last executing test programs:

17.841264942s ago: executing program 0 (id=235):
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @loopback}, 0x10)

16.95234339s ago: executing program 0 (id=238):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES16, @ANYRES8, @ANYBLOB="81efa71844e8d0eb7bfe96936747ead3d05ba7df97e6bd59dc7b677a0f12b61ba4c312ee52ced7e20b28ae10f5b169ec847fd42d999a6e98da5e198bb8abbcf101c52a2a36c9e2badb0efa7f61717b59c1ccf87f0671fcb5fea167af196e173a07ba9e8887aef54fba30c953f8e7780a524f9b006dcbac360d74405245b8ee5e2da39076d325eae2637a9f636494de922fd072a5d64dc2a0e28a6819c40f2cd6dc6b40899314070000000000000024152e14cc0c17fdcfc0f8ac4957883c4900ec0d2972d3715c60c398817a00"/218], 0xfd, 0x5a90, &(0x7f000000c100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1)

12.911114256s ago: executing program 0 (id=243):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0xfdfffffd)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xfff)
accept4$unix(r0, 0x0, 0x0, 0x0)

12.24664036s ago: executing program 1 (id=245):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0, @ANYRESDEC], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

10.428009651s ago: executing program 1 (id=248):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

8.951807073s ago: executing program 4 (id=249):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x14)
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0)

8.939863769s ago: executing program 2 (id=250):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x1000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="00936f55e7981ebc5ad1bfc505b51cc98df1ef46befcde0112c68b15963d75d5a06eb900000000000000"], 0x1, 0x5505, &(0x7f00000079c0)="$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")
r0 = open(&(0x7f0000000140)='./file0\x00', 0x10f3c0, 0x186)
fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0)

7.954559207s ago: executing program 4 (id=251):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x2010880, &(0x7f00000007c0)=ANY=[@ANYBLOB='discard=0x0000000000000001,grpquota,iocharset=macromanian,errors=continue,quota,noquota,integrity\x00noquota,umask=0x7fffffffffffffff,umask=0x0000000000000002,nodiscard,iocharset=cp869,errors=continue,discard,dont_appraise,mask=MAY_EXEC,measure,smackfstransmute=errors=continue,func=CREDS_CHECK,audit,fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c531e80aec8c2666a00"], 0x1, 0x61c9, &(0x7f000000d7c0)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0xa, 0x1, 0x400000, 0x0, 0x0, 0xffff, 0x2401})

6.622198805s ago: executing program 1 (id=252):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x28, 0x5, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)})

6.496995501s ago: executing program 2 (id=253):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa1c406, &(0x7f0000000400)=ANY=[@ANYBLOB="646f74730000f5ff522c246d6173a594e5e0ee30303030010000000000400017c3d234e02f30303030302c6e6f646f742c6e66733d6e0973", @ANYRES16, @ANYRESDEC], 0x1, 0x2a2, &(0x7f0000001140)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000002000)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
openat$procfs(0xffffff9c, &(0x7f0000000c40)='/proc/crypto\x00', 0x0, 0x0)

6.384319416s ago: executing program 4 (id=254):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x38, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xec}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xc}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0x4040004)

5.597479334s ago: executing program 1 (id=256):
r0 = socket(0x2, 0x80805, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={r2, 0x5, 0x20}, &(0x7f00000001c0)=0x18)

5.492509113s ago: executing program 2 (id=257):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000200)=ANY=[], 0x5, 0x62c, &(0x7f0000000640)="$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")
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.375240167s ago: executing program 3 (id=258):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x30}}, 0x0)

4.727974787s ago: executing program 1 (id=259):
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r2, &(0x7f0000000180)='`', 0xcc, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14)

4.301926502s ago: executing program 3 (id=260):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001fc0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)

3.757476522s ago: executing program 1 (id=261):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
getdents64(r0, &(0x7f0000001f80)=""/4108, 0x100c)

3.277895459s ago: executing program 3 (id=262):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7ff, 0x1, @val, @void, @val={0x3, 0x1, 0x3}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0xd, 0xf, [@measure_req={0x26, 0x3, {0x6, 0xcb}}, @supported_rates={0x1, 0x2, [{0xb, 0x1}, {0x1}]}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

2.881821735s ago: executing program 4 (id=263):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10)
syz_emit_ethernet(0xe, &(0x7f0000000040)={@local, @link_local, @void, {@generic={0x88f5}}}, 0x0)

2.520583636s ago: executing program 3 (id=264):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x0, 0x85, 0x1000004f}, 0x2c)

2.400813311s ago: executing program 0 (id=265):
r0 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
write$binfmt_misc(r2, &(0x7f0000000b00), 0x91)
splice(r1, 0x0, r0, &(0x7f0000000140)=0x8008, 0x4, 0x0)

2.247234877s ago: executing program 4 (id=266):
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0)

2.174359784s ago: executing program 2 (id=267):
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xb783, 0x80, 0x0, 0x1b7}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r3, 0x0, 0x0, 0x0, 0x80000, 0x2})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

1.749936535s ago: executing program 3 (id=268):
r0 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x1}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1})
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)={[{@utf8}, {@fmask={'fmask', 0x3d, 0xa3}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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")
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

1.665925619s ago: executing program 0 (id=269):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})

821.651165ms ago: executing program 0 (id=270):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x8000, &(0x7f0000001a00)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,dmask=00000000000000000000010,iocharset=cp1250,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYRES64], 0x2, 0x1548, &(0x7f0000000380)="$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")
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")

796.542194ms ago: executing program 4 (id=271):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000bc0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x2, 0x3, 0x3863, 0x208, 0x9, 0x800, 0x5, 0x9, 0xfff9}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

708.350727ms ago: executing program 2 (id=272):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x60a, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000540)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0)
recvmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}, 0x13af8f0d}], 0x1, 0x12002, 0x0)

542.880364ms ago: executing program 3 (id=273):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000140)=ANY=[], 0xfb, 0x69d, &(0x7f0000000640)="$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")
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sync()
unlink(&(0x7f0000000300)='./file1\x00')

