last executing test programs:

1m8.987102037s ago: executing program 3 (id=93):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

1m8.01718815s ago: executing program 3 (id=107):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000009e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1m7.783589535s ago: executing program 3 (id=108):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
mkdirat$cgroup(r0, 0x0, 0x1ff)
mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff)
sendfile(r1, r1, 0x0, 0x9)

1m7.413104414s ago: executing program 3 (id=111):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)

1m6.376609419s ago: executing program 3 (id=116):
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r0], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000)
r1 = socket(0x10, 0x3, 0x0)
connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={0x2, @none={0x0, 0xffff}}, 0x14)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1m4.385436465s ago: executing program 3 (id=132):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x57, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x40000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffd, 0x768, 0x200, 0x7, 0xf, 0xfffffffc, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xb, 0x1, 0x0, 0x0, 0x5, 0x4, 0x1000, 0x400080, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0xffffffff, 0x4, 0x0, 0x9fa, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x921, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda7, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1000000, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4dc6d315, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

1m4.254633089s ago: executing program 32 (id=132):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2, 0x9}, 0x57, [0x0, 0x0, 0x0, 0x40000, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x40000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffd, 0x768, 0x200, 0x7, 0xf, 0xfffffffc, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xb, 0x1, 0x0, 0x0, 0x5, 0x4, 0x1000, 0x400080, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0xffffffff, 0x4, 0x0, 0x9fa, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x921, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda7, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1000000, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x635, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x2, 0x40, 0x9, 0x0, 0xbd, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4dc6d315, 0x6, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

41.428296815s ago: executing program 4 (id=366):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x4, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x3ff9}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

41.318941578s ago: executing program 4 (id=367):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x4000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fadvise64(r0, 0xfffffffffffffffe, 0x8000, 0x4)

41.010751825s ago: executing program 4 (id=371):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x40000000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x80000034)
setuid(0xee00)
unshare(0x20000400)

41.009986965s ago: executing program 5 (id=372):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000780)={[{@barrier}, {@nodioread_nolock}, {@nobarrier}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x59c, &(0x7f0000001840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x1}, 0x7)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882)

40.944873457s ago: executing program 4 (id=373):
syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xff, 0x69f, &(0x7f00000028c0)="$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")
syz_usb_connect(0x3, 0x24, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff)
mount$afs(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000980)={[{@dyn}, {@flock_write}]})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)

40.150621645s ago: executing program 4 (id=383):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000f705000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

40.013551959s ago: executing program 5 (id=384):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000200)={0x1d, r1, 0x400, {0x0, 0xff, 0x4}}, 0x18)

39.917208841s ago: executing program 4 (id=385):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x28, 0x19, 0x7, 0xd1, 0x30, 0x10, 0xaa, 0x6, 0xfd, 0x8, 0x6, 0x40, 0x0, 0x79}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r1=>0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r1}, &(0x7f0000000200)=0x8)

39.819753993s ago: executing program 33 (id=385):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x28, 0x19, 0x7, 0xd1, 0x30, 0x10, 0xaa, 0x6, 0xfd, 0x8, 0x6, 0x40, 0x0, 0x79}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r1=>0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r1}, &(0x7f0000000200)=0x8)

39.815731483s ago: executing program 5 (id=388):
socket$inet6_tcp(0xa, 0x1, 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuseblk(&(0x7f00000010c0), &(0x7f00000002c0)='./file0\x00', &(0x7f0000001140), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020)

39.696898556s ago: executing program 5 (id=391):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@noacl}, {@lazytime}, {@minixdf}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
setreuid(0x0, 0xee01)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2)

39.209233847s ago: executing program 5 (id=397):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg$can_bcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/68, 0x44}], 0x1}, 0x102)

37.533323857s ago: executing program 5 (id=408):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r0, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x20008841)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x8201, 0x4)

37.378131051s ago: executing program 34 (id=408):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r0, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x20008841)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x8201, 0x4)

4.2805048s ago: executing program 2 (id=683):
mlock(&(0x7f000021c000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
munlockall()
mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f000021c000/0x2000)=nil)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448cc, 0x0)

3.998619027s ago: executing program 2 (id=686):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
writev(r1, &(0x7f0000001640)=[{&(0x7f0000000000)="69e2", 0x2}, {0x0}], 0x2)

3.758369842s ago: executing program 2 (id=689):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = gettid()
tkill(r1, 0xb)

3.599062256s ago: executing program 2 (id=692):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x2480}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @remote}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @private=0xa010102}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, 0x9, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x1fffffc, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x0, 0x0, 0x1, 0x3}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
connect$inet6(r0, &(0x7f00000000c0), 0x1c)

3.509460488s ago: executing program 7 (id=694):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xf00acb850d5bc092)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)

3.509153598s ago: executing program 1 (id=695):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xffff, 0x0, 0x9b, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x93, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x8b, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x83, 0x1, 0x0, 0x1, 0x1}, {}, {}, 0x20, 0x0, 0x0, 0x30, 0x0, 0x1, 0xfe000000})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x1b, 0x0, 0x800}, {0x6e0, 0x0, 0x1}]})

3.498368158s ago: executing program 2 (id=696):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x18000, &(0x7f0000005180), 0x81, 0x50d4, &(0x7f00000051c0)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
symlink(0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x103d42, 0x5319d45b27669fc7)
lseek(r0, 0xffffffffffffffff, 0x1)

3.318423702s ago: executing program 7 (id=697):
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x10d840)

3.277120653s ago: executing program 1 (id=698):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000014000905bdbd7000fddbdf25021f00cb", @ANYRES32=r2, @ANYBLOB="08000400e0000002080008000103000008000200e000000208000900060000000800090003000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

3.114200447s ago: executing program 1 (id=699):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000001c40), 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000340)="ab")
pread64(r1, 0x0, 0x0, 0xd000)

3.00175572s ago: executing program 6 (id=702):
symlink(0x0, 0x0)
io_setup(0x4, &(0x7f00000014c0)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}])
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)

2.504401942s ago: executing program 2 (id=705):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

2.026349542s ago: executing program 6 (id=707):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x402)

1.73003997s ago: executing program 6 (id=708):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x810000a0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x5000180)

1.612177432s ago: executing program 6 (id=709):
r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235})
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x11000)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0)
ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f00000009c0)={{r1}, {@val, @max}})
close_range(r0, r0, 0x0)

1.429062927s ago: executing program 6 (id=711):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x810880, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=remount-ro,noquota,nodiscard,iocharset=macturkish,errors=continue,errors=continue,nointegrity\x00iocharset=macgreek,quota,usrquota,usrquota,errors=remount-rocard,noquota,noquota,\x00\x00\x00\x00\x00'], 0x1, 0x6172, &(0x7f0000002fc0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4)
lseek(r0, 0x100, 0x0)
getdents(r0, 0x0, 0x0)

1.013424997s ago: executing program 0 (id=714):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000200)="0f20e035100000000f22e08fc9200165000f4cb5bbed00008fe9d899c2f30f090f20d20f01c466ba4300b000ee0f01bc560d0000002e0fc75f0a", 0x3a}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

971.367587ms ago: executing program 0 (id=715):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000b40)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000700)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000140)={@desc={0x1, 0x0, @auto="6916019b4cb6e6b1"}, 0x40, 0x0, '\x00', @a})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})

860.02988ms ago: executing program 1 (id=716):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r2, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}}, 0x0)

777.410922ms ago: executing program 0 (id=717):
syz_emit_vhci(0x0, 0x8)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x4, 0x1, 0x7d8485a2, 0x0, 0x9, "6005a405f7dced38323e0058367fb23603a736"})

743.302953ms ago: executing program 1 (id=718):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

742.318233ms ago: executing program 0 (id=719):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x402)

660.993215ms ago: executing program 7 (id=720):
r0 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x80)
dup2(r1, r2)

598.355496ms ago: executing program 0 (id=721):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @irqchip={0xfffffffa, 0x7}}]})
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x0, 0x1})

