584] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  167.620400][ T7586] loop0: detected capacity change from 0 to 16
[  167.669517][ T7586] erofs: (device loop0): mounted with root inode @ nid 36.
[  168.309926][ T7610] netlink: 'syz.4.501': attribute type 1 has an invalid length.
[  168.708622][    T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  168.865252][ T7626] loop2: detected capacity change from 0 to 1024
[  168.962384][    T8] usb 2-1: Using ep0 maxpacket: 16
[  168.984638][ T7630] loop0: detected capacity change from 0 to 2048
[  168.993037][ T7626] hfsplus: small dir entry
[  168.999757][    T8] usb 2-1: config 0 has no interfaces?
[  169.076498][ T7630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.130720][    T8] usb 2-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55
[  169.169658][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.198027][    T8] usb 2-1: Product: syz
[  169.208731][    T8] usb 2-1: Manufacturer: syz
[  169.213387][    T8] usb 2-1: SerialNumber: syz
[  169.264749][    T8] usb 2-1: config 0 descriptor??
[  169.382829][ T5799] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  169.426252][ T5799] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6637: Corrupt filesystem
[  169.495589][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.612355][ T7623] loop4: detected capacity change from 0 to 32768
[  169.662480][ T7623] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.505 (7623)
[  169.726585][ T7623] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  169.782941][ T7623] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  169.822524][ T7623] BTRFS info (device loop4): metadata ratio 2
[  169.858315][ T7623] BTRFS info (device loop4): allowing degraded mounts
[  169.865174][ T7623] BTRFS info (device loop4): force zlib compression, level 3
[  169.934620][ T7623] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  169.967889][ T7623] BTRFS info (device loop4): use zstd compression, level 3
[  169.988218][ T7623] BTRFS info (device loop4): force clearing of disk cache
[  169.995497][ T7623] BTRFS info (device loop4): max_inline at 0
[  170.030885][ T7623] BTRFS info (device loop4): using free space tree
[  170.179934][ T7623] BTRFS info (device loop4): enabling ssd optimizations
[  170.210559][ T7623] BTRFS info (device loop4): rebuilding free space tree
[  170.236392][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'.
[  170.381821][   T27] audit: type=1800 audit(1759764803.010:14): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.505" name="file1" dev="loop4" ino=260 res=0 errno=0
[  170.633239][ T7177] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.201994][ T7698] mmap: syz.2.519 (7698) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  171.220053][ T7699] netlink: 'syz.0.520': attribute type 3 has an invalid length.
[  171.229641][ T7699] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.520'.
[  171.340769][    T8] usb 2-1: USB disconnect, device number 9
[  172.029677][ T7690] loop4: detected capacity change from 0 to 32768
[  172.156015][ T7690] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  172.322897][ T7690] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = 
[  172.424537][ T7726] netlink: 'syz.0.526': attribute type 13 has an invalid length.
[  172.434100][ T7690] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  172.472894][ T7690] OCFS2: File system is now read-only.
[  172.483297][ T7726] gretap0: refused to change device tx_queue_len
[  172.499939][ T7690] (syz.4.516,7690,0):ocfs2_find_entry_id:407 ERROR: status = -30
[  172.510877][ T7726] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  172.542019][ T7690] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = 
[  172.579547][ T7690] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  172.613381][ T7690] (syz.4.516,7690,0):ocfs2_assign_bh:2416 ERROR: status = -30
[  172.647413][ T7690] (syz.4.516,7690,0):ocfs2_inode_lock_full_nested:2511 ERROR: status = -30
[  172.694079][ T7690] (syz.4.516,7690,0):ocfs2_mknod:272 ERROR: status = -30
[  172.727443][ T7690] (syz.4.516,7690,0):ocfs2_create:676 ERROR: status = -30
[  172.778773][ T7737] loop1: detected capacity change from 0 to 64
[  172.882191][ T7177] ocfs2: Unmounting device (7,4) on (node local)
[  172.976875][ T5943] hfs: new node 0 already hashed?