0s ago: executing program 2 (id=274):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0xfefd, 0xd15, 0x1fff, 0xffff, 0xc, "8bdffb70f0ffffff"})
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts.
[  194.976965][ T5790] cgroup: Unknown subsys name 'net'
[  195.123506][ T5790] cgroup: Unknown subsys name 'cpuset'
[  195.138879][ T5790] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  229.561805][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  229.568644][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  246.754309][ T5790] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  251.020026][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  251.030886][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  251.042281][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  251.055044][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  251.059006][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  251.065164][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  251.072049][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  251.083787][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  251.085817][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  251.091772][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  251.106365][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  251.108364][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  251.117521][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  251.122683][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  251.139563][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  251.140301][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  251.156243][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  251.171361][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  251.171421][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  251.195423][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  251.204418][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  251.221671][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  251.260563][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  251.391021][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  251.402729][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  252.204496][ T5819] chnl_net:caif_netlink_parms(): no params data found
[  252.980385][ T5812] chnl_net:caif_netlink_parms(): no params data found
[  253.081132][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.091365][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.099274][ T5819] bridge_slave_0: entered allmulticast mode
[  253.109005][ T5819] bridge_slave_0: entered promiscuous mode
[  253.144664][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.152274][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.160093][ T5819] bridge_slave_1: entered allmulticast mode
[  253.169740][ T5819] bridge_slave_1: entered promiscuous mode
[  253.226180][ T5824] Bluetooth: hci0: command tx timeout
[  253.227048][   T50] Bluetooth: hci4: command tx timeout
[  253.313741][   T50] Bluetooth: hci2: command tx timeout
[  253.319455][   T50] Bluetooth: hci3: command tx timeout
[  253.357871][ T5813] chnl_net:caif_netlink_parms(): no params data found
[  253.408779][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  253.465074][   T50] Bluetooth: hci1: command tx timeout
[  253.543345][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.866779][ T5819] team0: Port device team_slave_0 added
[  253.898166][ T5819] team0: Port device team_slave_1 added
[  254.154397][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[  254.162057][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.188594][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  254.211384][ T5815] chnl_net:caif_netlink_parms(): no params data found
[  254.267437][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[  254.274893][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.301434][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  254.378612][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.386385][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.394316][ T5812] bridge_slave_0: entered allmulticast mode
[  254.404169][ T5812] bridge_slave_0: entered promiscuous mode
[  254.422107][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.431464][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.439376][ T5812] bridge_slave_1: entered allmulticast mode
[  254.448827][ T5812] bridge_slave_1: entered promiscuous mode
[  254.461741][ T5817] chnl_net:caif_netlink_parms(): no params data found
[  254.975795][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.049721][ T5819] hsr_slave_0: entered promiscuous mode
[  255.060016][ T5819] hsr_slave_1: entered promiscuous mode
[  255.080646][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.091778][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.100932][ T5813] bridge_slave_0: entered allmulticast mode
[  255.110564][ T5813] bridge_slave_0: entered promiscuous mode
[  255.144217][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.220499][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.231188][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.239122][ T5813] bridge_slave_1: entered allmulticast mode
[  255.248847][ T5813] bridge_slave_1: entered promiscuous mode
[  255.303621][   T50] Bluetooth: hci0: command tx timeout
[  255.309364][ T5824] Bluetooth: hci4: command tx timeout
[  255.387274][   T50] Bluetooth: hci3: command tx timeout
[  255.393124][   T50] Bluetooth: hci2: command tx timeout
[  255.411652][ T5812] team0: Port device team_slave_0 added
[  255.474537][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.538029][ T5812] team0: Port device team_slave_1 added
[  255.554314][ T5824] Bluetooth: hci1: command tx timeout
[  255.564281][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.888333][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.896511][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.904370][ T5815] bridge_slave_0: entered allmulticast mode
[  255.914030][ T5815] bridge_slave_0: entered promiscuous mode
[  255.928424][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.936171][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.944042][ T5815] bridge_slave_1: entered allmulticast mode
[  255.953935][ T5815] bridge_slave_1: entered promiscuous mode
[  255.981029][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.988408][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.014878][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.066998][ T5813] team0: Port device team_slave_0 added
[  256.084816][ T5813] team0: Port device team_slave_1 added
[  256.147588][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.154976][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.182143][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.212032][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.219957][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.227775][ T5817] bridge_slave_0: entered allmulticast mode
[  256.236171][ T5817] bridge_slave_0: entered promiscuous mode
[  256.342576][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  256.364455][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.372047][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.380160][ T5817] bridge_slave_1: entered allmulticast mode
[  256.389688][ T5817] bridge_slave_1: entered promiscuous mode
[  256.454134][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.461360][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.488257][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.573716][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.654018][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.661239][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.689063][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.849241][ T5812] hsr_slave_0: entered promiscuous mode
[  256.858260][ T5812] hsr_slave_1: entered promiscuous mode
[  256.866966][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  256.874904][ T5812] Cannot create hsr debugfs directory
[  256.923082][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  256.984676][ T5815] team0: Port device team_slave_0 added
[  257.005108][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  257.022061][ T5815] team0: Port device team_slave_1 added
[  257.374280][ T5817] team0: Port device team_slave_0 added
[  257.383581][ T5824] Bluetooth: hci0: command tx timeout
[  257.389274][ T5824] Bluetooth: hci4: command tx timeout
[  257.399149][ T5813] hsr_slave_0: entered promiscuous mode
[  257.411450][ T5813] hsr_slave_1: entered promiscuous mode
[  257.420450][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  257.428416][ T5813] Cannot create hsr debugfs directory
[  257.442630][ T5817] team0: Port device team_slave_1 added
[  257.463120][ T5824] Bluetooth: hci2: command tx timeout
[  257.468871][   T50] Bluetooth: hci3: command tx timeout
[  257.532710][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.540119][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.568102][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.623348][   T50] Bluetooth: hci1: command tx timeout
[  257.698211][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[  257.705651][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.732206][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.789530][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[  257.796868][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.823264][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  257.897046][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[  257.904659][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.931233][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.991634][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  258.015000][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  258.111310][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  258.261704][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  258.340242][ T5815] hsr_slave_0: entered promiscuous mode
[  258.352111][ T5815] hsr_slave_1: entered promiscuous mode
[  258.361177][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  258.369170][ T5815] Cannot create hsr debugfs directory
[  258.490603][ T5817] hsr_slave_0: entered promiscuous mode
[  258.500974][ T5817] hsr_slave_1: entered promiscuous mode
[  258.509651][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  258.517520][ T5817] Cannot create hsr debugfs directory
[  259.474300][   T50] Bluetooth: hci4: command tx timeout
[  259.479989][   T50] Bluetooth: hci0: command tx timeout
[  259.499327][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  259.530694][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  259.543483][ T5824] Bluetooth: hci3: command tx timeout
[  259.544268][   T50] Bluetooth: hci2: command tx timeout
[  259.655605][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  259.703256][   T50] Bluetooth: hci1: command tx timeout