537.090357ms ago: executing program 1 (id=722):
syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f0000006800)=ANY=[@ANYBLOB="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", @ANYBLOB="86e65fc95cec3737ffc083e9420e0fda32ad9e60822bfec34b914022040a90f8741ca4d99221eeaef6d92e8595aacab6491e0f137f25a1eb6ce98ef49a462828f95b2b068d0d761d5b739c59f7553d6f322aa98313062ead06b1ad3b6575bd1804ab3d04d07d4692003ea4284df89a58c389ecd40e7168cf59c6200e16312d9aaa8722fb6a41995420c131b395b247f1e00fa27a838f52cecfdbf295c4f590e11c0121e67f19efbfe3041bbaa77cef1561d494e645805ba55eb8463cf1b56c08e44d71830924371064c7dd3fe5219c8af052190d7376aa62bf5edc726143be953f1494b0f2ac4591e4676317241150e315770ce42000ae7d8d7a416575697ce9989263cf1ac17daa0de31d3defb3c85aba7ba589d4bba6fb05b84fed5d7a3e6fc3692ee0e37c7515caaf9815bad099d93d420ec27e0da0eb2566233ce799632051375cd5b545428d3209708dd8bc9aed1af2b2dd96d8d7617fac7f5f006e165cd1add85134b939cf15175850d2f58d89ab6d4f0aa93ae8ad8f9d4f428b007af33a69188e661ef662cacd512ef14955045acfd4ab4ab699881d2365236c7dd59f7a28f5579b480600f3070bfe97f59e609da493e6750153bca6cad17312baa4879e0fde2f81ae15ce236f64fb898ad4ba6071403b0cafd642e2648d4e3218949dd9e906c76609ac9efe8c6176ad5e9a2f139d7b6e7e248dadbdf1cc74c05ce3ad93359b3928ec022e6ed2512c66bc64087f22a9bc10961477f5ad8acca7d2fbb242d52703ec70225d76713dfd7dc1ce24ab3aede0f39f2740181efdbaf4dd912701fd8c568d8d0daea80a4c9a93a9e28ba48f1dbafaf2e279c0d83c327e045e20d37abc0ecacd0fd6220295c16e0f4849096f0d5a7d337c8460553a5d5b63ed01a55047e22c98e9df86bd22e4ec55b7c311497d97b30709634c58c2eb751a724f6086d562b9c1d3f5fbba7d5c78a9ed08c924ab085ecaf50cb2a0437174550ea20bdba86364bc9453fb4af21f6cac1268118be3eca0ea7d6f94447e7b2cb6247f42836caa7da504f60314182201790974ac7b648a57b8d87b7af022266b3e3fb6303583fa876de471b1d8ac73f0af724581271be1ba839261e7b50f42e1d3c44856f0a5b3e148a7783ed2ed70ee435cec055be29b7997d2e2bb52e39e413b570d383febe08c38310ca77b3622cc45c1a79f0de240f23c0a9a28ea6fc2030f927a1e07fe15ae8e70e170a7152ce5475e199b780390c971c9148f72eff33cac7f0cb23850f1d7f2494733f86bf52df43c2a44b412c5f0cd830e45a9fa097d4f7508fa6e1f33ddf6953b6dbce69aa70f078c4112636c3a902252a17b197ecb8f05beb5a276e0c297990b240bf0156601deb9105be5529e4c6923f14a8c7e1fe6a04cd229194a0b974d473ce6726fc481bb7f4e172eb661162d221a6837849fd618849da2d300d25db9cb8386efba1c099edd5ac31bf9fbda2a8a3b824cbe2e953710555f579d8fcf51b6d14bb098cdb68d25b9962cb163b78b89ddcb201f8882e036d60c2348a52536d06f1dc891fcdb6a6baab4ad69051ae5eefd73f0f67eb0f254dd3b460a2cf56a796d7a16d67e6818119cc8c40facc305657bfa74bdfee0faa0eec37cf000ecce3f86cc6f6cb40ad12a46a0184391fe32616531b35fd3bf1c3d28d00aa052fd7c2c1891448db260db1a9717281a25bf705514aaee649e0630da06fe202e3949674554373d878e13d90f2dc3fcf3143f1cf9605f694b7854038409573d12eb872befe1132f79d4d7a9b1964fc1cd5214fb99a0ffd1e88936d01b052479e777340b29dc97c5b02e8ddee2a848ab31cac8696b6cc6f7630f2aaca9b8032780b68f2e26d42ea1b86b40fd499c394cf8880d3ee6fa4fc6dd4ff236d0a82641a95767ae8f9ef5ed219891f78db23a977a017da0b0c1914334cf3c919ba02eae35d7e98b96c6a9e7e0a6f0f6747cf91c008ebe56522e7dbdf7a942b16e01427ba658543b4438686a62015bcdfffcd05ef587d3ce8a916a6ab0a80c17096a3180a57bc20bdadd9b5380a59567bb4a0b10fcdc5c98a4168753489c45dbf922962dd7a8968de0fc2ad6d4abfd1fcc530a8eea9f025ef6b7442a7a340d1f8b477db5d4e65d864ff2cc559640b47f47381c1d2de06e957199db1dadc94ae0a320b6829ec3e7506856869979f791c2122e6991b3789a87ada5f5169040344b94841e296dc963d38e775cdc5e65eee3bd059e55c5cc1fb31f7061acc19e0b8dcf72b583578fd5557bcc6dbf8b5e0b7185e7d7dca2c08589c8f8d57a8df8b015942f853a69d7ba492337b04c5f3e6e19ec5fbc28aa100174c71912681576dd014bd4d496abcfdf75289dde158bae37686b042df4de5de3dd19105887f3e4e291a30c1f19061bbea43ea75afb678b1377c2bd189b86bf60b1084dcd91d23197e944f691153df147d5051f2d5ed1b0b55677c1e7a6d99aaefc08db70e7d4b5a59e0d8fcffa8fd76d42e4c326b1df840538662c60c046d219beeb81a62c28565cf2a71742bc702a5c9bad03dd69d00da46478bb48d0a85e333c651245ea387f286cc9114f97cbfcdfe0dce4e37da4a41943785781123dace55d34ede0a855b36972ed1442b1404df80f9532a0db809948bd241f3383d56c8a6ef57a9e5549c12f2677a960bf54d7cbaf6560bd86a91ad793bedddbb704324126b5ea2f145b8aeb17d1ef863cde3a3e2749f5bbcbd45673269d8421cc1eb90ec66f7764bb657de407119146d74b460c727c0ffe7a1f85db6f43dea39a1b81bc6f65cfeb8ecba31dae17f16c4d726f4bf778b235ae38c3270c663d1391a4fc48990383dd240714612358ba3d8dfe2dd6f3347146d3e93082a49bdeeec58263a6f7d34e2ed759eb9b0fa298ac063c09ddf39c86d426d1bdbd173cb3283e99cdc301b13557250615e89e870ee820783eec14398fe91996359ff4bfd39f3a36cd5bd697200f5db1b1c4a58bf60d55f99b323450004277e90a32b0ab09327091afe269a871504da4ca79ebdddaa2d246bcbdf3c57c13184cda844255e03b1437ef5e79545b764ec6dd666b17dd0648806805d09e12c68d794a6da81d70454b09fded5d98aaa17d69e0e343995307785cf40e8993dc72d5f2b7ee69efe86ee897d1d0d46a51898c73d09a709fc9180c71d6cae0a6161b4bcd39bc090dd319165d73e312108a1b4b2515c572e03bd4be6184717037e29868d33f7ccc2885af1beae10bef038df839b7cbc126b1baf8f2e14007e49f2d4a95626c625ecdba3333c69cbae6416a18a75769a7020ecdc96630e0a3c920de9329d6bb6b605f6eb5c2ba273bf5efa977bece3bd4ad848fcd2f11a4103f9abed1eee1b7ea2ad1ebb75327125a1eb5f62c6bcd45fcdac8edc6a29aed4a906d86da215b492ff1a726aa4a317af822060a674b9774464d53a477061117cf3a5d38d91bf3df21dfc398ef04f565c53abd7ebb1b41e2bc5bbc5f218598010c829039852216b19d0762cdd7dce5e7620403313180b04a97651350a7c2bf6380363528d733a74a64594d7a801d3fb3fc80cad52a77d5b8518ef89310f8509bef1933ef303562380bb1e381d49b2c08cc56efa1983c63f60107f378704ae1e89b9dfee5b7478e5e6e5dfb62f75387fe010818be933b0504545513739db06db38abc16387f1b7a4f3908a6a2119432997718506a7e750e40215f6d63787aa74cfe039b3d38dec31b9dfbb3ef901a6f66357d60ee51e06f8b72555092b79be38ec8952bda7dc78dc37ef1f35d0506f6a58a1dfe288b5d388df12c5f6f5eeefcc6c4ace03643e7b600904623891d8e31b2ef23fd8137690621f3deaed46cee675b6d968bccb784add5d0ede8e0289a163b00f5a42573936864efcfb2357b6bb5f4e1872aec8f9d7be2059f1d98a3da288016497e5b358dec464e64dfb21edcd591ac769e100db57b3654c3008644839a929063a3c142606efe3edf19f63ef934d7a949bfcf85dcd6b6fd7a64e786f9ddbd1f8bb86ed4203676cc57f4cc32ccbed9888d7be95903dbcf1d60c6e93e7d5683cfd58950f589284e6950651a8624a5bdb4c23d662ff0554914e0c1f1d5e9b189e566d6daba050749cab9e694fb801efd5f6f342cb077912a846536909a9b3b11d95df8983ddc9448f7b1b89017ec4860bd317467d08e6c0656585d4013270fdb5aed829ba2a44725b552014ac4127edb29adf23956e4ed96ef23f052e4ac88252d5c7842b7e255988d2415fb3a46500c686bc3ea214e5c552b916aa0800cd83bce02e2731c8145a28c4fd19891c5e032e762e1f3a183e091bd5475f682593a0d6ac7697d32ec78142699b9664b7f41194daca4867e9d1dce20c3781b03c18a6d5dcc5f716d8d3fa38ed9604b4a8afc0fefa03b02063a33861d8f17574c6801e6b0bb34c54db351554f3b9f7ae6be472cad47aa41a28382bc5e61a001b5b32c7113a363d6a392e757510858313cb6d14d27e34c8e22486376a6c51bdde8827f2005772ec868b67be57f97d9d341074fc5cdef9678b3b72bcd509d53c9244a85bf790e9cf3dcdece8d66c3bbd5baba730ddff52bbb7a66bfe421684192653479b3588a9b4319c57060eb3fb6a7eec73a51bb5836f50944a5d38a81811b0130ecda2966944f475adb4d828a01c88f7dd29de8ae38265bd382d5e9afd9ee27c378cf56e5e4195ca8a4d46f6c28e1e5e9b4a7a3f6942102dfc249020e79e10061ba420ff2d1181ae6020c9ed2f9f386b8b56bf487b9ef0fe86f4443ac720325720b13596efb718ff28082eafd42353321faad5d4ecc427ac9e9a51950c1e4fe8151d8905108eda21082c09b7858dffbea8ad6bad372e8b37949e4d1b5efde2a1974f1d8e05220ae58bf30cd9b914da9a65b08ad806187cc4385994646811851978a1f9a573f8b01db05941db6b7daedca083981b775cce43228e36e27b591be6c435974b6d0e6c082b08a9d07fd3c138431d8238db64cbaabeff4c522d0504329d913afb4f173d19d8c9c84421199074a91aa0c9ece65ddb46032a6dfcb15f09f582c8b6b4adbcaa2f83727eafa9e01a59fa17d481e3afd4a3e94f860be0c8e6d0fe1031c384b0357784f6d170ab328506e22add3dcf367763c2d9e09737aff5ff4836dd7fbd571548bfb94144403c906a5f2763b619df470843ed660f3c48e6d2f6574c6ccff2ef3dd103ed2b60d643f9a9f8435d8878bbfdfa28414935ba08557e8a21a44df75f21dd7be31013a692729649114e2585be2dfddbfe5f2deb6ab8d0cc4e245ae3b1d99d4d4e6c167d798c438664599e10e839864f6beb76d8d193b1cdde48e185fcb897aebc659f14890056b3cc044f32f24f8564fb8e5e6bf92a4365051561e0236916f8c9ff5115793eea703452ca42bfd6bdc3ad80c36e38d090bb8a992ab44ac41c7f661b586cf64ad3822b626c5418a8619a0697c5fd27a59f82b188c38006daa29d3ae07acd4c8bfcb3a3a11428fa92b03d1ee330ce4142b97894222244d43c4bfb8a0d202f7d2fddd32a6fd56a8f32974aa6d036bc641d6fbd85b54be459845f4aaff42d8ae4315d35b08e7cedff13cdf1eb8b3b76e1e82aa91564ef26d8ecb7d757d081a1455f14c6f5b0a53c8e4376083303427ad743b83d28d85724bdb65cada011b2500b058ea5b9124c07824c2b22595cbbfe9287155896f323b0f914334dc4e9db35717f0f6ef50cd4192a9b05b2fdba5840bbc81914b8fe1f34bef54c6f2e1068f8d1a9b51b7b1d9226287cfd7b50eb746a9e2b289fe43d02d8031928992f1b22409221e4557285d440dc2a20b677e8f6160eeb81fc0beca14482c7e6d62105df6b5e9ef5d8607d759513bdd3dd309014811cfc5dc184d990e7f3c1461aa1d1d16e8dc9973d967de1ad69ea605b777213ee511f44396eafe9c090f4997b5c6", @ANYRES8, @ANYRES8=0x0, @ANYBLOB="a77a47c7093995493790249b0bed32a055f763e24190111977519571ce7e7842f63886bbf71ffeb820eddf6133ab8ae88bcc3d9004d9c6dbe44fbdcf671794f90a6dc723010be2684f321bdcb0f3a28f37715ba81e0f3b27d1206de5d93037a11c2b5ce35f7ffda7b43c3c9888163a50b7db5daea67d670e8b86c032da653d273cfb7bf3df53e836bb96370c4c637ec105fd520968a03441384810ed179646174536425dd1f0073804e63a43a92c901534484b0a352baee33ac1638bff1e67ee4959717feb229b247c25ae4018f502bdb5e7", @ANYRES16, @ANYRESDEC, @ANYBLOB="2da97369bd5bd2a022e4fea628166430fb7a26dae38cd827ad7f8cff5d2246bdd2cc0e8101b9631aa9db6c88c4ea13a8fbc6a23601da47409ecba43e29d90521e4a37f2f57fa7ce2366b5b89b5b9529791fb53b47e83c2014cd5779926a7dd8a0de70a50b2baf658b32d6d108efa8d3b6101762c8308a5b3351fd14516c9c33e6c6bd15e956f84604a27325b8ebb315aff3e39aa98ba22dffb1b6a7c1acafedad4ef237de4595f77f679e98e9dcbf01dc5bcbd5c199b9e95c24b", @ANYBLOB="9651c56ad88578a25546d8301a976d6fc5e51f3814a125051a070f7f54437d1ce35d85809048bfebe5ac13dce749226f4eace102819832dc4feee07cbf025529706f80354fcaaaf34bc289d3892a62957f78a9c45fe4e6e8c1332d57018a296c8eca11a25d4a581b17f43b9f4480c9a839e10a15954d4c325da6384fa44e9bb79ff45d24a2a2e805fac936dd9af003a173aec97678f46c000b0eab44f2", @ANYBLOB="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", @ANYRES32], 0x1, 0x1d8, &(0x7f0000000580)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2208412, &(0x7f0000000b40)=ANY=[], 0x1, 0x5579, &(0x7f0000005680)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)