[  172.993042][ T5943] ------------[ cut here ]------------
[  172.999122][ T5943] WARNING: CPU: 0 PID: 5943 at fs/hfs/bnode.c:520 hfs_bnode_create+0x3b9/0x440
[  173.008172][ T5943] Modules linked in:
[  173.012133][ T5943] CPU: 0 PID: 5943 Comm: kworker/u4:16 Not tainted syzkaller #0
[  173.020024][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  173.030170][ T5943] Workqueue: writeback wb_workfn (flush-7:1)
[  173.036397][ T5943] RIP: 0010:hfs_bnode_create+0x3b9/0x440
[  173.042166][ T5943] Code: bb c0 8a 89 ee e8 57 2f 0d 08 e9 73 fd ff ff e8 dd ae 2f ff 4c 89 ef e8 15 25 22 08 48 c7 c7 c0 bb c0 8a 89 ee e8 37 2f 0d 08 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fc ff ff 4c
[  173.062491][ T5943] RSP: 0018:ffffc90004d0ee18 EFLAGS: 00010246
[  173.069208][ T5943] RAX: 000000000000001f RBX: ffff88805d578000 RCX: 9138839f5ffc9300
[  173.077227][ T5943] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  173.085663][ T5943] RBP: 0000000000000000 R08: ffffc90004d0eb27 R09: 1ffff920009a1d64
[  173.093992][ T5943] R10: dffffc0000000000 R11: fffff520009a1d65 R12: 0000000000000000
[  173.102209][ T5943] R13: ffff88805d5780e0 R14: ffff88802d4aaa00 R15: dffffc0000000000
[  173.110280][ T5943] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  173.119613][ T5943] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.126239][ T5943] CR2: 00007f34f0d42000 CR3: 000000000cb30000 CR4: 00000000003506f0
[  173.134327][ T5943] Call Trace:
[  173.137644][ T5943]  <TASK>
[  173.140686][ T5943]  hfs_bmap_alloc+0x53b/0x5c0
[  173.145418][ T5943]  ? hfs_bmap_reserve+0x430/0x430
[  173.150545][ T5943]  hfs_btree_inc_height+0xf7/0xac0
[  173.155719][ T5943]  ? hfs_brec_insert+0x6f4/0xbd0
[  173.160750][ T5943]  ? hfs_brec_insert+0xbd0/0xbd0
[  173.165756][ T5943]  ? do_raw_spin_unlock+0x121/0x230
[  173.171070][ T5943]  hfs_brec_insert+0x742/0xbd0
[  173.175925][ T5943]  ? hfs_brec_keylen+0x360/0x360
[  173.182086][ T5943]  __hfs_ext_write_extent+0x2a1/0x470
[  173.187533][ T5943]  hfs_ext_write_extent+0x162/0x1e0
[  173.193063][ T5943]  ? verify_lock_unused+0x140/0x140
[  173.198359][ T5943]  ? hfs_ext_find_block+0x190/0x190
[  173.203633][ T5943]  ? writeback_sb_inodes+0x330/0xef0
[  173.209083][ T5943]  hfs_write_inode+0x92/0x7d0
[  173.213890][ T5943]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  173.219387][ T5943]  ? __writeback_single_inode+0x48d/0xee0
[  173.225153][ T5943]  ? __lock_acquire+0x7c80/0x7c80
[  173.230259][ T5943]  ? do_raw_spin_lock+0x121/0x2c0
[  173.235342][ T5943]  ? __rwlock_init+0x150/0x150
[  173.240251][ T5943]  __writeback_single_inode+0x705/0xee0
[  173.245855][ T5943]  writeback_sb_inodes+0x77c/0xef0
[  173.251105][ T5943]  ? queue_io+0x560/0x560
[  173.255600][ T5943]  ? rcu_is_watching+0x15/0xb0
[  173.260714][ T5943]  wb_writeback+0x450/0xba0
[  173.265281][ T5943]  ? queue_io+0x3c1/0x560