[  259.740419][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  259.881715][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  259.907097][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  259.974670][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  260.017306][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  260.231158][ T5815] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  260.281757][ T5815] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  260.348020][ T5815] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  260.441649][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.484191][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  260.507494][ T5815] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  260.552373][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  260.626599][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  260.695481][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  260.754554][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[  260.854453][ T3866] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.862160][ T3866] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.991348][ T3866] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.999059][ T3866] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.031536][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.446286][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[  261.540085][ T4019] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.547780][ T4019] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.635902][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.670174][ T3676] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.677858][ T3676] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.906371][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[  262.098635][ T3676] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.106357][ T3676] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.150422][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.190685][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.220263][ T3676] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.228000][ T3676] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.494024][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[  262.627760][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[  262.646187][ T3676] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.653890][ T3676] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.767094][ T3676] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.774881][ T3676] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.790879][ T3676] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.798638][ T3676] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.815249][ T3676] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.822996][ T3676] bridge0: port 2(bridge_slave_1) entered forwarding state
[  263.221385][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  263.778583][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.259869][ T5819] veth0_vlan: entered promiscuous mode
[  264.406821][ T5819] veth1_vlan: entered promiscuous mode
[  264.537711][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.780835][ T5819] veth0_macvtap: entered promiscuous mode
[  264.830232][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.887518][ T5819] veth1_macvtap: entered promiscuous mode
[  265.156835][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.220454][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.238850][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.299557][ T5812] veth0_vlan: entered promiscuous mode
[  265.413706][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.423096][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.432256][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.441418][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.523772][ T5812] veth1_vlan: entered promiscuous mode
[  265.559263][ T5813] veth0_vlan: entered promiscuous mode
[  265.660379][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.734848][ T5813] veth1_vlan: entered promiscuous mode
[  266.088800][ T5812] veth0_macvtap: entered promiscuous mode
[  266.137188][ T5817] veth0_vlan: entered promiscuous mode
[  266.165843][ T5812] veth1_macvtap: entered promiscuous mode
[  266.267643][ T5817] veth1_vlan: entered promiscuous mode
[  266.377812][ T5813] veth0_macvtap: entered promiscuous mode
[  266.446206][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.469925][ T5813] veth1_macvtap: entered promiscuous mode
[  266.543263][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[  266.677017][ T5812] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.687252][ T5812] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.696506][ T5812] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.705799][ T5812] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.725928][ T5817] veth0_macvtap: entered promiscuous mode
[  266.787073][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.843689][ T5817] veth1_macvtap: entered promiscuous mode
[  266.876586][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[  266.951068][ T5813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.962439][ T5813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.974142][ T5813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.986670][ T5813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.133662][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.247569][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[  267.359603][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.370201][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.380659][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.392470][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.350190][ T5815] veth0_vlan: entered promiscuous mode
[  268.479603][ T5815] veth1_vlan: entered promiscuous mode
[  268.828987][ T5815] veth0_macvtap: entered promiscuous mode
[  268.919898][ T5815] veth1_macvtap: entered promiscuous mode
[  269.125049][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.260971][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.352494][ T5815] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.361730][ T5815] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.370988][ T5815] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.380112][ T5815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.763246][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.771392][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.993553][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.001816][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.466371][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  274.778384][ T5991] loop0: detected capacity change from 0 to 32768
[  274.807279][ T4019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.815483][ T4019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.908554][ T3676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.916793][ T3676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.108148][ T3676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.116561][ T3676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.197538][ T3640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.200066][ T3676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.206724][ T3640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.213978][ T3676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.343589][ T5991] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  275.343715][ T5991]   allowing incompatible features above 0.0: (unknown version)
[  275.343826][ T5991]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  275.385400][ T5991] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  275.394053][ T5991] bcachefs (loop0): initializing new filesystem
[  275.418117][ T5991] bcachefs (loop0): going read-write
[  275.484136][ T5991] bcachefs (loop0): marking superblocks
[  275.544140][ T5991] bcachefs (loop0): initializing freespace
[  275.577395][ T5991] bcachefs (loop0): done initializing freespace
[  275.599410][ T5991] bcachefs (loop0): reading snapshots table
[  275.606032][ T5991] bcachefs (loop0): reading snapshots done
[  275.744929][ T5991] bcachefs (loop0):  loop0: Superblock write was silently dropped! (seq 0 expected 42)
[  275.769923][ T5991] bcachefs (loop0): done starting filesystem
[  275.941032][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.949755][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.447793][ T5991] syz.0.1 (5991) used greatest stack depth: 1216 bytes left
[  276.544718][ T5819] bcachefs (loop0): shutting down
[  276.550022][ T5819] bcachefs (loop0): going read-only
[  276.555816][ T5819] bcachefs (loop0): finished waiting for writes to stop
[  276.566802][ T5819] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  276.689759][ T5819] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  276.733673][ T5819] bcachefs (loop0): clean shutdown complete, journal seq 4
[  276.788979][ T5819] bcachefs (loop0): marking filesystem clean
[  276.941524][ T5819] bcachefs (loop0): shutdown complete
[  277.093419][ T1682] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  277.304360][ T1682] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  277.316015][ T1682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.327679][ T1682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.337920][ T1682] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  277.439812][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.451884][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.538410][ T1682] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  277.549921][ T1682] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  277.561286][ T1682] usb 2-1: Manufacturer: syz
[  277.659383][ T1682] usb 2-1: config 0 descriptor??
[  277.737363][ T3676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.745681][ T3676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.173621][ T1682] appleir 0003:05AC:8243.0001: unknown main item tag 0x0
[  278.323803][ T1682] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  278.486620][ T1682] usb 2-1: USB disconnect, device number 2
[  279.261086][ T6025] loop2: detected capacity change from 0 to 32768
[  279.455598][ T6025] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  279.455742][ T6025]   allowing incompatible features above 0.0: (unknown version)
[  279.455826][ T6025]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  279.514370][ T6025] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  279.525348][ T6025] bcachefs (loop2): initializing new filesystem
[  279.554217][ T6025] bcachefs (loop2): going read-write
[  279.628097][ T6025] bcachefs (loop2): marking superblocks
[  279.700484][ T6025] bcachefs (loop2): initializing freespace
[  279.728280][ T6025] bcachefs (loop2): done initializing freespace
[  279.748139][ T6025] bcachefs (loop2): reading snapshots table
[  279.761500][ T6025] bcachefs (loop2): reading snapshots done
[  279.933716][ T6025] bcachefs (loop2): done starting filesystem
[  280.253460][   T30] audit: type=1326 audit(1751658372.710:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.9" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f502138e929 code=0x0