519.030348ms ago: executing program 0 (id=723):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x40, 0xe, 0x1, ';'}, 0x0, 0x0, 0x0, 0x0})

320.953973ms ago: executing program 7 (id=724):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000840)={0x0, 0x4040, 0x0, 0x80000083, 0xfffbfbff, 0x6})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x2400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x1c, 0x4004084, 0x0, 0x0)

165.308077ms ago: executing program 7 (id=725):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0xfdef, &(0x7f0000000300)=ANY=[], 0x0)

112.802687ms ago: executing program 7 (id=726):
timer_settime(0x0, 0x1, 0x0, 0x0)
syz_usb_connect(0x2, 0x4e, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r0, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff)

0s ago: executing program 6 (id=727):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000b40)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000700)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000140)={@desc={0x1, 0x0, @auto="6916019b4cb6e6b1"}, 0x40, 0x0, '\x00', @a})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})

kernel console output (not intermixed with test programs):

(4520)
[   68.896520][ T4506] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   68.932836][ T4520] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   68.952355][ T4520] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   68.973586][ T4520] BTRFS info (device loop3): trying to use backup root at mount time
[   68.992408][ T4520] BTRFS info (device loop3): using free space tree
[   68.999540][ T4520] BTRFS info (device loop3): has skinny extents
[   69.124728][    T9] BTRFS warning (device loop3): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xb6f08ecb level 0
[   69.154930][ T4520] BTRFS warning (device loop3): couldn't read tree root
[   69.167195][ T4506] usb 5-1: Using ep0 maxpacket: 8
[   69.172984][ T4520] BTRFS info (device loop3): enabling ssd optimizations
[   69.196120][ T4520] BTRFS info (device loop3): clearing free space tree
[   69.210460][ T4520] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   69.226837][ T4520] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   69.272865][ T4520] BTRFS info (device loop3): creating free space tree
[   69.296592][ T4506] usb 5-1: config 0 has an invalid interface number: 168 but max is 0
[   69.308739][ T4520] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   69.315202][ T4506] usb 5-1: config 0 has no interface number 0
[   69.325326][ T4506] usb 5-1: config 0 interface 168 altsetting 248 bulk endpoint 0xD has invalid maxpacket 32
[   69.326418][ T4520] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   69.346667][ T4231] usb 2-1: USB disconnect, device number 2
[   69.350773][ T4506] usb 5-1: config 0 interface 168 has no altsetting 0
[   69.377801][ T4520] BTRFS info (device loop3): checking UUID tree
[   69.521711][ T4545] loop0: detected capacity change from 0 to 32768
[   69.528702][ T4506] usb 5-1: New USB device found, idVendor=0f0d, idProduct=0065, bcdDevice=37.ed
[   69.543654][ T4506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.552215][ T4506] usb 5-1: Product: syz
[   69.562366][ T4506] usb 5-1: Manufacturer: syz
[   69.572796][ T4506] usb 5-1: SerialNumber: syz
[   69.580197][ T4506] usb 5-1: config 0 descriptor??
[   69.638793][ T4515] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   69.806627][ T4260] gspca_sonixj: reg_w1 err -71
[   69.852436][ T4260] sonixj: probe of 3-1:0.0 failed with error -71
[   69.861515][ T4260] usb 3-1: USB disconnect, device number 3
[   69.948079][ T4506] usb 5-1: USB disconnect, device number 2
[   70.769369][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'.
[   70.836272][ T4596] loop4: detected capacity change from 0 to 64
[   71.043574][ T4603] 9pnet_virtio: no channels available for device syz
[   71.105772][ T4603] loop2: detected capacity change from 0 to 2048
[   71.169908][ T4178]  loop2: p1 p2 p3 p4
[   71.169908][ T4178]  p1: <minix: p5 p6 >
[   71.185203][ T4178] loop2: p1 size 67110656 extends beyond EOD, truncated
[   71.200401][ T4178] loop2: p3 size 134217728 extends beyond EOD, truncated
[   71.214025][ T4178] loop2: p4 size 4278190080 extends beyond EOD, truncated
[   71.223539][ T4178] loop2: p5 size 67110656 extends beyond EOD, truncated
[   71.234908][ T4178] loop2: p6 size 134217728 extends beyond EOD, truncated
[   71.272337][ T4603]  loop2: p1 p2 p3 p4
[   71.272337][ T4603]  p1: <minix: p5 p6 >
[   71.296697][ T4603] loop2: p1 size 67110656 extends beyond EOD, truncated
[   71.323369][ T4603] loop2: p3 size 134217728 extends beyond EOD, truncated
[   71.334789][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.334934][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.357957][ T4603] loop2: p4 size 4278190080 extends beyond EOD, truncated
[   71.369149][ T4603] loop2: p5 size 67110656 extends beyond EOD, truncated
[   71.382620][ T4603] loop2: p6 size 134217728 extends beyond EOD, truncated
[   71.852577][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   71.867332][ T4613] udevd[4613]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[   71.869777][ T4549] udevd[4549]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   71.892021][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   71.894597][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[   71.912310][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   72.010240][ T4549] udevd[4549]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   72.010630][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   72.022907][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   72.032953][ T4621] udevd[4621]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[   72.117437][  T153] attempt to access beyond end of device
[   72.117437][  T153] loop4: rw=1, want=162, limit=64
[   72.166610][  T153] Buffer I/O error on dev loop4, logical block 161, lost async page write
[   72.175355][  T153] attempt to access beyond end of device
[   72.175355][  T153] loop4: rw=1, want=163, limit=64
[   72.205847][  T153] Buffer I/O error on dev loop4, logical block 162, lost async page write
[   72.234286][  T153] attempt to access beyond end of device
[   72.234286][  T153] loop4: rw=1, want=164, limit=64
[   72.250142][ T4627] loop3: detected capacity change from 0 to 1024
[   72.260248][  T153] Buffer I/O error on dev loop4, logical block 163, lost async page write
[   72.274627][  T153] attempt to access beyond end of device
[   72.274627][  T153] loop4: rw=1, want=168, limit=64
[   72.285506][  T153] Buffer I/O error on dev loop4, logical block 167, lost async page write
[   72.305811][ T4627] EXT4-fs (loop3): Ignoring removed bh option
[   72.320082][ T4629] ip_tables: iptables: counters copy to user failed while replacing table
[   72.322711][  T153] attempt to access beyond end of device
[   72.322711][  T153] loop4: rw=1, want=170, limit=64
[   72.342531][  T153] Buffer I/O error on dev loop4, logical block 169, lost async page write
[   72.354250][  T153] attempt to access beyond end of device
[   72.354250][  T153] loop4: rw=1, want=172, limit=64
[   72.368980][  T153] Buffer I/O error on dev loop4, logical block 171, lost async page write
[   72.397330][ T4627] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none.
[   72.440395][  T153] attempt to access beyond end of device
[   72.440395][  T153] loop4: rw=1, want=173, limit=64
[   72.474584][ T4616] loop2: detected capacity change from 0 to 32768
[   72.495386][ T4616] (syz.2.106,4616,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   72.506991][  T153] Buffer I/O error on dev loop4, logical block 172, lost async page write
[   72.539044][ T4616] (syz.2.106,4616,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   72.572038][  T153] attempt to access beyond end of device
[   72.572038][  T153] loop4: rw=1, want=174, limit=64
[   72.595956][  T153] Buffer I/O error on dev loop4, logical block 173, lost async page write
[   72.626884][  T153] attempt to access beyond end of device
[   72.626884][  T153] loop4: rw=1, want=175, limit=64
[   72.659719][ T4616] JBD2: Ignoring recovery information on journal
[   72.714786][  T153] Buffer I/O error on dev loop4, logical block 174, lost async page write
[   72.768925][  T153] attempt to access beyond end of device
[   72.768925][  T153] loop4: rw=1, want=176, limit=64
[   72.812569][ T4627] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.111: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[   72.817922][  T153] Buffer I/O error on dev loop4, logical block 175, lost async page write
[   72.850765][ T4616] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   72.954331][ T4627] EXT4-fs (loop3): Remounting filesystem read-only
[   72.994051][ T4636] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.111: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[   73.076789][ T4641] loop1: detected capacity change from 0 to 2048
[   73.114526][ T4636] EXT4-fs (loop3): Remounting filesystem read-only
[   73.135038][ T4641] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   73.191374][ T4641] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[   73.210371][ T4193] EXT4-fs error (device loop3): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /16/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   73.220849][ T4641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   73.252969][ T4193] EXT4-fs (loop3): Remounting filesystem read-only
[   73.265259][ T4193] EXT4-fs error (device loop3): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /16/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   73.322791][ T4193] EXT4-fs (loop3): Remounting filesystem read-only
[   73.333346][ T4193] EXT4-fs error (device loop3): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   73.373986][ T4193] EXT4-fs (loop3): Remounting filesystem read-only
[   73.388679][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   73.417523][ T4193] EXT4-fs error (device loop3): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /16/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   73.449380][ T4193] EXT4-fs (loop3): Remounting filesystem read-only
[   73.456101][ T4193] EXT4-fs error (device loop3): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /16/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   73.475760][ T4616] syz.2.106 (4616) used greatest stack depth: 17872 bytes left
[   73.586138][ T4193] EXT4-fs (loop3): Remounting filesystem read-only
[   73.594568][ T4193] EXT4-fs error (device loop3): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[   73.623198][ T4193] EXT4-fs (loop3): Remounting filesystem read-only
[   73.641770][ T4649] syz.0.120 uses obsolete (PF_INET,SOCK_PACKET)
[   73.645021][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   73.655218][ T4190] ocfs2: Unmounting device (7,2) on (node local)
[   73.680068][ T4193] EXT4-fs error (device loop3): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /16/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   73.733373][ T4193] EXT4-fs (loop3): Remounting filesystem read-only
[   73.747448][ T4193] EXT4-fs error (device loop3): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /16/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[   73.798312][ T4193] EXT4-fs (loop3): Remounting filesystem read-only
[   73.818383][ T4655] Set syz1 is full, maxelem 1021 reached
[   73.828369][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   73.915112][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   73.939355][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   73.961070][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   74.027853][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   74.054162][ T4662] loop4: detected capacity change from 0 to 1024
[   74.088160][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   74.132545][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   74.163712][ T4193] EXT4-fs warning (device loop3): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[   74.388918][ T4662] EXT4-fs (loop4): Test dummy encryption mode enabled
[   74.395820][ T4662] EXT4-fs (loop4): Ignoring removed oldalloc option
[   74.497245][ T4662] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000000,abort,auto_da_alloc,oldalloc,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback.
[   74.700197][ T4666] loop2: detected capacity change from 0 to 40427
[   74.783804][ T4666] F2FS-fs (loop2): invalid crc value
[   74.860655][ T4666] F2FS-fs (loop2): Found nat_bits in checkpoint
[   74.909359][ T4682] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[   74.973156][ T4666] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   75.204079][ T4313] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.265029][ T4702] loop1: detected capacity change from 0 to 1024
[   75.353056][ T4707] loop4: detected capacity change from 0 to 1024
[   75.357933][ T4313] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.384120][ T4708] fuse: Bad value for 'fd'
[   75.389071][ T4702] EXT4-fs (loop1): Ignoring removed bh option
[   75.395215][ T4702] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   75.484864][ T4313] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.503732][ T4702] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,noblock_validity,nobarrier,journal_ioprio=0x0000000000000005,abort,bh,init_itable,,errors=continue. Quota mode: none.
[   75.628505][ T4313] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.819046][    T9] hfsplus: b-tree write err: -5, ino 8
[   76.188161][ T4715] chnl_net:caif_netlink_parms(): no params data found
[   76.592168][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.603022][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.611756][ T4715] device bridge_slave_0 entered promiscuous mode
[   76.620772][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.629766][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.638186][ T4754] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   76.638917][ T4715] device bridge_slave_1 entered promiscuous mode
[   76.776564][ T4260] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   76.857024][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.893949][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.905850][ T4761] loop2: detected capacity change from 0 to 2048
[   76.988486][ T4761] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   77.010200][ T4715] team0: Port device team_slave_0 added
[   77.038332][ T4260] usb 2-1: Using ep0 maxpacket: 32
[   77.045349][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop2
[   77.080716][ T4715] team0: Port device team_slave_1 added
[   77.176638][ T4774] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   77.176720][ T4260] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.245954][ T4260] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.270241][ T4761] NILFS error (device loop2): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[   77.286803][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.293813][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.339844][ T4761] Remounting filesystem read-only