[  173.269755][ T5943]  ? percpu_ref_tryget+0x250/0x250
[  173.274911][ T5943]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  173.280978][ T5943]  ? _raw_spin_unlock_irq+0x23/0x50
[  173.286222][ T5943]  wb_workfn+0x3ff/0xe20
[  173.290536][ T5943]  ? inode_wait_for_writeback+0x200/0x200
[  173.296320][ T5943]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  173.302486][ T5943]  ? read_lock_is_recursive+0x20/0x20
[  173.307911][ T5943]  ? _raw_spin_unlock_irq+0x23/0x50
[  173.313176][ T5943]  ? process_scheduled_works+0x957/0x15b0
[  173.318978][ T5943]  ? process_scheduled_works+0x957/0x15b0
[  173.324927][ T5943]  process_scheduled_works+0xa45/0x15b0
[  173.330598][ T5943]  ? assign_work+0x400/0x400
[  173.335239][ T5943]  ? assign_work+0x39e/0x400
[  173.339917][ T5943]  worker_thread+0xa55/0xfc0
[  173.344589][ T5943]  kthread+0x2fa/0x390
[  173.348773][ T5943]  ? pr_cont_work+0x560/0x560
[  173.353498][ T5943]  ? kthread_blkcg+0xd0/0xd0
[  173.358251][ T5943]  ret_from_fork+0x48/0x80
[  173.362724][ T5943]  ? kthread_blkcg+0xd0/0xd0
[  173.367375][ T5943]  ret_from_fork_asm+0x11/0x20
[  173.372273][ T5943]  </TASK>
[  173.375332][ T5943] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  173.382631][ T5943] CPU: 0 PID: 5943 Comm: kworker/u4:16 Not tainted syzkaller #0
[  173.390287][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  173.400374][ T5943] Workqueue: writeback wb_workfn (flush-7:1)
[  173.406416][ T5943] Call Trace:
[  173.409719][ T5943]  <TASK>
[  173.412678][ T5943]  dump_stack_lvl+0x16c/0x230
[  173.417404][ T5943]  ? show_regs_print_info+0x20/0x20
[  173.422644][ T5943]  ? load_image+0x3b0/0x3b0
[  173.427189][ T5943]  panic+0x2c0/0x710
[  173.431112][ T5943]  ? bpf_jit_dump+0xd0/0xd0
[  173.435644][ T5943]  ? ret_from_fork_asm+0x11/0x20
[  173.440626][ T5943]  __warn+0x2e0/0x470
[  173.444636][ T5943]  ? hfs_bnode_create+0x3b9/0x440
[  173.449692][ T5943]  ? hfs_bnode_create+0x3b9/0x440
[  173.454756][ T5943]  report_bug+0x2be/0x4f0
[  173.459145][ T5943]  ? hfs_bnode_create+0x3b9/0x440
[  173.464205][ T5943]  ? hfs_bnode_create+0x3b9/0x440
[  173.469275][ T5943]  ? hfs_bnode_create+0x3bb/0x440
[  173.474348][ T5943]  handle_bug+0xcf/0x120
[  173.478625][ T5943]  exc_invalid_op+0x1a/0x50
[  173.483162][ T5943]  asm_exc_invalid_op+0x1a/0x20
[  173.488035][ T5943] RIP: 0010:hfs_bnode_create+0x3b9/0x440
[  173.493701][ T5943] Code: bb c0 8a 89 ee e8 57 2f 0d 08 e9 73 fd ff ff e8 dd ae 2f ff 4c 89 ef e8 15 25 22 08 48 c7 c7 c0 bb c0 8a 89 ee e8 37 2f 0d 08 <0f> 0b eb b7 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 7f fc ff ff 4c
[  173.513324][ T5943] RSP: 0018:ffffc90004d0ee18 EFLAGS: 00010246
[  173.519436][ T5943] RAX: 000000000000001f RBX: ffff88805d578000 RCX: 9138839f5ffc9300
[  173.527414][ T5943] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  173.535395][ T5943] RBP: 0000000000000000 R08: ffffc90004d0eb27 R09: 1ffff920009a1d64