[  280.433246][ T5813] bcachefs (loop2): shutting down
[  280.438542][ T5813] bcachefs (loop2): going read-only
[  280.444388][ T5813] bcachefs (loop2): finished waiting for writes to stop
[  280.560463][ T5813] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  281.028282][ T5813] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  281.123233][ T5813] bcachefs (loop2): clean shutdown complete, journal seq 4
[  281.133562][ T5813] bcachefs (loop2): marking filesystem clean
[  281.508601][ T6041] fido_id[6041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  281.559742][ T5813] bcachefs (loop2): shutdown complete
[  282.082517][ T6051] loop4: detected capacity change from 0 to 2048
[  282.729565][ T6051] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.768112][ T6055] loop3: detected capacity change from 0 to 32768
[  282.888002][ T6055] read_mapping_page failed!
[  282.893124][ T6055] ERROR: (device loop3): txAbort: 
[  282.893124][ T6055] 
[  282.907573][ T6055] ERROR: (device loop3): remounting filesystem as read-only
[  283.356356][ T5815] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  285.396024][ T6083] loop0: detected capacity change from 0 to 512
[  285.565722][ T6083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.579216][ T6083] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.000224][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880524d5200: rx timeout, send abort
[  286.009927][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880524d5200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  286.123390][ T6090] syz.1.27 uses obsolete (PF_INET,SOCK_PACKET)
[  286.411403][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.160875][ T6096] loop2: detected capacity change from 0 to 512
[  287.379646][ T6096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.393133][ T6096] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  287.482249][ T6094] loop3: detected capacity change from 0 to 32768
[  287.496860][ T6094] btrfs: Deprecated parameter 'usebackuproot'
[  287.503480][ T6094] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  287.516037][ T6094] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.29 (6094)
[  287.552299][ T6094] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  287.563184][ T6094] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm
[  287.572448][ T6094] BTRFS info (device loop3): using free-space-tree
[  287.714081][ T6096] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.12: corrupted inode contents
[  287.778259][ T6096] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.12: mark_inode_dirty error
[  287.795595][ T3866] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  287.810596][ T6094] BTRFS error (device loop3): failed to load root extent
[  287.820747][ T6094] BTRFS warning (device loop3): try to load backup roots slot 1
[  287.851680][ T3866] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  287.865829][ T6094] BTRFS warning (device loop3): couldn't read tree root
[  287.873373][ T6094] BTRFS warning (device loop3): try to load backup roots slot 2
[  287.882411][ T3866] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  287.893734][ T6094] BTRFS warning (device loop3): couldn't read tree root
[  287.894734][ T6096] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.12: corrupted inode contents
[  287.900856][ T6094] BTRFS warning (device loop3): try to load backup roots slot 3
[  287.956458][ T6096] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.12: mark_inode_dirty error
[  287.976052][ T6094] BTRFS info (device loop3): rebuilding free space tree
[  288.025110][ T6094] BTRFS info (device loop3): checking UUID tree
[  288.077647][ T6094] BTRFS warning (device loop3): get dev_stats failed, device not found
[  288.297325][ T5817] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  288.444034][ T5813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.573838][ T6144] loop1: detected capacity change from 0 to 32768
[  290.583442][ T6144] =======================================================
[  290.583442][ T6144] WARNING: The mand mount option has been deprecated and
[  290.583442][ T6144]          and is ignored by this kernel. Remove the mand
[  290.583442][ T6144]          option from the mount to silence this warning.
[  290.583442][ T6144] =======================================================
[  291.027953][ T6144] JBD2: Ignoring recovery information on journal
[  291.030445][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  291.042319][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  291.238781][ T6144] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  291.760363][ T5812] ocfs2: Unmounting device (7,1) on (node local)
[  292.411694][ T6163] loop4: detected capacity change from 0 to 2048
[  292.568846][ T6163] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  292.794194][ T6163] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  292.847113][ T6168] loop2: detected capacity change from 0 to 512
[  293.025294][ T6168] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  293.038997][ T6168] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  293.283514][   T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  293.434290][ T6168] EXT4-fs (loop2): 1 truncate cleaned up
[  293.442435][ T6168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.511022][ T6175] loop1: detected capacity change from 0 to 1024
[  293.626058][   T11] usb 1-1: Using ep0 maxpacket: 16
[  293.659030][ T6178] (syz.3.50,6178,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[  293.726146][   T11] usb 1-1: config 0 has no interfaces?
[  293.866092][ T6175] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.933443][   T11] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  293.943902][   T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  293.952195][   T11] usb 1-1: SerialNumber: syz
[  294.080872][   T11] usb 1-1: config 0 descriptor??
[  294.471632][ T5813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.676055][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.692090][   T35] tipc: Subscription rejected, illegal request
[  294.807897][ T6182] loop4: detected capacity change from 0 to 2048
[  294.876039][   T11] usb 1-1: USB disconnect, device number 2
[  295.119517][ T6182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.249829][ T6182] EXT4-fs error (device loop4): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.4.51: path /11/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0
[  295.349231][ T6182] EXT4-fs (loop4): Remounting filesystem read-only
[  296.013642][   T30] audit: type=1326 audit(1751658388.540:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6190 comm="syz.3.55" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f035c78e929 code=0x0
[  296.263375][ T6189] loop1: detected capacity change from 0 to 32768
[  296.273546][ T6189] btrfs: Deprecated parameter 'usebackuproot'
[  296.279992][ T6189] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  296.342307][ T6189] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.54 (6189)
[  296.371541][ T6189] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  296.382353][ T6189] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm
[  296.391744][ T6189] BTRFS info (device loop1): using free-space-tree
[  296.410858][ T5815] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.555737][ T4067] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  296.569946][ T6189] BTRFS error (device loop1): failed to load root extent
[  296.579349][ T6189] BTRFS warning (device loop1): try to load backup roots slot 1
[  296.625910][ T4019] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  296.639916][ T6189] BTRFS warning (device loop1): couldn't read tree root
[  296.653872][ T6189] BTRFS warning (device loop1): try to load backup roots slot 2
[  296.721232][ T4019] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  296.733329][ T6189] BTRFS warning (device loop1): couldn't read tree root
[  296.742215][ T6189] BTRFS warning (device loop1): try to load backup roots slot 3
[  296.862626][ T6189] BTRFS info (device loop1): rebuilding free space tree
[  296.905381][ T6189] BTRFS info (device loop1): checking UUID tree
[  296.990789][ T6214] loop2: detected capacity change from 0 to 256
[  297.304860][ T5812] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  297.453993][   T30] audit: type=1800 audit(1751658389.980:4): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.59" name=C1FEDC30 dev="loop2" ino=1048601 res=0 errno=0
[  298.002130][ T6220] syz_tun: entered allmulticast mode
[  298.126925][ T6220] syz_tun: left allmulticast mode
[  298.234912][ T5883] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  298.276921][ T6216] loop4: detected capacity change from 0 to 32768
[  298.380311][ T6216] JBD2: Ignoring recovery information on journal
[  298.473482][ T5883] usb 1-1: Using ep0 maxpacket: 8
[  298.572101][ T5883] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  298.581953][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.594732][ T5883] usb 1-1: Product: syz
[  298.599247][ T5883] usb 1-1: Manufacturer: syz
[  298.605937][ T5883] usb 1-1: SerialNumber: syz
[  298.673039][ T6216] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  298.741196][ T5883] usb 1-1: config 0 descriptor??
[  298.840145][ T5883] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  298.848533][ T5883] usb 1-1: setting power ON
[  298.853480][ T5883] dvb-usb: bulk message failed: -22 (2/0)
[  299.007917][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  299.010634][ T6219] dvb-usb: bulk message failed: -22 (3/0)
[  299.023843][ T6219] dvb-usb: bulk message failed: -22 (4/0)
[  299.112536][ T6219] dvb-usb: bulk message failed: -22 (3/0)
[  299.120187][ T5883] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  299.126025][ T5815] ocfs2: Unmounting device (7,4) on (node local)
[  299.129241][ T5883] usb 1-1: media controller created
[  299.264093][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  299.555989][ T5883] usb 1-1: selecting invalid altsetting 6
[  299.562244][ T5883] usb 1-1: digital interface selection failed (-22)
[  299.570283][ T5883] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  299.681281][ T5883] usb 1-1: setting power OFF
[  299.686307][ T5883] dvb-usb: bulk message failed: -22 (2/0)
[  299.692413][ T5883] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  299.702156][ T5883] (NULL device *): no alternate interface
[  299.826883][ T6231] process 'syz.4.65' launched './file2' with NULL argv: empty string added
[  300.626959][ T5883] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  300.694086][ T5883] usb 1-1: USB disconnect, device number 3
[  300.966852][ T6236] loop3: detected capacity change from 0 to 4096
[  301.213213][ T6245] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  301.453551][ T5883] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  301.653747][   T11] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  301.735885][ T5883] usb 2-1: Using ep0 maxpacket: 8
[  301.878216][ T5883] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  301.888062][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.897573][ T5883] usb 2-1: Product: syz