[   77.345347][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.362785][ T4761] NILFS error (device loop2): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[   77.395846][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.412038][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.463378][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.476694][ T4260] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   77.488543][ T4260] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   77.517488][ T4260] usb 2-1: Product: syz
[   77.521700][ T4260] usb 2-1: Manufacturer: syz
[   77.593717][ T4260] hub 2-1:4.0: USB hub found
[   77.635219][ T4790] loop2: detected capacity change from 0 to 1024
[   77.658394][ T4715] device hsr_slave_0 entered promiscuous mode
[   77.671887][ T4715] device hsr_slave_1 entered promiscuous mode
[   77.711207][ T4790] hfsplus: invalid length 32517 has been corrected to 255
[   77.725565][ T4715] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.736624][ T4553] Bluetooth: hci3: command 0x0409 tx timeout
[   77.754788][ T4715] Cannot create hsr debugfs directory
[   77.836577][ T4260] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19)
[   77.854570][   T26] audit: type=1800 audit(1787168314.017:4): pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.157" name="file1" dev="loop2" ino=20 res=0 errno=0
[   77.948046][ T4790] hfsplus: b-tree write err: -5, ino 20
[   78.206269][ T1235] hfsplus: b-tree write err: -5, ino 20
[   78.226873][ T4553] usb 2-1: USB disconnect, device number 3
[   78.471836][ T4313] device hsr_slave_0 left promiscuous mode
[   78.507241][ T4313] device hsr_slave_1 left promiscuous mode
[   78.525162][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.567023][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.605614][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.686407][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.877208][ T4313] device bridge_slave_1 left promiscuous mode
[   78.885427][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.085096][ T4868] loop2: detected capacity change from 0 to 128
[   79.101354][ T4313] device bridge_slave_0 left promiscuous mode
[   79.121737][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.198223][ T4868] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   79.235113][ T4868] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   79.299441][ T4313] device veth1_macvtap left promiscuous mode
[   79.324209][ T4313] device veth0_macvtap left promiscuous mode
[   79.355449][ T4313] device veth1_vlan left promiscuous mode
[   79.375393][ T4313] device veth0_vlan left promiscuous mode
[   79.385984][ T4842] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   79.483687][ T4884] overlayfs: failed to clone upperpath
[   79.816535][ T4553] Bluetooth: hci3: command 0x041b tx timeout
[   79.919030][ T4313] team0 (unregistering): Port device team_slave_1 removed
[   79.966204][ T4313] team0 (unregistering): Port device team_slave_0 removed
[   79.997696][ T4313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.023133][ T4313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.175836][ T4313] bond0 (unregistering): Released all slaves
[   80.283772][ T4899] device batadv_slave_0 entered promiscuous mode
[   80.292840][ T4898] device batadv_slave_0 left promiscuous mode
[   80.345946][ T4715] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   80.360002][ T4901] loop2: detected capacity change from 0 to 512
[   80.374460][ T4715] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   80.406179][ T4901] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   80.438231][ T4715] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   80.462728][ T4901] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   80.517888][ T4715] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   80.577947][ T4913] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[   80.589861][ T4901] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.177: corrupted in-inode xattr
[   80.630355][ T4901] EXT4-fs (loop2): Remounting filesystem read-only
[   80.701881][ T4901] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.177: couldn't read orphan inode 15 (err -117)
[   80.705771][ T4920] loop1: detected capacity change from 0 to 128
[   80.747205][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   80.751057][ T4901] EXT4-fs (loop2): Remounting filesystem read-only
[   80.775030][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   80.784147][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.795218][ T4913] device bridge_slave_0 left promiscuous mode
[   80.799745][ T4901] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,mblk_io_submit,noblock_validity,sysvgroups,init_itable=0x0000000000000fff,. Quota mode: writeback.
[   80.803603][ T4913] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.875691][ T4920] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none.
[   80.906861][ T4920] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   80.932967][ T4913] device bridge_slave_1 left promiscuous mode
[   81.008671][ T4913] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.034187][ T4901] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.177: Logical block already allocated
[   81.071268][ T4901] EXT4-fs (loop2): Remounting filesystem read-only
[   81.078092][ T4913] bond0: (slave bond_slave_0): Releasing backup interface
[   81.161605][ T4913] bond0: (slave bond_slave_1): Releasing backup interface
[   81.205133][ T4935] netlink: 84 bytes leftover after parsing attributes in process `syz.1.185'.
[   81.379903][ T4913] team0: Port device team_slave_0 removed
[   81.469463][ T4913] team0: Port device team_slave_1 removed
[   81.502186][ T4913] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.543028][ T4913] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.571240][ T1326] cfg80211: failed to load regulatory.db
[   81.593089][ T4913] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.621246][ T4913] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.897287][    T7] Bluetooth: hci3: command 0x040f tx timeout
[   82.381783][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.630647][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.651540][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.662681][ T4978] loop2: detected capacity change from 0 to 512
[   82.715518][ T4715] 8021q: adding VLAN 0 to HW filter on device team0
[   82.937098][ T4978] FAT-fs (loop2): error, corrupted file size (i_pos 0, 8960)
[   82.945002][ T4978] FAT-fs (loop2): error, corrupted file size (i_pos 0, 8960)
[   82.994399][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   83.018897][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   83.067455][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.074559][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.216010][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   83.253919][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   83.283472][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   83.308380][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.315543][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.351118][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   83.366182][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   83.378537][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   83.408968][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.434031][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   83.472293][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   83.488937][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   83.525447][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   83.551890][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.573499][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   83.594773][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   83.626962][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.660865][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.700902][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   83.976905][ T4553] Bluetooth: hci3: command 0x0419 tx timeout
[   84.065783][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   84.083602][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   84.118242][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.545895][ T5044] process 'syz.0.213' launched '/dev/fd/4' with NULL argv: empty string added
[   84.560536][ T5045] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   84.664171][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.706939][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.802421][ T4715] device veth0_vlan entered promiscuous mode
[   84.842949][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.861766][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.898056][ T5056] fuse: Bad value for 'fd'
[   84.919694][ T4715] device veth1_vlan entered promiscuous mode
[   84.940143][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.959430][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.063887][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.091611][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.166706][ T4715] device veth0_macvtap entered promiscuous mode
[   85.200395][ T4715] device veth1_macvtap entered promiscuous mode
[   85.482721][ T5082] loop1: detected capacity change from 0 to 32768
[   85.514633][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.529970][ T4178] Dev loop1 SGI disklabel: csum bad, label corrupted
[   85.545459][ T5082] Dev loop1 SGI disklabel: csum bad, label corrupted
[   85.563769][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.584326][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.610574][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.630726][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.659418][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.695433][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.764598][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.809607][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.847181][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.878179][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.932374][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.976456][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.011699][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.032605][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.062226][ T4715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.081455][ T4715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.102976][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.118251][ T4715] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.133658][ T4715] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.146280][ T4715] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.172206][ T4715] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.222470][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.263400][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.493568][ T5119] loop2: detected capacity change from 0 to 7
[   86.513007][ T5119] Dev loop2: unable to read RDB block 7
[   86.523194][ T5119]  loop2: unable to read partition table
[   86.549327][ T5119] loop2: partition table beyond EOD, truncated
[   86.570876][ T5119] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[   86.592993][ T4856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.610260][ T5123] loop4: detected capacity change from 0 to 64
[   86.615831][ T4856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.629937][ T3559] Dev loop2: unable to read RDB block 7
[   86.636213][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.650051][ T3559]  loop2: unable to read partition table
[   86.669213][ T3559] loop2: partition table beyond EOD, truncated
[   86.719736][ T4842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.759447][ T4842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.807385][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.831923][ T5123] handle_bad_sector: 108 callbacks suppressed
[   86.831942][ T5123] attempt to access beyond end of device
[   86.831942][ T5123] loop4: rw=0, want=45068, limit=64
[   86.922882][ T5123] buffer_io_error: 94 callbacks suppressed
[   86.922897][ T5123] Buffer I/O error on dev loop4, logical block 22533, async page read
[   87.023376][ T5123] attempt to access beyond end of device
[   87.023376][ T5123] loop4: rw=0, want=45068, limit=64
[   87.075431][ T5123] Buffer I/O error on dev loop4, logical block 22533, async page read
[   87.139874][ T5130] attempt to access beyond end of device
[   87.139874][ T5130] loop4: rw=0, want=45068, limit=64
[   87.215895][ T5130] Buffer I/O error on dev loop4, logical block 22533, async page read
[   87.231901][ T5139] Zero length message leads to an empty skb
[   87.479621][ T5157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'.
[   87.549477][ T5126] loop1: detected capacity change from 0 to 32768
[   87.602049][ T5126] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.238 (5126)
[   87.653710][ T5126] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   87.679748][ T5126] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   87.704097][ T5126] BTRFS info (device loop1): use zstd compression, level 3
[   87.726002][ T5126] BTRFS info (device loop1): using free space tree
[   87.750461][ T5126] BTRFS info (device loop1): has skinny extents
[   87.833480][ T5126] BTRFS info (device loop1): enabling ssd optimizations
[   87.924009][ T5192] loop2: detected capacity change from 0 to 4096
[   87.926943][   T26] audit: type=1800 audit(1787168324.097:5): pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.238" name="bus" dev="loop1" ino=263 res=0 errno=0
[   88.583410][ T5153] loop4: detected capacity change from 0 to 40427
[   88.695208][ T5153] F2FS-fs (loop4): invalid crc value
[   88.732131][ T5153] F2FS-fs (loop4): Found nat_bits in checkpoint
[   88.866926][ T5153] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   88.995520][ T5226] loop2: detected capacity change from 0 to 1024
[   89.072396][ T5226] EXT4-fs (loop2): Ignoring removed bh option
[   89.089043][ T5226] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   89.194916][ T5226] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none.
[   89.321550][ T5241] loop1: detected capacity change from 0 to 128
[   89.388429][ T5241] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5
[   89.388429][ T5241] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   89.388429][ T5241] 
[   89.485552][ T5241] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouser_xattr,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[   89.506647][ T5241] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   89.890542][ T5266] netlink: 'syz.1.269': attribute type 1 has an invalid length.
[   90.032891][ T5266] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.077638][ T5273] device bond1 entered promiscuous mode
[   90.337689][ T5286] loop5: detected capacity change from 0 to 2048
[   90.472360][ T5286] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[   90.510402][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop5
[   90.519376][ T5286] NILFS (loop5): mounting unchecked fs
[   90.597162][ T5301] netlink: 'syz.2.280': attribute type 2 has an invalid length.
[   90.603830][ T5286] NILFS (loop5): recovery complete