[  173.543378][ T5943] R10: dffffc0000000000 R11: fffff520009a1d65 R12: 0000000000000000
[  173.551353][ T5943] R13: ffff88805d5780e0 R14: ffff88802d4aaa00 R15: dffffc0000000000
[  173.559435][ T5943]  ? hfs_bnode_create+0x3b9/0x440
[  173.564504][ T5943]  hfs_bmap_alloc+0x53b/0x5c0
[  173.569201][ T5943]  ? hfs_bmap_reserve+0x430/0x430
[  173.574246][ T5943]  hfs_btree_inc_height+0xf7/0xac0
[  173.579467][ T5943]  ? hfs_brec_insert+0x6f4/0xbd0
[  173.584625][ T5943]  ? hfs_brec_insert+0xbd0/0xbd0
[  173.589599][ T5943]  ? do_raw_spin_unlock+0x121/0x230
[  173.594850][ T5943]  hfs_brec_insert+0x742/0xbd0
[  173.599659][ T5943]  ? hfs_brec_keylen+0x360/0x360
[  173.604624][ T5943]  __hfs_ext_write_extent+0x2a1/0x470
[  173.610019][ T5943]  hfs_ext_write_extent+0x162/0x1e0
[  173.615240][ T5943]  ? verify_lock_unused+0x140/0x140
[  173.620452][ T5943]  ? hfs_ext_find_block+0x190/0x190
[  173.625673][ T5943]  ? writeback_sb_inodes+0x330/0xef0
[  173.630979][ T5943]  hfs_write_inode+0x92/0x7d0
[  173.635666][ T5943]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  173.641062][ T5943]  ? __writeback_single_inode+0x48d/0xee0
[  173.646801][ T5943]  ? __lock_acquire+0x7c80/0x7c80
[  173.651840][ T5943]  ? do_raw_spin_lock+0x121/0x2c0
[  173.656883][ T5943]  ? __rwlock_init+0x150/0x150
[  173.661663][ T5943]  __writeback_single_inode+0x705/0xee0
[  173.667225][ T5943]  writeback_sb_inodes+0x77c/0xef0
[  173.672370][ T5943]  ? queue_io+0x560/0x560
[  173.676732][ T5943]  ? rcu_is_watching+0x15/0xb0
[  173.681529][ T5943]  wb_writeback+0x450/0xba0
[  173.686072][ T5943]  ? queue_io+0x3c1/0x560
[  173.690434][ T5943]  ? percpu_ref_tryget+0x250/0x250
[  173.695575][ T5943]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  173.701581][ T5943]  ? _raw_spin_unlock_irq+0x23/0x50
[  173.706798][ T5943]  wb_workfn+0x3ff/0xe20
[  173.711073][ T5943]  ? inode_wait_for_writeback+0x200/0x200
[  173.716819][ T5943]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  173.722831][ T5943]  ? read_lock_is_recursive+0x20/0x20
[  173.728320][ T5943]  ? _raw_spin_unlock_irq+0x23/0x50
[  173.733534][ T5943]  ? process_scheduled_works+0x957/0x15b0
[  173.739270][ T5943]  ? process_scheduled_works+0x957/0x15b0
[  173.745014][ T5943]  process_scheduled_works+0xa45/0x15b0
[  173.750609][ T5943]  ? assign_work+0x400/0x400
[  173.755237][ T5943]  ? assign_work+0x39e/0x400
[  173.759950][ T5943]  worker_thread+0xa55/0xfc0
[  173.764596][ T5943]  kthread+0x2fa/0x390
[  173.768684][ T5943]  ? pr_cont_work+0x560/0x560
[  173.773386][ T5943]  ? kthread_blkcg+0xd0/0xd0
[  173.777998][ T5943]  ret_from_fork+0x48/0x80
[  173.782443][ T5943]  ? kthread_blkcg+0xd0/0xd0
[  173.787051][ T5943]  ret_from_fork_asm+0x11/0x20
[  173.791845][ T5943]  </TASK>
[  173.795221][ T5943] Kernel Offset: disabled
[  173.799652][ T5943] Rebooting in 86400 seconds..