[  301.902035][ T5883] usb 2-1: Manufacturer: syz
[  301.907107][ T5883] usb 2-1: SerialNumber: syz
[  301.956197][   T11] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  301.965771][   T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.082142][   T11] usb 1-1: config 0 descriptor??
[  302.112364][ T5883] usb 2-1: config 0 descriptor??
[  302.131675][   T11] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  302.326738][ T6251] loop4: detected capacity change from 0 to 256
[  302.443455][ T5883] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  303.018147][   T11] gspca_stv06xx: I2C: Read error writing address: -71
[  303.183346][   T11] usb 1-1: USB disconnect, device number 4
[  303.353549][ T5883] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  303.425516][ T5883] usb 2-1: USB disconnect, device number 3
[  303.456908][ T6253] udevd[6253]: setting mode of /dev/bus/usb/002/003 to 020664 failed: No such file or directory
[  303.524757][ T6253] udevd[6253]: setting owner of /dev/bus/usb/002/003 to uid=0, gid=0 failed: No such file or directory
[  303.861339][   T30] audit: type=1326 audit(1751658396.390:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.4.77" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f502138e929 code=0x0
[  304.639182][ T6269] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  305.796470][ T6282] IPv6: NLM_F_CREATE should be specified when creating new route
[  307.548025][ T6304] loop3: detected capacity change from 0 to 256
[  307.624967][ T6304] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  307.636442][ T6304] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  307.842493][ T6304] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  309.317754][ T6313] loop2: detected capacity change from 0 to 32768
[  309.391944][ T6313] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.97 (6313)
[  310.118197][ T6313] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  310.129119][ T6313] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm
[  310.138412][ T6313] BTRFS info (device loop2): using free-space-tree
[  310.235915][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'.
[  310.313406][ T5883] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  310.524008][ T5883] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  310.535931][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  310.545738][ T5883] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  310.781272][ T5883] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  310.791302][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.799845][ T5883] usb 5-1: Product: syz
[  310.804348][ T5883] usb 5-1: Manufacturer: syz
[  310.809212][ T5883] usb 5-1: SerialNumber: syz
[  310.886968][ T6316] loop3: detected capacity change from 0 to 65536
[  310.997885][ T5883] usb 5-1: selecting invalid altsetting 1
[  311.000411][ T6316] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  311.177838][ T5871] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  311.203418][ T6316] XFS (loop3): Ending clean mount
[  311.217323][ T6316] XFS (loop3): Quotacheck needed: Please wait.
[  311.274766][ T6316] XFS (loop3): Quotacheck: Done.
[  311.526349][ T5813] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  311.543807][ T5871] usb 1-1: Using ep0 maxpacket: 8
[  311.573845][ T5817] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  311.648531][ T5871] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  311.659350][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.667985][ T5871] usb 1-1: Product: syz
[  311.672613][ T5871] usb 1-1: Manufacturer: syz
[  311.678523][ T5871] usb 1-1: SerialNumber: syz
[  311.788509][ T5871] usb 1-1: config 0 descriptor??
[  311.821865][ T5871] gspca_main: se401-2.14.0 probing 047d:5003
[  312.007899][ T5883] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed
[  312.069444][ T5883] usb 5-1: selecting invalid altsetting 1
[  312.077438][ T5883] cdc_ncm 5-1:1.0: bind() failure
[  312.278047][ T5883] usb 5-1: USB disconnect, device number 2
[  312.441093][ T5871] gspca_se401: ExtraFeatures: 3
[  312.685825][ T5871] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6
[  313.044761][ T5871] usb 1-1: USB disconnect, device number 5
[  313.099242][ T6355] loop1: detected capacity change from 0 to 32768
[  313.111622][ T6355] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.109 (6355)
[  313.141250][ T6355] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  313.152178][ T6355] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  313.165139][ T6355] BTRFS info (device loop1): disk space caching is enabled
[  313.172668][ T6355] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  313.710279][ T6355] BTRFS info (device loop1): rebuilding free space tree
[  313.795254][ T6355] BTRFS info (device loop1): disabling free space tree
[  313.803741][ T6355] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  313.813886][ T6355] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  314.724615][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'.
[  314.749142][ T6384] vlan2: entered promiscuous mode
[  314.754674][ T6384] erspan0: entered promiscuous mode
[  314.798020][ T5812] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  315.502716][ T6392] capability: warning: `syz.3.116' uses deprecated v2 capabilities in a way that may be insecure
[  316.874327][   T11] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  317.105036][   T11] usb 1-1: Using ep0 maxpacket: 32
[  317.219188][   T11] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  317.233112][   T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.245553][   T11] usb 1-1: Product: syz
[  317.250035][   T11] usb 1-1: Manufacturer: syz
[  317.255261][   T11] usb 1-1: SerialNumber: syz
[  317.358805][   T11] usb 1-1: config 0 descriptor??
[  317.438680][   T11] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  317.636133][ T6412] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  318.475231][   T11] gspca_stk1135: reg_w 0x7 err -71
[  318.481757][   T11] gspca_stk1135: serial bus timeout: status=0x00
[  318.488559][   T11] gspca_stk1135: Sensor write failed
[  318.494293][   T11] gspca_stk1135: serial bus timeout: status=0x00
[  318.500839][   T11] gspca_stk1135: Sensor write failed
[  318.506576][   T11] gspca_stk1135: serial bus timeout: status=0x00
[  318.513405][   T11] gspca_stk1135: Sensor read failed
[  318.518898][   T11] gspca_stk1135: serial bus timeout: status=0x00
[  318.529046][   T11] gspca_stk1135: Sensor read failed
[  318.539843][   T11] gspca_stk1135: Detected sensor type unknown (0x0)
[  318.546947][   T11] gspca_stk1135: serial bus timeout: status=0x00
[  318.554065][   T11] gspca_stk1135: Sensor read failed
[  318.565647][   T11] gspca_stk1135: serial bus timeout: status=0x00
[  318.572189][   T11] gspca_stk1135: Sensor read failed
[  318.579671][   T11] gspca_stk1135: serial bus timeout: status=0x00
[  318.586577][   T11] gspca_stk1135: Sensor write failed
[  318.592176][   T11] gspca_stk1135: serial bus timeout: status=0x00
[  318.598929][   T11] gspca_stk1135: Sensor write failed
[  318.604802][   T11] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71
[  319.154489][   T11] usb 1-1: USB disconnect, device number 6
[  319.390782][ T6421] loop2: detected capacity change from 0 to 2048
[  319.527685][ T6421]  loop2: p1 < > p4 < >
[  321.029748][ T6258] udevd[6258]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  321.044650][ T5976] udevd[5976]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  322.081223][ T6448] loop3: detected capacity change from 0 to 1
[  322.105822][ T6448] Dev loop3: unable to read RDB block 1
[  322.111916][ T6448]  loop3: unable to read partition table
[  322.150092][ T6448] loop3: partition table beyond EOD, truncated
[  322.157399][ T6448] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[  322.190846][ T6446] loop4: detected capacity change from 0 to 2048
[  322.414900][ T6451] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  322.571307][ T6453] evm: overlay not supported
[  323.495391][ T6455] loop0: detected capacity change from 0 to 32768
[  323.565842][ T6455] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.143 (6455)
[  324.029387][ T6459] loop2: detected capacity change from 0 to 32768
[  324.071249][ T6455] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  324.082452][ T6455] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  324.097004][ T6455] BTRFS info (device loop0): disk space caching is enabled
[  324.106267][ T6455] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  324.516633][ T6459] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  324.516776][ T6459]   allowing incompatible features above 0.0: (unknown version)
[  324.516851][ T6459]   features: 
[  324.551475][ T6459] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  324.560045][ T6459] bcachefs (loop2): initializing new filesystem
[  324.578794][ T6459] bcachefs (loop2): going read-write
[  324.610200][ T6455] BTRFS info (device loop0): rebuilding free space tree
[  324.655615][ T6455] BTRFS info (device loop0): disabling free space tree
[  324.663331][ T6455] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  324.675092][ T6455] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  324.734768][ T6459] bcachefs (loop2): marking superblocks
[  324.787496][ T6459] bcachefs (loop2): initializing freespace
[  324.820783][ T6459] bcachefs (loop2): done initializing freespace
[  324.841419][ T6459] bcachefs (loop2): reading snapshots table
[  324.848153][ T6459] bcachefs (loop2): reading snapshots done
[  324.929081][ T5819] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  324.962176][ T6484] loop1: detected capacity change from 0 to 2048
[  325.007897][ T6484] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  325.119238][ T6459] bcachefs (loop2): done starting filesystem
[  325.283191][ T6496] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  325.373516][ T6495] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  325.408645][ T5813] bcachefs (loop2): shutting down
[  325.414267][ T5813] bcachefs (loop2): going read-only
[  325.428932][ T5813] bcachefs (loop2): finished waiting for writes to stop
[  325.484275][ T5813] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  325.557664][ T6484] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 147
[  325.566610][ T6484] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15)
[  325.591080][ T6484] Remounting filesystem read-only
[  325.599105][ T6484] NILFS (loop1): error -5 truncating bmap (ino=15)
[  325.769913][ T5812] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  326.024194][ T5813] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  327.008807][ T5813] bcachefs (loop2): clean shutdown complete, journal seq 4
[  327.120493][ T6500] loop4: detected capacity change from 0 to 40427
[  327.150736][ T6500] F2FS-fs (loop4): invalid crc value
[  327.169622][ T5813] bcachefs (loop2): marking filesystem clean
[  327.809548][ T6500] F2FS-fs (loop4): Start checkpoint disabled!
[  327.855311][ T6511] loop3: detected capacity change from 0 to 32768