[   90.664389][ T5301] netlink: 'syz.2.280': attribute type 2 has an invalid length.
[   90.672963][ T5304] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   90.697493][ T5301] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.280'.
[   90.773142][ T5306] netlink: 'syz.1.281': attribute type 10 has an invalid length.
[   90.814381][ T5306] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.821837][ T5306] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.831272][ T5281] loop4: detected capacity change from 0 to 32768
[   90.955537][ T5306] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.962727][ T5306] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.972165][ T5306] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.979420][ T5306] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.997214][ T5306] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   91.025711][ T5281] XFS (loop4): Mounting V5 Filesystem
[   91.043038][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'.
[   91.113079][ T5312] device bridge_slave_1 left promiscuous mode
[   91.147572][ T4847] bond0: (slave bridge0): interface is now down
[   91.159992][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.205928][ T5312] device bridge_slave_0 left promiscuous mode
[   91.215948][ T5281] XFS (loop4): Ending clean mount
[   91.257276][ T5312] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.267087][ T4847] bond0: (slave bridge0): interface is now down
[   91.357329][ T5312] bond0: (slave bridge0): Releasing backup interface
[   91.473723][ T5338] netlink: 12 bytes leftover after parsing attributes in process `syz.5.287'.
[   91.555032][ T5338] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.627106][ T4200] XFS (loop4): Unmounting Filesystem
[   92.190242][ T5370] fuse: Bad value for 'fd'
[   92.296636][ T4195] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   92.706758][ T4195] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.729556][ T4195] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.761585][ T4195] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   92.797669][ T4195] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   92.828590][ T4195] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.849863][ T5397] loop2: detected capacity change from 0 to 8192
[   92.863736][ T4195] usb 6-1: config 0 descriptor??
[   92.914968][ T5397]  loop2: p1 p2 p3 p4[EZD]
[   92.950320][ T5397] loop2: partition table partially beyond EOD, truncated
[   92.966782][ T5397] loop2: p1 start 16384 is beyond EOD, truncated
[   92.986461][ T5397] loop2: p2 size 150994944 extends beyond EOD, truncated
[   93.018589][ T5397] loop2: p3 start 67108864 is beyond EOD, truncated
[   93.034865][ T5412] overlayfs: failed to clone upperpath
[   93.046382][ T5397] loop2: p4 size 33555584 extends beyond EOD, truncated
[   93.069406][ T5393] loop4: detected capacity change from 0 to 32768
[   93.220018][ T5393] XFS (loop4): Mounting V5 Filesystem
[   93.420697][ T4195] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   93.455778][ T4549] udevd[4549]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   93.464300][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[   93.500634][ T5393] XFS (loop4): Ending clean mount
[   93.545739][ T5443] loop1: detected capacity change from 0 to 128
[   93.556958][ T4195] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[   93.663176][ T5443] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   93.737712][ T4200] XFS (loop4): Unmounting Filesystem
[   93.753957][ T5443] hpfs: filesystem error: improperly stopped
[   93.786448][ T4260] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   93.797014][ T5443] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   93.854320][ T5443] hpfs: You really don't want any checks? You are crazy...
[   93.873391][ T5443] hpfs: hpfs_map_sector(): read error
[   93.906549][ T5443] hpfs: code page support is disabled
[   93.944424][ T5443] hpfs: hpfs_map_4sectors(): unaligned read
[   93.971806][ T5443] hpfs: hpfs_map_4sectors(): unaligned read
[   93.990738][ T5443] hpfs: filesystem error: unable to find root dir
[   94.057495][ T4260] usb 3-1: Using ep0 maxpacket: 8
[   94.353325][ T5468] program syz.1.322 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   94.368240][ T4260] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[   94.387143][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.410822][ T4260] usb 3-1: Product: syz
[   94.415577][ T4260] usb 3-1: Manufacturer: syz
[   94.426469][ T4260] usb 3-1: SerialNumber: syz
[   94.487732][ T4260] usb 3-1: config 0 descriptor??
[   94.549086][ T4260] gspca_main: sq930x-2.14.0 probing 2770:930c
[   94.758700][ T5487] loop4: detected capacity change from 0 to 2048
[   94.852752][ T5487] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   94.883787][ T5487] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.234124][ T5509] xt_hashlimit: overflow, try lower: 0/0
[   95.775308][    T7] usb 6-1: USB disconnect, device number 2
[   95.926675][   T26] audit: type=1800 audit(1787168332.087:6): pid=5552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.338" name="power" dev="configfs" ino=36483 res=0 errno=0
[   95.926865][ T4260] gspca_sq930x: reg_w 0105 0c00 failed -71
[   96.223777][ T4260] gspca_sq930x: Sensor ov9630 not yet treated
[   96.237193][ T4260] sq930x: probe of 3-1:0.0 failed with error -22
[   96.306648][ T4260] usb 3-1: USB disconnect, device number 4
[   96.431198][ T5575] gadgetfs: bound to dummy_udc driver
[   96.807234][ T5589] "syz.2.350" (5589) uses obsolete ecb(arc4) skcipher
[   97.306442][    T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   97.376503][ T4260] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   97.506325][    C1] sched: RT throttling activated
[   97.556783][    T7] usb 2-1: Using ep0 maxpacket: 32
[   97.707027][    T7] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[   97.726538][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.772114][ T4260] usb 3-1: not running at top speed; connect to a high speed hub
[   97.794429][    T7] usb 2-1: config 0 descriptor??
[   97.866715][ T4260] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   97.880030][    T7] gspca_main: sunplus-2.14.0 probing 041e:400b
[   97.892938][ T4260] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00
[   97.913288][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.973717][ T4260] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected
[   98.002426][ T4260] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[   98.179092][ T4260] usb 3-1: USB disconnect, device number 5
[   98.220182][ T4260] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[   98.230257][ T4260] garmin_gps 3-1:1.0: device disconnected
[   98.275712][ T5634] loop4: detected capacity change from 0 to 256
[   98.342502][ T5634] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   98.580227][ T5642] loop5: detected capacity change from 0 to 1024
[   98.636181][ T5646] loop4: detected capacity change from 0 to 1024
[   98.670647][ T5642] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,nobarrier,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,init_itable=0x0000000000000006,,errors=continue. Quota mode: none.
[   98.697508][ T5642] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.770636][   T26] audit: type=1800 audit(1787168334.937:7): pid=5642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.372" name="file1" dev="loop5" ino=15 res=0 errno=0
[   98.773089][ T5642] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: comm syz.5.372: lblock 0 mapped to illegal pblock 0 (length 1)
[   98.858706][   T26] audit: type=1800 audit(1787168335.027:8): pid=5642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.372" name="file1" dev="loop5" ino=15 res=0 errno=0
[   98.883583][ T5642] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.372: lblock 0 mapped to illegal pblock 0 (length 1)
[   98.914706][ T5642] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.372: lblock 0 mapped to illegal pblock 0 (length 1)
[   98.931940][ T5642] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.372: lblock 0 mapped to illegal pblock 0 (length 1)
[   98.963437][ T5641] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.372: lblock 0 mapped to illegal pblock 0 (length 1)
[   98.980917][ T5641] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.372: lblock 0 mapped to illegal pblock 0 (length 1)
[   99.007513][ T5654] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.372: lblock 0 mapped to illegal pblock 0 (length 1)
[   99.024021][ T5654] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.372: lblock 0 mapped to illegal pblock 0 (length 1)
[   99.049106][ T5642] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.372: lblock 0 mapped to illegal pblock 0 (length 1)
[   99.074049][ T5642] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.372: lblock 0 mapped to illegal pblock 0 (length 1)
[   99.164177][   T26] audit: type=1326 audit(1787168335.327:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5659 comm="syz.2.378" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf80d090d9 code=0x0
[   99.202101][    T7] gspca_sunplus: reg_w_riv err -71
[   99.208120][    T7] sunplus: probe of 2-1:0.0 failed with error -71
[   99.247070][    T7] usb 2-1: USB disconnect, device number 4
[   99.419756][ T4200] hfsplus: bad catalog entry type
[   99.944247][ T5686] loop5: detected capacity change from 0 to 1024
[   99.991722][ T5688] loop2: detected capacity change from 0 to 512
[  100.016746][ T5686] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5
[  100.016746][ T5686] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  100.016746][ T5686] 
[  100.056165][ T5686] EXT4-fs (loop5): Ignoring removed bh option
[  100.141668][ T4552] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  100.157512][ T5686] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,noacl,lazytime,minixdf,stripe=0x0000000000000005,bh,init_itable,,errors=continue. Quota mode: none.
[  100.185377][ T5688] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,noquota,nouid32,,errors=continue. Quota mode: writeback.
[  100.216581][ T5688] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  100.346252][ T5689] chnl_net:caif_netlink_parms(): no params data found
[  100.385550][ T4715] EXT4-fs error (device loop5): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /25/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  100.416142][ T4715] EXT4-fs error (device loop5): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /25/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  100.454801][ T4715] EXT4-fs error (device loop5): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  100.478919][ T4715] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  100.482373][ T4552] usb 2-1: Using ep0 maxpacket: 8
[  100.494080][ T4715] EXT4-fs error (device loop5): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /25/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  100.522558][ T4715] EXT4-fs error (device loop5): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /25/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  100.553210][ T5689] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.560536][ T5689] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.570551][ T5689] device bridge_slave_0 entered promiscuous mode
[  100.576156][ T4715] EXT4-fs error (device loop5): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  100.583911][ T5689] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.604752][ T5689] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.632052][ T4715] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  100.638192][ T5689] device bridge_slave_1 entered promiscuous mode
[  100.653747][ T4715] EXT4-fs error (device loop5): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /25/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  100.683558][ T4552] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  100.695098][ T4552] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  100.704353][ T4552] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.713672][ T4715] EXT4-fs error (device loop5): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /25/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  100.720957][ T4552] usb 2-1: config 0 descriptor??
[  100.757148][ T5689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.770322][ T5689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.810115][ T4552] gspca_main: vc032x-2.14.0 probing 046d:0892
[  100.830937][ T4715] EXT4-fs error (device loop5): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  100.870274][ T5689] team0: Port device team_slave_0 added
[  100.879756][ T5689] team0: Port device team_slave_1 added
[  100.890026][ T4715] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  100.936570][ T4715] EXT4-fs error (device loop5): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /25/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  100.971655][ T5689] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.971674][ T5689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.971697][ T5689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.973336][ T5689] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.973348][ T5689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.973371][ T5689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.977253][ T4715] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  100.978686][ T4715] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  100.979963][ T4715] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  100.983819][ T4715] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  100.985114][ T4715] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  100.987467][ T4715] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  100.995473][ T4715] EXT4-fs warning (device loop5): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  101.047228][ T5689] device hsr_slave_0 entered promiscuous mode
[  101.271499][ T5689] device hsr_slave_1 entered promiscuous mode
[  101.300779][ T5689] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.321275][ T5689] Cannot create hsr debugfs directory
[  101.539805][ T5739] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  101.742311][ T5689] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  101.823783][ T5689] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  101.837230][ T5689] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  101.854012][ T5689] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  101.945057][ T4847] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.072148][ T4847] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.087129][ T4552] gspca_vc032x: reg_w err -71
[  102.092323][ T4552] vc032x: probe of 2-1:0.0 failed with error -71
[  102.142941][ T4847] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.146606][ T4552] usb 2-1: USB disconnect, device number 5
[  102.178325][ T4553] Bluetooth: hci4: command 0x0409 tx timeout
[  102.254885][ T5689] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.296262][ T4847] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.357989][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  102.366566][ T4553] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  102.387496][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  102.398049][ T5689] 8021q: adding VLAN 0 to HW filter on device team0