[  327.895044][ T6500] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  327.958896][ T6500] syz.4.152: attempt to access beyond end of device
[  327.958896][ T6500] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  328.515912][ T6511] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  328.516074][ T6511]   allowing incompatible features above 0.0: (unknown version)
[  328.516169][ T6511]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  328.562217][ T6511] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  328.571310][ T6511] bcachefs (loop3): initializing new filesystem
[  328.598523][ T6511] bcachefs (loop3): going read-write
[  328.675390][ T5813] bcachefs (loop2): shutdown complete
[  328.733555][ T6511] bcachefs (loop3): marking superblocks
[  328.806706][ T6511] bcachefs (loop3): initializing freespace
[  328.834070][ T6511] bcachefs (loop3): done initializing freespace
[  328.854300][ T6511] bcachefs (loop3): reading snapshots table
[  328.860730][ T6511] bcachefs (loop3): reading snapshots done
[  329.010720][ T6511] bcachefs (loop3): done starting filesystem
[  329.203483][   T30] audit: type=1800 audit(1751658422.699:6): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.157" name="bus" dev="loop3" ino=4098 res=0 errno=0
[  329.334438][ T5817] bcachefs (loop3): shutting down
[  329.339752][ T5817] bcachefs (loop3): going read-only
[  329.346598][ T5817] bcachefs (loop3): finished waiting for writes to stop
[  329.444577][ T5817] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  330.135834][ T5817] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  330.781091][ T5817] bcachefs (loop3): clean shutdown complete, journal seq 4
[  330.852252][ T5817] bcachefs (loop3): marking filesystem clean
[  331.034384][ T6532] loop1: detected capacity change from 0 to 32768
[  331.095904][ T5817] bcachefs (loop3): shutdown complete
[  331.441311][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names
[  331.441505][ T6532]   allowing incompatible features above 0.0: (unknown version)
[  331.441625][ T6532]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  331.441739][ T6532]   with devices loop1
[  331.498716][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  331.510148][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  331.534568][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  331.611599][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  331.675182][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  331.706986][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  331.730302][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  331.739564][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  331.915184][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  332.033074][ T6544] netlink: 64 bytes leftover after parsing attributes in process `syz.0.164'.
[  332.578450][ T5812] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[  332.593082][ T5812] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[  332.601310][ T5812] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[  332.664111][ T5812] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 4
[  332.881477][ T5812] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 4
[  332.952193][ T5812] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 5
[  332.995289][ T5812] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean
[  333.182565][ T5812] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  334.112499][ T5168] udevd[5168]: worker [6258] terminated by signal 33 (Unknown signal 33)
[  334.172479][ T5168] udevd[5168]: worker [6258] failed while handling '/devices/virtual/block/loop0'
[  335.385790][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'.
[  335.913234][ T5871] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  335.945743][ T6565] loop3: detected capacity change from 0 to 512
[  336.001720][ T6565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  336.131440][ T6562] loop2: detected capacity change from 0 to 4096
[  336.154957][ T6565] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.162: invalid block
[  336.234582][ T6565] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.162: invalid indirect mapped block 4294967295 (level 1)
[  336.239959][ T5871] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  336.258461][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.267046][ T5871] usb 5-1: Product: syz
[  336.271464][ T5871] usb 5-1: Manufacturer: syz
[  336.279327][ T5871] usb 5-1: SerialNumber: syz
[  336.307730][ T6565] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.162: invalid indirect mapped block 4294967295 (level 1)
[  336.326796][ T5871] usb 5-1: config 0 descriptor??
[  336.371395][ T6571] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  336.401692][ T6565] EXT4-fs (loop3): 2 truncates cleaned up
[  336.451483][ T6565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.156106][ T6573] loop8: detected capacity change from 0 to 1
[  337.234921][ T6573] Dev loop8: unable to read RDB block 1
[  337.241045][ T6573]  loop8: unable to read partition table
[  337.268403][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.333990][ T6573] loop8: partition table beyond EOD, truncated
[  337.340793][ T6573] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  337.495720][ T5871] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  337.511295][ T5871] asix 5-1:0.0: probe with driver asix failed with error -71
[  337.654465][ T5871] usb 5-1: USB disconnect, device number 3
[  339.002379][ T6590] netem: change failed
[  339.919082][ T6603] loop2: detected capacity change from 0 to 1024
[  340.242550][ T6603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.255700][ T6603] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  340.476873][ T6604] loop3: detected capacity change from 0 to 32768
[  340.801946][ T6604] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  340.802070][ T6604]   allowing incompatible features above 0.0: (unknown version)
[  340.802164][ T6604]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  340.835353][ T6622] EXT4-fs (loop2): shut down requested (2)
[  340.839879][ T6604] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  340.854386][ T6604] bcachefs (loop3): initializing new filesystem
[  340.871281][ T6604] bcachefs (loop3): going read-write
[  340.900967][ T6604] bcachefs (loop3): marking superblocks
[  340.958516][ T6604] bcachefs (loop3): initializing freespace
[  341.001815][ T6604] bcachefs (loop3): done initializing freespace
[  341.022281][ T6604] bcachefs (loop3): reading snapshots table
[  341.028872][ T6604] bcachefs (loop3): reading snapshots done
[  341.152647][ T6604] bcachefs (loop3):  loop3: Superblock write was silently dropped! (seq 0 expected 42)
[  341.200722][ T6604] bcachefs (loop3): done starting filesystem
[  341.605436][ T5813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.763981][ T5817] bcachefs (loop3): shutting down
[  341.769272][ T5817] bcachefs (loop3): going read-only
[  341.775015][ T5817] bcachefs (loop3): finished waiting for writes to stop
[  341.844440][ T5817] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  342.140112][ T5817] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  342.200403][ T5817] bcachefs (loop3): clean shutdown complete, journal seq 4
[  342.271820][ T5817] bcachefs (loop3): marking filesystem clean
[  342.294520][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'.
[  342.308235][ T6636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.193'.
[  342.537451][ T5817] bcachefs (loop3): shutdown complete
[  342.628001][   T11] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  342.903951][   T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  342.914865][   T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  342.926516][   T11] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  343.131929][   T11] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  343.145510][   T11] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  343.155528][   T11] usb 3-1: Manufacturer: syz
[  343.274100][   T11] usb 3-1: config 0 descriptor??
[  343.613095][ T5871] usb 3-1: USB disconnect, device number 2
[  344.758674][ T6664] loop4: detected capacity change from 0 to 8
[  344.857669][ T6664] SQUASHFS error: lzo decompression failed, data probably corrupt
[  344.866282][ T6664] SQUASHFS error: Failed to read block 0x91: -5
[  344.873010][ T6664] SQUASHFS error: Unable to read metadata cache entry [8f]
[  344.884002][ T6664] SQUASHFS error: Unable to read inode 0x11f
[  345.229177][ T6669] netlink: 'syz.0.206': attribute type 12 has an invalid length.
[  345.237943][ T6669] netlink: 'syz.0.206': attribute type 29 has an invalid length.
[  345.248066][ T6669] netlink: 148 bytes leftover after parsing attributes in process `syz.0.206'.
[  345.257488][ T6669] netlink: 59 bytes leftover after parsing attributes in process `syz.0.206'.
[  345.270943][ T6669] Zero length message leads to an empty skb
[  346.733651][ T5871] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  347.013519][ T5871] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  347.023375][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.066103][ T6678] loop4: detected capacity change from 0 to 32768
[  347.177597][ T5871] usb 2-1: config 0 descriptor??
[  347.246250][ T5871] cp210x 2-1:0.0: cp210x converter detected
[  347.274259][ T6678] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid device 255,noinodes_use_key_cache,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names
[  347.274448][ T6678]   allowing incompatible features above 0.0: (unknown version)
[  347.274527][ T6678]   features: lz4
[  347.274591][ T6678]   with devices loop4
[  347.320289][ T6678] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  347.331675][ T6678] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  347.358893][ T6678] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  347.416350][ T6678] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  347.530811][ T6678] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  347.575533][ T6678] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  347.614441][ T6678] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  347.623732][ T6678] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  347.765211][ T6678] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  348.162139][ T5871] usb 2-1: cp210x converter now attached to ttyUSB0
[  348.368448][ T5815] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[  348.377091][ T5815] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[  348.385487][ T5815] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[  348.398887][ T5815] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3
[  348.448337][ T6680] loop1: detected capacity change from 0 to 164
[  348.568480][ T6680] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  348.597480][   T11] usb 2-1: USB disconnect, device number 4
[  348.610404][ T5815] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 4
[  348.635853][   T11] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  348.702636][   T11] cp210x 2-1:0.0: device disconnected
[  348.734743][ T5815] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 5
[  348.789625][ T5815] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean
[  348.990631][ T5815] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  349.291448][ T5168] udevd[5168]: worker [5976] terminated by signal 33 (Unknown signal 33)
[  349.338973][ T5168] udevd[5168]: worker [5976] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/ttyUSB0/tty/ttyUSB0'
[  349.420743][ T5168] udevd[5168]: worker [5995] terminated by signal 33 (Unknown signal 33)
[  349.462247][ T6706] loop0: detected capacity change from 0 to 1024
[  349.473225][ T5168] udevd[5168]: worker [5995] failed while handling '/devices/virtual/block/loop4'
[  349.644771][ T6706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.657583][ T6706] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  349.991653][ T6706] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  350.115152][ T6706] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  350.128295][ T6706] EXT4-fs (loop0): This should not happen!! Data will be lost
[  350.128295][ T6706] 
[  350.139332][ T6706] EXT4-fs (loop0): Total free blocks count 0
[  350.146500][ T6706] EXT4-fs (loop0): Free/Dirty block details
[  350.152660][ T6706] EXT4-fs (loop0): free_blocks=4293918720
[  350.158850][ T6706] EXT4-fs (loop0): dirty_blocks=16
[  350.164979][ T6706] EXT4-fs (loop0): Block reservation details
[  350.171227][ T6706] EXT4-fs (loop0): i_reserved_data_blocks=1
[  350.737725][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.686991][ T6723] loop0: detected capacity change from 0 to 512
[  351.803166][ T6723] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  351.834360][ T6720] loop2: detected capacity change from 0 to 32768
[  351.919856][ T6723] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  351.981962][ T6720] JBD2: Ignoring recovery information on journal
[  352.027429][ T6723] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  352.118939][ T6723] EXT4-fs (loop0): 1 truncate cleaned up
[  352.127500][ T6720] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  352.184159][ T6723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.459392][ T5813] ocfs2: Unmounting device (7,2) on (node local)
[  352.470026][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  352.476911][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  352.772690][ T5819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.037362][ T6739] loop3: detected capacity change from 0 to 4096
[  354.126115][ T6739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.303442][   T30] audit: type=1804 audit(1751658447.829:7): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.228" name="/newroot/38/file1/file1" dev="loop3" ino=15 res=1 errno=0
[  354.369204][ T6748] EXT4-fs (loop3): shut down requested (2)
[  354.453946][   T30] audit: type=1804 audit(1751658447.959:8): pid=6739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.228" name="/newroot/38/file1/file1" dev="loop3" ino=15 res=1 errno=0
[  354.891588][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.926927][ T3558] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  354.938950][ T3558] Quota error (device loop3): write_blk: dquota write failed
[  354.947745][ T3558] Quota error (device loop3): free_dqentry: Can't write quota data block 5
[  355.515039][ T6755] binder: 6754:6755 ioctl c018620b 200000000080 returned -14
[  355.783634][ T6759] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  356.530570][ T6761] loop4: detected capacity change from 0 to 32768
[  356.561695][ T6761] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.236 (6761)
[  357.325594][ T6767] loop0: detected capacity change from 0 to 32768
[  357.338572][ T5871] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  357.566251][ T5871] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  357.580848][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.593489][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.604027][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  357.751939][ T5871] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  357.762091][ T5871] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  357.770628][ T5871] usb 3-1: Manufacturer: syz
[  357.794198][ T5824] Bluetooth: hci0: command 0x0401 tx timeout
[  357.851203][ T5871] usb 3-1: config 0 descriptor??
[  358.179040][ T6769] loop3: detected capacity change from 0 to 40427
[  358.217911][ T6761] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  358.228582][ T6761] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm
[  358.237874][ T6761] BTRFS info (device loop4): using free-space-tree
[  358.530080][ T5871] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[  358.646021][ T6761] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  358.647076][ T6761] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  358.692259][ T6761] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  358.719843][ T6761] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  358.756528][ T6761] BTRFS error (device loop4): open_ctree failed: -12
[  358.867805][ T6767] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  358.867963][ T6767]   allowing incompatible features above 0.0: (unknown version)
[  358.868054][ T6767]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  358.917816][ T6767] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  358.926407][ T6767] bcachefs (loop0): initializing new filesystem
[  358.946828][ T6767] bcachefs (loop0): going read-write
[  358.957705][ T6769] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  358.962132][ T5871] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  359.105356][ T6767] bcachefs (loop0): marking superblocks
[  359.163114][ T6767] bcachefs (loop0): initializing freespace
[  359.179387][ T1682] usb 3-1: USB disconnect, device number 3
[  359.191669][ T6767] bcachefs (loop0): done initializing freespace
[  359.216095][ T6767] bcachefs (loop0): reading snapshots table
[  359.223923][ T6767] bcachefs (loop0): reading snapshots done
[  359.286990][   T30] audit: type=1800 audit(1751658452.809:9): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.239" name="file1" dev="loop3" ino=10 res=0 errno=0
[  359.364262][ T6767] bcachefs (loop0): done starting filesystem
[  359.440661][ T5817] syz-executor: attempt to access beyond end of device
[  359.440661][ T5817] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  359.456504][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(undef) 
[  359.456668][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  359.456764][ T5817] Call Trace:
[  359.456832][ T5817]  <TASK>
[  359.456882][ T5817]  __dump_stack+0x26/0x30
[  359.457066][ T5817]  dump_stack_lvl+0x1df/0x270
[  359.457246][ T5817]  dump_stack+0x1e/0x25
[  359.457409][ T5817]  f2fs_handle_critical_error+0xa6f/0xc20
[  359.457660][ T5817]  f2fs_stop_checkpoint+0x65/0x80
[  359.457867][ T5817]  f2fs_write_end_io+0xb4b/0x1920
[  359.458022][ T5817]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  359.458247][ T5817]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  359.458394][ T5817]  bio_endio+0xe27/0xf80
[  359.458585][ T5817]  submit_bio_noacct+0x214/0x2710
[  359.458829][ T5817]  submit_bio+0x5a9/0x5d0
[  359.459020][ T5817]  f2fs_submit_write_bio+0x92/0x250
[  359.459224][ T5817]  __submit_merged_bio+0x16f/0x6a0
[  359.459415][ T5817]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  359.459633][ T5817]  __submit_merged_write_cond+0x458/0x9a0
[  359.459852][ T5817]  f2fs_write_data_pages+0x4bb2/0x5480
[  359.460198][ T5817]  ? kmsan_get_metadata+0xfb/0x160
[  359.460394][ T5817]  ? kmsan_get_metadata+0xfb/0x160
[  359.460586][ T5817]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  359.460821][ T5817]  ? folios_put_refs+0x21/0xb10
[  359.460970][ T5817]  ? filter_irq_stacks+0x49/0x190
[  359.461134][ T5817]  ? stack_depot_save_flags+0x35/0x7b0
[  359.461326][ T5817]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  359.461528][ T5817]  ? kmsan_get_metadata+0xfb/0x160
[  359.461736][ T5817]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  359.461948][ T5817]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  359.462166][ T5817]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  359.462379][ T5817]  do_writepages+0x3ef/0x860
[  359.462575][ T5817]  ? _raw_spin_unlock+0x30/0x50
[  359.462760][ T5817]  ? wbc_attach_and_unlock_inode+0x131/0x680
[  359.462946][ T5817]  filemap_fdatawrite+0x207/0x260
[  359.463238][ T5817]  f2fs_sync_dirty_inodes+0x2ab/0x9e0
[  359.463424][ T5817]  f2fs_write_checkpoint+0xfe2/0x2b00
[  359.463683][ T5817]  kill_f2fs_super+0x2ff/0x970
[  359.463843][ T5817]  ? __pfx_kill_f2fs_super+0x10/0x10
[  359.463986][ T5817]  deactivate_locked_super+0xc8/0x3c0
[  359.464162][ T5817]  deactivate_super+0x12f/0x140
[  359.464325][ T5817]  cleanup_mnt+0x6fb/0x780
[  359.464483][ T5817]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  359.464693][ T5817]  ? __pfx___cleanup_mnt+0x10/0x10
[  359.464851][ T5817]  __cleanup_mnt+0x22/0x30
[  359.465003][ T5817]  task_work_run+0x209/0x2b0
[  359.465183][ T5817]  exit_to_user_mode_loop+0x2a6/0x330
[  359.465360][ T5817]  do_syscall_64+0x1e3/0x210
[  359.465555][ T5817]  ? irqentry_exit+0x16/0x60
[  359.465743][ T5817]  ? clear_bhb_loop+0x40/0x90
[  359.465905][ T5817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.466059][ T5817] RIP: 0033:0x7f035c78fc57
[  359.466175][ T5817] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  359.466291][ T5817] RSP: 002b:00007ffca1481fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  359.466428][ T5817] RAX: 0000000000000000 RBX: 00007f035c810925 RCX: 00007f035c78fc57
[  359.466529][ T5817] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca1482070
[  359.466616][ T5817] RBP: 00007ffca1482070 R08: 0000000000000000 R09: 0000000000000000
[  359.466698][ T5817] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca1483100
[  359.466803][ T5817] R13: 00007f035c810925 R14: 0000000000057b94 R15: 00007ffca1483140
[  359.466930][ T5817]  </TASK>
[  359.827834][ T5817] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  360.214827][ T6805] binder: 6804:6805 ioctl c0306201 2000000003c0 returned -14
[  360.580549][ T5819] bcachefs (loop0): shutting down
[  360.586168][ T5819] bcachefs (loop0): going read-only
[  360.591643][ T5819] bcachefs (loop0): finished waiting for writes to stop
[  360.673505][ T5819] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  361.323657][ T6803] fido_id[6803]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  361.533810][ T5819] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  361.565779][ T5819] bcachefs (loop0): clean shutdown complete, journal seq 5
[  361.604200][ T5819] bcachefs (loop0): marking filesystem clean
[  362.514482][ T6811] loop2: detected capacity change from 0 to 32768
[  362.878698][ T6811] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.246 (6811)
[  362.906164][ T5819] bcachefs (loop0): shutdown complete
[  363.052248][ T6811] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  363.063288][ T6811] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm
[  363.072467][ T6811] BTRFS info (device loop2): using free-space-tree