[  102.456437][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  102.478847][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.495200][ T4856] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.502411][ T4856] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.512627][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.550490][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  102.560793][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.571854][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.578993][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.597662][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  102.608001][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  102.623992][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  102.643656][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  102.735189][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  102.767767][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.790679][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.807347][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  102.826688][ T4553] usb 3-1: unable to get BOS descriptor or descriptor too short
[  102.835701][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.892828][ T5689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  102.904656][ T5689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  102.926984][ T4553] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7
[  102.948546][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  102.967639][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  102.975814][ T4553] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  103.276731][ T4553] usb 3-1: string descriptor 0 read error: -22
[  103.283135][ T4553] usb 3-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40
[  103.299673][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  103.319063][ T4553] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.321078][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  103.378079][ T5751] chnl_net:caif_netlink_parms(): no params data found
[  103.402128][ T4553] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  103.434448][ T5689] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.613889][ T4553] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  103.615423][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.706761][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.756929][ T5751] device bridge_slave_0 entered promiscuous mode
[  103.796012][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.844276][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.853296][ T4553] usb 3-1: USB disconnect, device number 6
[  103.854995][ T5751] device bridge_slave_1 entered promiscuous mode
[  104.027772][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.037563][ T4505] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  104.052786][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.096584][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  104.105723][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  104.135454][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  104.149275][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  104.159948][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  104.168879][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  104.207728][ T4552] Bluetooth: hci4: command 0x041b tx timeout
[  104.222416][ T5751] team0: Port device team_slave_0 added
[  104.240902][ T5689] device veth0_vlan entered promiscuous mode
[  104.276580][ T4505] usb 2-1: Using ep0 maxpacket: 32
[  104.292639][ T5751] team0: Port device team_slave_1 added
[  104.313325][ T5689] device veth1_vlan entered promiscuous mode
[  104.396728][ T4505] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  104.415144][ T4505] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  104.430321][ T4847] device hsr_slave_0 left promiscuous mode
[  104.435654][ T4505] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  104.450592][ T4847] device hsr_slave_1 left promiscuous mode
[  104.462323][ T4505] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  104.486176][ T4847] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.498291][ T4505] usb 2-1: config 0 interface 0 has no altsetting 0
[  104.509832][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.526926][ T5214] Bluetooth: hci3: command 0x0409 tx timeout
[  104.567183][ T4847] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.574883][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.600637][ T4847] device bridge_slave_1 left promiscuous mode
[  104.611053][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.635171][ T4847] device bridge_slave_0 left promiscuous mode
[  104.653600][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.656808][ T4505] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  104.686001][ T4847] device veth1_macvtap left promiscuous mode
[  104.693489][ T4505] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  104.702093][ T4847] device veth0_macvtap left promiscuous mode
[  104.726884][ T4847] device veth1_vlan left promiscuous mode
[  104.737289][ T4847] device veth0_vlan left promiscuous mode
[  104.743808][ T4505] usb 2-1: Product: syz
[  104.754841][ T4505] usb 2-1: Manufacturer: syz
[  104.763932][ T4505] usb 2-1: SerialNumber: syz
[  104.807190][ T4505] usb 2-1: config 0 descriptor??
[  104.849004][ T4505] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  104.875938][ T4505] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  104.949268][ T5800] loop2: detected capacity change from 0 to 32768
[  104.985203][ T5800] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.416 (5800)
[  105.046547][ T5800] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  105.061392][ T4847] bond1 (unregistering): Released all slaves
[  105.065046][ T5800] BTRFS info (device loop2): using free space tree
[  105.089501][ T5800] BTRFS info (device loop2): has skinny extents
[  105.156546][ T4229] usb 2-1: USB disconnect, device number 6
[  105.168584][    C1] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  105.175747][ T5790] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  105.185814][ T4229] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  105.355736][ T5800] BTRFS info (device loop2): enabling ssd optimizations
[  105.365566][ T4847] team0 (unregistering): Port device team_slave_1 removed
[  105.414475][ T4847] team0 (unregistering): Port device team_slave_0 removed
[  105.433492][ T4847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.504589][ T4847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.024208][ T4847] bond0 (unregistering): Released all slaves
[  106.093348][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.101907][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.156972][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.182162][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  106.197176][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  106.232584][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.251643][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.291219][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.302494][ T4195] Bluetooth: hci4: command 0x040f tx timeout
[  106.351797][ T5751] device hsr_slave_0 entered promiscuous mode
[  106.359800][ T5751] device hsr_slave_1 entered promiscuous mode
[  106.367049][ T5751] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  106.376753][ T5751] Cannot create hsr debugfs directory
[  106.478906][ T5862] loop2: detected capacity change from 0 to 32768
[  106.506661][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  106.552312][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  106.579110][ T5862] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  106.606621][ T4552] Bluetooth: hci3: command 0x041b tx timeout
[  106.638191][ T5689] device veth0_macvtap entered promiscuous mode
[  106.665205][   T26] audit: type=1800 audit(1787168342.827:10): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.426" name="bus" dev="loop2" ino=17058 res=0 errno=0
[  106.675077][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  106.758064][ T5689] device veth1_macvtap entered promiscuous mode
[  106.792958][ T4190] ocfs2: Unmounting device (7,2) on (node local)
[  106.859756][ T5689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.909549][ T5689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.920403][ T5689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.946726][ T5689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.969961][ T5689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.993341][ T5689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.018289][ T5689] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.031482][ T5876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.429'.
[  107.071162][ T5876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.429'.
[  107.103313][ T5876] device erspan0 entered promiscuous mode
[  107.129159][ T5876] device gretap0 entered promiscuous mode
[  107.169072][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  107.191493][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  107.219359][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  107.252327][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  107.292068][ T5689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.341098][ T5689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.351287][ T5689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.362532][ T5689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.375307][ T5689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  107.387839][ T5689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.405341][ T5689] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.428496][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  107.437936][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  107.457375][ T5689] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.473798][ T5689] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.492021][ T5689] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.508006][ T5689] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.546089][ T5751] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  107.565791][ T5751] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  107.579993][ T5751] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  107.614290][ T5751] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  107.646669][ T5214] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  107.821588][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.856994][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.887501][ T5214] usb 2-1: Using ep0 maxpacket: 16
[  107.913291][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  107.963415][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.984255][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.006476][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.019846][ T5214] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  108.033899][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  108.040281][ T5214] usb 2-1: config 0 has no interface number 0
[  108.073260][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  108.097843][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  108.111838][ T5751] 8021q: adding VLAN 0 to HW filter on device team0
[  108.140689][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  108.188227][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  108.206603][ T5214] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  108.223701][ T5214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.248819][ T4842] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.256022][ T4842] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.273227][ T5214] usb 2-1: Product: syz
[  108.278216][ T5214] usb 2-1: Manufacturer: syz
[  108.282832][ T5214] usb 2-1: SerialNumber: syz
[  108.291007][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  108.312292][ T5214] usb 2-1: config 0 descriptor??
[  108.321352][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  108.347870][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  108.363634][ T4842] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.370939][ T4842] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.376506][ T4553] Bluetooth: hci4: command 0x0419 tx timeout
[  108.380918][ T5214] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  108.420375][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  108.449304][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  108.476582][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  108.484967][ T4195] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  108.503937][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  108.536525][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  108.553805][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  108.563598][ T4553] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  108.573727][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  108.583428][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  108.609090][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  108.657768][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  108.675387][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  108.686852][ T4229] Bluetooth: hci3: command 0x040f tx timeout
[  108.707199][ T5751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  108.775217][ T4195] usb 7-1: Using ep0 maxpacket: 32
[  108.917247][ T4195] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  108.945894][ T4195] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  108.958230][ T4553] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  108.981301][ T4195] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 234, changing to 11
[  108.993422][ T4553] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  109.010862][ T4553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.025491][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  109.026814][ T4195] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9531, setting to 1024
[  109.045988][ T4195] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  109.063180][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  109.071052][ T4195] usb 7-1: config 0 interface 0 has no altsetting 0
[  109.084177][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.108866][ T4553] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected
[  109.124651][ T4553] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81
[  109.143144][ T4553] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1
[  109.162129][ T4553] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84
[  109.178195][ T4553] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2
[  109.201416][ T4553] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  109.226005][ T4553] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88
[  109.240914][ T4553] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6