[  363.107293][ T5871] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  363.465148][ T5871] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  363.474900][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.560370][ T5871] usb 2-1: config 0 descriptor??
[  363.599253][ T5871] gspca_main: cpia1-2.14.0 probing 0813:0001
[  363.771029][ T6811] BTRFS info (device loop2): rebuilding free space tree
[  364.055706][ T5871] cpia1 2-1:0.0: unexpected state after lo power cmd: 00
[  364.090965][ T5813] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  364.702002][ T5871] gspca_cpia1: usb_control_msg 05, error -71
[  364.708450][ T5871] cpia1 2-1:0.0: unexpected systemstate: 00
[  364.823811][ T5871] usb 2-1: USB disconnect, device number 5
[  366.435919][ T6836] loop4: detected capacity change from 0 to 32768
[  366.947084][ T6841] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  368.196594][ T6850] netlink: 'syz.3.258': attribute type 5 has an invalid length.
[  368.283210][ T5883] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  368.545090][ T5883] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  368.554696][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.638686][ T5883] usb 3-1: config 0 descriptor??
[  368.704454][ T5883] cp210x 3-1:0.0: cp210x converter detected
[  369.108477][ T5883] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  369.340618][ T6848] loop2: detected capacity change from 0 to 1024
[  369.725480][ T5883] usb 3-1: cp210x converter now attached to ttyUSB0
[  369.914807][   T11] usb 3-1: USB disconnect, device number 4
[  369.949022][   T11] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  370.044642][   T11] cp210x 3-1:0.0: device disconnected
[  370.934166][   T11] IPVS: starting estimator thread 0...
[  371.033339][ T6872] IPVS: using max 192 ests per chain, 9600 per kthread
[  371.619231][ T6878] loop3: detected capacity change from 0 to 256
[  371.688244][ T6878] exfat: Deprecated parameter 'utf8'
[  371.793884][ T6878] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  372.747991][   T11] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  372.803800][ T5883] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  372.911636][ T6889] loop3: detected capacity change from 0 to 1024
[  372.970376][   T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.982241][   T11] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  372.992049][   T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.078715][   T11] usb 1-1: config 0 descriptor??
[  373.086094][ T5883] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  373.097675][ T5883] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  373.108167][ T5883] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  373.303568][ T5883] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  373.313330][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.321630][ T5883] usb 5-1: Product: syz
[  373.326161][ T5883] usb 5-1: Manufacturer: syz
[  373.331036][ T5883] usb 5-1: SerialNumber: syz
[  373.526921][ T5883] cdc_mbim 5-1:1.0: skipping garbage
[  373.529728][    C0] hrtimer: interrupt took 290974 ns
[  373.543384][   T11] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor
[  373.630507][ T6105] =====================================================
[  373.640913][ T6105] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xf0e/0x33f0
[  373.659237][ T6105]  _copy_to_iter+0xf0e/0x33f0
[  373.664550][ T6105]  copy_page_to_iter+0x482/0x910
[  373.670625][ T6105]  filemap_read+0x1cda/0x2300
[  373.675902][ T6105]  blkdev_read_iter+0x89f/0xb00
[  373.681509][ T6105]  vfs_read+0x85a/0xf00
[  373.686467][ T6105]  __x64_sys_read+0x1fb/0x4d0
[  373.691517][ T6105]  x64_sys_call+0x39db/0x3db0
[  373.696642][ T6105]  do_syscall_64+0xd9/0x210
[  373.698874][   T11] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input7
[  373.701457][ T6105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.719223][ T6105] 
[  373.721807][ T6105] Uninit was stored to memory at:
[  373.727512][ T6105]  copy_folio_from_iter_atomic+0x18f2/0x3c10
[  373.733914][ T6105]  generic_perform_write+0x8eb/0x10c0
[  373.739649][ T6105]  shmem_file_write_iter+0x2b7/0x2f0
[  373.745950][ T6105]  lo_rw_aio+0x12d4/0x1610
[  373.750773][ T6105]  loop_process_work+0xe30/0x1ee0
[  373.759807][ T6105]  loop_rootcg_workfn+0x2b/0x40
[  373.766475][ T6105]  process_scheduled_works+0xb8e/0x1d80
[  373.772488][ T6105]  worker_thread+0xedf/0x1590
[  373.777906][ T6105]  kthread+0xd5c/0xf00
[  373.782328][ T6105]  ret_from_fork+0x1e0/0x310
[  373.787379][ T6105]  ret_from_fork_asm+0x1a/0x30
[  373.792567][ T6105] 
[  373.795228][ T6105] Uninit was stored to memory at:
[  373.800907][ T6105]  hfsplus_bnode_write+0x158/0x430
[  373.806473][ T6105]  hfsplus_brec_insert+0xaec/0x1540
[  373.812089][ T6105]  hfsplus_create_cat+0x1396/0x1910
[  373.817732][ T6105]  hfsplus_link+0x79e/0xc30
[  373.822618][ T6105]  vfs_link+0x8e8/0xb30
[  373.827203][ T6105]  do_linkat+0x4af/0x1040
[  373.831899][ T6105]  __x64_sys_link+0xd7/0x140
[  373.837059][ T6105]  x64_sys_call+0x3567/0x3db0
[  373.842140][ T6105]  do_syscall_64+0xd9/0x210
[  373.847122][ T6105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.853440][ T6105] 
[  373.859189][ T6105] Uninit was stored to memory at:
[  373.866126][ T6105]  hfsplus_create_cat+0x1748/0x1910
[  373.871700][ T6105]  hfsplus_link+0x79e/0xc30
[  373.876699][ T6105]  vfs_link+0x8e8/0xb30
[  373.881243][ T6105]  do_linkat+0x4af/0x1040
[  373.886070][ T6105]  __x64_sys_link+0xd7/0x140
[  373.891047][ T6105]  x64_sys_call+0x3567/0x3db0
[  373.896272][ T6105]  do_syscall_64+0xd9/0x210
[  373.901155][ T6105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  373.907476][ T6105] 
[  373.910051][ T6105] Uninit was created at:
[  373.914943][ T6105]  __alloc_frozen_pages_noprof+0x689/0xf00
[  373.921134][ T6105]  alloc_pages_mpol+0x328/0x860
[  373.926427][ T6105]  alloc_frozen_pages_noprof+0xf7/0x200
[  373.932380][ T6105]  allocate_slab+0x24d/0x1220
[  373.937537][ T6105]  ___slab_alloc+0xfec/0x3480
[  373.942591][ T6105]  kmem_cache_alloc_lru_noprof+0x922/0xed0
[  373.948879][ T6105]  hfsplus_alloc_inode+0x5a/0xd0
[  373.954344][ T6105]  alloc_inode+0x87/0x4a0
[  373.962418][ T6105]  iget_locked+0x239/0x12d0
[  373.968657][ T6105]  hfsplus_iget+0x5c/0xb80
[  373.973507][ T6105]  hfsplus_btree_open+0x134/0x1d00
[  373.979001][ T6105]  hfsplus_fill_super+0x1161/0x2740
[  373.984647][ T6105]  get_tree_bdev_flags+0x6e6/0x920
[  373.990180][ T6105]  get_tree_bdev+0x38/0x50
[  373.995065][ T6105]  hfsplus_get_tree+0x35/0x40
[  374.000106][ T6105]  vfs_get_tree+0xb3/0x5c0
[  374.005004][ T6105]  do_new_mount+0x738/0x1610
[  374.009986][ T6105]  path_mount+0x6db/0x1e90
[  374.014998][ T6105]  __se_sys_mount+0x6eb/0x7d0
[  374.020064][ T6105]  __x64_sys_mount+0xe4/0x150
[  374.025244][ T6105]  x64_sys_call+0xfa7/0x3db0
[  374.030224][ T6105]  do_syscall_64+0xd9/0x210
[  374.035252][ T6105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.041500][ T6105] 
[  374.044174][ T6105] Bytes 472-475 of 3072 are uninitialized
[  374.050199][ T6105] Memory access of size 3072 starts at ffff88813104f000
[  374.057550][ T6105] Data copied to user address 00007ff809d82400
[  374.067278][ T6105] 
[  374.069785][ T6105] CPU: 1 UID: 0 PID: 6105 Comm: udevd Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(undef) 
[  374.083844][ T6105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  374.094377][ T6105] =====================================================
[  374.101631][ T6105] Disabling lock debugging due to kernel taint
[  374.108810][ T6105] Kernel panic - not syncing: kmsan.panic set ...
[  374.115547][ T6105] CPU: 1 UID: 0 PID: 6105 Comm: udevd Tainted: G    B               6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(undef) 
[  374.129025][ T6105] Tainted: [B]=BAD_PAGE
[  374.133324][ T6105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  374.143592][ T6105] Call Trace:
[  374.147037][ T6105]  <TASK>
[  374.150110][ T6105]  __dump_stack+0x26/0x30
[  374.154686][ T6105]  dump_stack_lvl+0x53/0x270
[  374.159524][ T6105]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  374.165596][ T6105]  dump_stack+0x1e/0x25
[  374.169986][ T6105]  panic+0x4bd/0xd50
[  374.174157][ T6105]  kmsan_report+0x31c/0x320
[  374.178908][ T6105]  ? kmsan_internal_check_memory+0x16c/0x230
[  374.185126][ T6105]  ? kmsan_copy_to_user+0xf1/0x190
[  374.190489][ T6105]  ? _copy_to_iter+0xf0e/0x33f0
[  374.195533][ T6105]  ? copy_page_to_iter+0x482/0x910
[  374.200841][ T6105]  ? filemap_read+0x1cda/0x2300
[  374.205877][ T6105]  ? blkdev_read_iter+0x89f/0xb00
[  374.211085][ T6105]  ? vfs_read+0x85a/0xf00
[  374.215624][ T6105]  ? __x64_sys_read+0x1fb/0x4d0
[  374.220684][ T6105]  ? x64_sys_call+0x39db/0x3db0
[  374.225735][ T6105]  ? do_syscall_64+0xd9/0x210
[  374.230641][ T6105]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.236910][ T6105]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  374.243233][ T6105]  ? up_read+0x6a/0xf0
[  374.247501][ T6105]  ? do_user_addr_fault+0x1a1a/0x2560
[  374.253118][ T6105]  ? kmsan_get_metadata+0xfb/0x160
[  374.258478][ T6105]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  374.264562][ T6105]  kmsan_internal_check_memory+0x16c/0x230
[  374.270637][ T6105]  kmsan_copy_to_user+0xf1/0x190
[  374.275805][ T6105]  _copy_to_iter+0xf0e/0x33f0
[  374.280679][ T6105]  ? kmsan_get_shadow_origin_ptr+0x35/0xb0
[  374.286759][ T6105]  ? filemap_get_pages+0x371e/0x3a60
[  374.292295][ T6105]  ? kmsan_get_metadata+0xfb/0x160
[  374.297667][ T6105]  copy_page_to_iter+0x482/0x910
[  374.302792][ T6105]  ? kmsan_get_metadata+0xfb/0x160
[  374.308217][ T6105]  filemap_read+0x1cda/0x2300
[  374.313162][ T6105]  ? kmsan_get_metadata+0xfb/0x160
[  374.318526][ T6105]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  374.324589][ T6105]  ? __rcu_read_unlock+0x6d/0xd0
[  374.329828][ T6105]  ? aa_file_perm+0x24c/0x18d0
[  374.334812][ T6105]  ? aa_file_perm+0x378/0x18d0
[  374.339864][ T6105]  blkdev_read_iter+0x89f/0xb00
[  374.344944][ T6105]  vfs_read+0x85a/0xf00
[  374.349391][ T6105]  ? __pfx_blkdev_read_iter+0x10/0x10
[  374.354995][ T6105]  __x64_sys_read+0x1fb/0x4d0
[  374.359937][ T6105]  x64_sys_call+0x39db/0x3db0
[  374.364843][ T6105]  do_syscall_64+0xd9/0x210
[  374.369643][ T6105]  ? clear_bhb_loop+0x40/0x90
[  374.374522][ T6105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.380641][ T6105] RIP: 0033:0x7ff8096a7407
[  374.385234][ T6105] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  374.405067][ T6105] RSP: 002b:00007ffcd7b17010 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[  374.413709][ T6105] RAX: ffffffffffffffda RBX: 00007ff809d92880 RCX: 00007ff8096a7407
[  374.421860][ T6105] RDX: 0000000000002000 RSI: 00007ff809d81000 RDI: 0000000000000009
[  374.430006][ T6105] RBP: 000055a4c9ab80b0 R08: 0000000000000000 R09: 0000000000000000
[  374.438158][ T6105] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  374.446302][ T6105] R13: 0000000000018c00 R14: 000055a4c9abf228 R15: 00007ff809e5739c
[  374.454489][ T6105]  </TASK>
[  374.458002][ T6105] Kernel Offset: disabled
[  374.462423][ T6105] Rebooting in 86400 seconds..