[  109.249398][ T4195] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  109.263774][ T4195] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  109.281210][ T4553] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  109.295235][ T4195] usb 7-1: Product: syz
[  109.309417][ T4195] usb 7-1: Manufacturer: syz
[  109.368148][ T4195] usb 7-1: SerialNumber: syz
[  109.420274][ T4195] usb 7-1: config 0 descriptor??
[  109.462624][ T5919] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  109.491211][ T4195] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  109.533189][ T4195] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  109.667135][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  109.682690][ T5214] gspca_spca1528: reg_w err -71
[  109.688455][ T5214] spca1528: probe of 2-1:0.1 failed with error -71
[  109.705498][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  109.715615][ T5919] loop6: detected capacity change from 0 to 128
[  109.721314][ T5214] usb 2-1: USB disconnect, device number 7
[  109.793612][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  109.814186][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  109.856220][ T4229] usb 3-1: USB disconnect, device number 7
[  109.867228][ T5919] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  109.879613][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  109.914507][ T5919] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  109.928098][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  109.947628][ T5751] device veth0_vlan entered promiscuous mode
[  109.961450][ T4229] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  110.001737][ T5751] device veth1_vlan entered promiscuous mode
[  110.029281][ T4552] kernel write not supported for file /ldusb0 (pid: 4552 comm: kworker/0:13)
[  110.050661][ T4229] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  110.094539][ T4229] keyspan 3-1:1.0: device disconnected
[  110.138523][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  110.170783][ T4195] usb 7-1: USB disconnect, device number 2
[  110.181145][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  110.197273][ T4195] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  110.220609][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  110.253356][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  110.294485][ T5751] device veth0_macvtap entered promiscuous mode
[  110.308748][ T5751] device veth1_macvtap entered promiscuous mode
[  110.316772][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  110.324955][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  110.373643][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.414912][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.445435][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.481626][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.519411][ T5983] fuse: Bad value for 'fd'
[  110.523978][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.564393][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.595030][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.639648][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.671904][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.723689][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  110.765918][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  110.785523][ T4195] Bluetooth: hci3: command 0x0419 tx timeout
[  110.808622][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.827121][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.845587][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.858693][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.883665][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.898166][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.915631][ T5751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.930037][ T5997] raw_sendmsg: syz.6.451 forgot to set AF_INET. Fix it!
[  110.941766][ T5751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.957385][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.986202][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  111.004036][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  111.039056][ T5751] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.062879][ T5751] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.086914][ T5751] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.117584][ T5751] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.378795][ T4842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.406534][ T4842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.467637][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  111.506786][ T4840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.507508][ T5988] loop1: detected capacity change from 0 to 32768
[  111.530001][ T4840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.553561][ T6012] loop6: detected capacity change from 0 to 1024
[  111.600489][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  111.635511][ T6012] EXT4-fs (loop6): Ignoring removed nobh option
[  111.666442][ T6012] EXT4-fs (loop6): Ignoring removed bh option
[  111.712450][ T5988] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  111.804866][ T6012] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000011,bh,init_itable,. Quota mode: none.
[  112.048564][ T4187] ocfs2: Unmounting device (7,1) on (node local)
[  112.273338][ T6018] loop2: detected capacity change from 0 to 32768
[  112.450902][ T6018] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  112.480302][ T6043] loop1: detected capacity change from 0 to 128
[  112.486600][ T5217] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  112.597317][ T4190] ocfs2: Unmounting device (7,2) on (node local)
[  112.714365][ T6057] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  112.714365][ T6057] The task syz.0.462 (6057) triggered the difference, watch for misbehavior.
[  112.846864][ T5217] usb 8-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice= 0.00
[  112.856224][ T5217] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.972495][ T5217] ums-sddr55 8-1:1.0: USB Mass Storage device detected
[  112.993874][ T6071] loop1: detected capacity change from 0 to 1024
[  113.042012][ T5217] ums-sddr55 8-1:1.0: Quirks match for vid 07c4 pid a103: 8
[  113.056791][ T5217] ums-sddr55 8-1:1.0: This device (07c4,a103,0000 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  113.056791][ T5217]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  113.112732][ T5217] scsi host1: usb-storage 8-1:1.0
[  113.268070][ T6071] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none.
[  113.285262][ T4552] usb 8-1: USB disconnect, device number 2
[  113.368932][ T6067] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.1.465: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1
[  113.400352][ T6067] EXT4-fs (loop1): Remounting filesystem read-only
[  113.415388][ T6067] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem
[  113.432089][ T6067] EXT4-fs (loop1): Remounting filesystem read-only
[  113.547730][ T6095] loop2: detected capacity change from 0 to 2048
[  113.695415][ T6095] NILFS (loop2): invalid segment: Magic number mismatch
[  113.706787][ T6095] NILFS (loop2): trying rollback from an earlier position
[  113.736606][ T6095] NILFS (loop2): recovery complete
[  113.759891][ T6111] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  113.798893][ T6113] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  114.100725][ T6127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.482'.
[  114.243709][ T6134] loop1: detected capacity change from 0 to 512
[  114.337748][   T26] audit: type=1326 audit(1787168350.507:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.2.483" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf80d090d9 code=0x0
[  114.394466][ T6134] EXT4-fs (loop1): bad s_min_extra_isize: 65535
[  114.468202][ T6147] loop6: detected capacity change from 0 to 128
[  114.548430][ T6147] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  114.576814][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'.
[  114.591985][ T6147] System zones: 1-3, 19-19, 35-36
[  114.620659][ T6147] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback.
[  114.638690][ T6147] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  114.710651][ T6147] EXT4-fs warning (device loop6): verify_group_input:147: Cannot add at group 1718812675 (only 1 groups)
[  114.907484][    T9] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.985206][ T6172] capability: warning: `syz.0.495' uses 32-bit capabilities (legacy support in use)
[  115.012792][    T9] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.133386][    T9] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.137425][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.496'.
[  115.360751][ T4195] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  115.371124][    T9] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.438483][ T4195] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  115.526563][ T5217] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  115.630645][ T6203] loop6: detected capacity change from 0 to 128
[  115.796459][ T5217] usb 3-1: Using ep0 maxpacket: 8
[  115.868616][ T6203] attempt to access beyond end of device
[  115.868616][ T6203] loop6: rw=2049, want=250, limit=128
[  115.909394][ T6210] attempt to access beyond end of device
[  115.909394][ T6210] loop6: rw=2049, want=140, limit=128
[  115.917080][ T5217] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.941378][ T6210] Buffer I/O error on dev loop6, logical block 69, lost async page write
[  115.984343][ T5217] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  116.004739][ T6203] attempt to access beyond end of device
[  116.004739][ T6203] loop6: rw=2049, want=144, limit=128
[  116.063472][ T5217] usb 3-1: config 0 interface 0 has no altsetting 0
[  116.081708][ T6197] chnl_net:caif_netlink_parms(): no params data found
[  116.109622][ T6203] Buffer I/O error on dev loop6, logical block 71, lost async page write
[  116.119523][ T5217] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  116.120334][ T6203] attempt to access beyond end of device
[  116.120334][ T6203] loop6: rw=2049, want=146, limit=128
[  116.165699][ T6203] Buffer I/O error on dev loop6, logical block 72, lost async page write
[  116.183507][ T5217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.199944][ T6203] attempt to access beyond end of device
[  116.199944][ T6203] loop6: rw=2049, want=148, limit=128
[  116.211731][ T6203] Buffer I/O error on dev loop6, logical block 73, lost async page write
[  116.239105][ T5217] usb 3-1: config 0 descriptor??
[  116.290492][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.317085][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.341103][ T6197] device bridge_slave_0 entered promiscuous mode
[  116.366922][ T6197] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.374267][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.382637][ T6197] device bridge_slave_1 entered promiscuous mode
[  116.468388][ T6197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.497083][ T6197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.571878][ T6197] team0: Port device team_slave_0 added
[  116.592521][ T6197] team0: Port device team_slave_1 added
[  116.640282][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.658337][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.693871][ T6197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.719726][ T5217] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0
[  116.723799][ T6197] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.734817][ T6197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.762943][ T5217] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0
[  116.764035][ T6197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.786539][ T5217] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0
[  116.803952][ T5217] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0
[  116.811366][ T5217] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0
[  116.825491][ T5217] petalynx 0003:18B1:0037.0003: unknown main item tag 0x0
[  116.834416][ T5217] petalynx 0003:18B1:0037.0003: unbalanced collection at end of report description
[  116.859649][ T5217] petalynx 0003:18B1:0037.0003: parse failed
[  116.865719][ T5217] petalynx: probe of 0003:18B1:0037.0003 failed with error -22
[  116.904202][ T6237] fuse: Bad value for 'fd'
[  116.949288][ T4552] usb 3-1: USB disconnect, device number 8
[  117.046555][ T5217] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  117.061386][ T6197] device hsr_slave_0 entered promiscuous mode
[  117.114407][ T6197] device hsr_slave_1 entered promiscuous mode
[  117.130973][ T6197] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  117.157018][ T6197] Cannot create hsr debugfs directory
[  117.407830][ T5217] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  117.426505][ T5217] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  117.440035][ T5217] usb 2-1: config 0 interface 0 has no altsetting 0
[  117.448331][ T5217] usb 2-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00
[  117.467468][ T5217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.485348][ T5217] usb 2-1: config 0 descriptor??
[  117.583463][ T4195] Bluetooth: hci3: command 0x0409 tx timeout
[  117.655851][ T6274] netlink: 'syz.2.522': attribute type 8 has an invalid length.
[  117.724957][    T9] device hsr_slave_0 left promiscuous mode
[  117.737568][    T9] device hsr_slave_1 left promiscuous mode
[  117.784306][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.802896][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.817998][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.825606][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.836468][    T9] device bridge_slave_1 left promiscuous mode
[  117.842893][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.854708][    T9] device bridge_slave_0 left promiscuous mode
[  117.861369][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.874919][    T9] device veth1_macvtap left promiscuous mode
[  117.881285][    T9] device veth0_macvtap left promiscuous mode
[  117.887563][    T9] device veth1_vlan left promiscuous mode
[  117.893535][    T9] device veth0_vlan left promiscuous mode
[  117.991949][ T5217] input: HID 04b3:3108 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04B3:3108.0004/input/input6
[  118.090358][ T5217] lenovo 0003:04B3:3108.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04b3:3108] on usb-dummy_hcd.1-1/input0
[  118.140022][    T9] team0 (unregistering): Port device team_slave_1 removed
[  118.193266][ T4195] usb 2-1: USB disconnect, device number 8
[  118.249242][    T9] team0 (unregistering): Port device team_slave_0 removed
[  118.262279][ T6283] fido_id[6283]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  118.299326][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.319877][ T6287] overlayfs: failed to clone upperpath
[  118.342338][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.493348][    T9] bond0 (unregistering): Released all slaves
[  118.832990][ T6306] loop1: detected capacity change from 0 to 64
[  118.968987][ T6302] loop2: detected capacity change from 0 to 4096
[  119.056152][ T6302] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  119.103018][ T4187] hfs: node 4:3 still has 1 user(s)!
[  119.241719][ T6302] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  119.277161][ T6197] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  119.359477][ T6197] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  119.438419][ T6197] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  119.483329][ T6197] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  119.588657][ T6338] loop6: detected capacity change from 0 to 512
[  119.639819][ T4190] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22.
[  119.646449][ T4507] Bluetooth: hci3: command 0x041b tx timeout
[  119.672190][ T6338] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled
[  119.692402][ T4190] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22.
[  119.754928][ T6338] EXT4-fs (loop6): orphan cleanup on readonly fs
[  119.777047][ T6338] EXT4-fs warning (device loop6): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  119.884425][ T6338] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  119.894571][ T6197] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.907766][ T6338] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.547: bad orphan inode 768
[  119.972192][ T6338] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,noauto_da_alloc,delalloc,,errors=continue. Quota mode: writeback.
[  119.996512][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  120.035765][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  120.057691][ T6197] 8021q: adding VLAN 0 to HW filter on device team0
[  120.078797][ T6349] loop2: detected capacity change from 0 to 2048
[  120.127455][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  120.147758][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  120.195238][ T4852] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.202418][ T4852] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.212035][ T6349] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  120.268098][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  120.297847][ T6349] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  120.319258][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  120.328927][ T6349] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  120.361000][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  120.369470][ T6349] UDF-fs: Scanning with blocksize 512 failed
[  120.375134][ T6359] loop6: detected capacity change from 0 to 64
[  120.406544][ T4852] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.413857][ T4852] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.440931][ T6349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  120.488634][ T6359] attempt to access beyond end of device
[  120.488634][ T6359] loop6: rw=0, want=45068, limit=64
[  120.505158][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  120.538237][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  120.570239][ T6359] Buffer I/O error on dev loop6, logical block 22533, async page read
[  120.606692][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  120.624733][ T6359] attempt to access beyond end of device
[  120.624733][ T6359] loop6: rw=0, want=45068, limit=64
[  120.631076][ T6367] loop1: detected capacity change from 0 to 512
[  120.662686][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  120.698348][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  120.736650][ T6359] Buffer I/O error on dev loop6, logical block 22533, async page read
[  120.751958][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  120.801450][ T6368] attempt to access beyond end of device
[  120.801450][ T6368] loop6: rw=0, want=45068, limit=64
[  120.805979][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  120.837124][ T6368] Buffer I/O error on dev loop6, logical block 22533, async page read
[  120.911307][ T6367] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,journal_ioprio=0x0000000000000003,,errors=continue. Quota mode: writeback.
[  120.935221][ T6367] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.081848][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  121.118511][ T6374] overlayfs: failed to clone upperpath
[  121.176148][ T6197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  121.213708][ T6197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  121.245280][ T6390] loop2: detected capacity change from 0 to 64
[  121.260543][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  121.287337][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  121.307402][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  121.372412][ T6393] overlayfs: failed to clone upperpath
[  121.428536][ T6396] FAULT_INJECTION: forcing a failure.
[  121.428536][ T6396] name failslab, interval 1, probability 0, space 0, times 1
[  121.542841][ T6396] CPU: 1 PID: 6396 Comm: syz.1.565 Not tainted syzkaller #0
[  121.550187][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  121.560271][ T6396] Call Trace:
[  121.563918][ T6396]  <TASK>
[  121.566874][ T6396]  dump_stack_lvl+0x188/0x250
[  121.571591][ T6396]  ? show_regs_print_info+0x20/0x20
[  121.576815][ T6396]  ? load_image+0x410/0x410
[  121.581350][ T6396]  ? __lock_acquire+0x7b50/0x7b50
[  121.586412][ T6396]  ? lock_chain_count+0x20/0x20
[  121.591316][ T6396]  should_fail+0x383/0x4b0
[  121.595780][ T6396]  should_failslab+0x5/0x20
[  121.600328][ T6396]  slab_pre_alloc_hook+0x51/0xc0
[  121.605395][ T6396]  ? taskstats_exit+0x169/0xae0
[  121.610402][ T6396]  kmem_cache_alloc+0x3d/0x280
[  121.615556][ T6396]  taskstats_exit+0x169/0xae0
[  121.620288][ T6396]  ? sync_mm_rss+0x211/0x350
[  121.624941][ T6396]  do_exit+0x5ab/0x2110
[  121.629129][ T6396]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  121.635136][ T6396]  ? put_task_struct+0x80/0x80
[  121.639956][ T6396]  ? lock_chain_count+0x20/0x20
[  121.644839][ T6396]  ? _raw_spin_unlock_irq+0x1f/0x40
[  121.650060][ T6396]  ? lockdep_hardirqs_on+0x94/0x140
[  121.655283][ T6396]  do_group_exit+0x12c/0x2f0
[  121.659906][ T6396]  __x64_sys_exit_group+0x3b/0x40
[  121.664956][ T6396]  do_syscall_64+0x4c/0xa0
[  121.669390][ T6396]  ? clear_bhb_loop+0x30/0x80
[  121.674086][ T6396]  ? clear_bhb_loop+0x30/0x80
[  121.678830][ T6396]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  121.684770][ T6396] RIP: 0033:0x7efc542360d9
[  121.689195][ T6396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.708807][ T6396] RSP: 002b:00007ffc8732ae08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  121.717226][ T6396] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efc542360d9
[  121.725193][ T6396] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  121.733181][ T6396] RBP: 00007ffc8732ae6c R08: 0000000000000000 R09: 00000000000927c0
[  121.741147][ T6396] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000006f
[  121.749111][ T6396] R13: 00000000000927c0 R14: 000000000001d949 R15: 00007ffc8732aec0
[  121.757121][ T6396]  </TASK>
[  121.789698][ T5217] Bluetooth: hci3: command 0x040f tx timeout
[  121.861584][ T4260] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  121.910865][ T4260] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  121.947933][ T6412] loop6: detected capacity change from 0 to 2048
[  121.973681][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  121.981932][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  122.014792][ T6197] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.069324][ T6412] UDF-fs: error (device loop6): udf_read_tagged: block 97: CRC length 511 exceeds block size
[  122.119436][ T6412] UDF-fs: warning (device loop6): udf_fill_super: No partition found (2)
[  122.750009][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  122.757431][ T6448] input: syz0 as /devices/virtual/input/input7
[  122.771838][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  122.894438][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  122.924597][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  122.963060][ T6197] device veth0_vlan entered promiscuous mode
[  122.992252][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  123.015882][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  123.072069][ T6197] device veth1_vlan entered promiscuous mode
[  123.197894][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  123.211853][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  123.253253][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  123.277066][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  123.305746][ T6197] device veth0_macvtap entered promiscuous mode
[  123.317563][ T6477] tipc: Started in network mode
[  123.322861][ T6477] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  123.332459][ T6477] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  123.344515][ T6197] device veth1_macvtap entered promiscuous mode
[  123.423126][ T6481] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0
[  123.471260][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.526539][ T5214] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  123.542177][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.574843][ T6487] fuse: Bad value for 'fd'
[  123.580076][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.636535][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.668160][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.692400][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.716405][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.746527][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.768278][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.777460][ T5214] usb 3-1: Using ep0 maxpacket: 32
[  123.808267][ T5217] Bluetooth: hci3: command 0x0419 tx timeout
[  123.819418][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  123.837610][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  123.867008][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  123.890844][ T4856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  123.899535][ T5214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.909870][ T6480] loop1: detected capacity change from 0 to 32768
[  123.919071][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.931243][ T5214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.952991][ T5214] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  123.957643][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.986422][ T5214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.005637][ T6483] loop6: detected capacity change from 0 to 32768
[  124.012917][ T5214] usb 3-1: config 0 descriptor??
[  124.040376][ T6483] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.586 (6483)
[  124.059294][ T5214] hub 3-1:0.0: USB hub found
[  124.074076][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.086961][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.101003][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.120105][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.134176][ T4178] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4178)
[  124.137322][ T6483] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  124.161904][ T6197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.185189][ T6483] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  124.206442][ T6197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.226387][ T6483] BTRFS info (device loop6): use zstd compression, level 3
[  124.245853][ T6197] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.275596][ T6483] BTRFS info (device loop6): using free space tree
[  124.281599][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  124.284405][ T5214] hub 3-1:0.0: 1 port detected
[  124.310997][ T6483] BTRFS info (device loop6): has skinny extents
[  124.339087][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  124.382232][ T4195] tipc: Node number set to 43690
[  124.398379][ T6197] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.446786][ T6197] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.483864][ T6197] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.497653][ T6197] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.626465][ T5214] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  124.633728][ T5214] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  124.680819][ T4856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.689225][ T6483] BTRFS info (device loop6): enabling ssd optimizations
[  124.756559][ T5214] usbhid 3-1:0.0: can't add hid device: -71
[  124.762915][ T5214] usbhid: probe of 3-1:0.0 failed with error -71
[  124.776409][ T4856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.807153][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  124.840168][   T26] audit: type=1800 audit(1787168361.007:12): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.586" name="bus" dev="loop6" ino=263 res=0 errno=0
[  124.865023][ T5214] usb 3-1: USB disconnect, device number 9
[  124.903186][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.940174][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.970000][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  125.028526][ T6477] loop1: detected capacity change from 0 to 32768
[  125.155248][ T6518] overlayfs: failed to clone lowerpath
[  125.215434][ T6521] overlayfs: failed to clone lowerpath
[  125.553410][ T6477] XFS (loop1): Mounting V5 Filesystem
[  125.733682][ T6541] loop2: detected capacity change from 0 to 256
[  125.771588][ T6477] XFS (loop1): Ending clean mount
[  125.819223][ T6541] exfat: Deprecated parameter 'utf8'
[  125.849933][ T6477] XFS (loop1): Quotacheck needed: Please wait.
[  125.888419][   T21] Bluetooth: hci3: command 0x0405 tx timeout
[  125.911323][ T6541] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  125.989275][ T6477] XFS (loop1): Quotacheck: Done.
[  126.137485][ T4187] XFS (loop1): Unmounting Filesystem
[  126.163406][ T6533] loop7: detected capacity change from 0 to 32768
[  126.435283][ T6533] XFS (loop7): Mounting V5 Filesystem
[  126.524828][ T6533] XFS (loop7): Ending clean mount
[  126.593929][ T6533] XFS (loop7): Quotacheck needed: Please wait.
[  126.600224][ T6568] input: syz0 as /devices/virtual/input/input8
[  126.706456][ T5214] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  126.886923][ T6533] XFS (loop7): Quotacheck: Done.
[  126.971210][ T6576] loop1: detected capacity change from 0 to 4096
[  126.981465][   T26] audit: type=1800 audit(1787168363.147:13): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.592" name="bus" dev="loop7" ino=6155 res=0 errno=0
[  127.034507][   T26] audit: type=1800 audit(1787168363.177:14): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.592" name="file1" dev="loop7" ino=6150 res=0 errno=0
[  127.066691][ T5214] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.078709][ T6197] XFS (loop7): Unmounting Filesystem
[  127.097153][ T6576] EXT4-fs (loop1): Test dummy encryption mode enabled
[  127.107252][ T5214] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  127.125152][ T5214] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  127.145632][ T5214] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  127.168287][ T5214] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  127.184757][ T5217] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  127.192968][ T5214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.218061][ T6576] EXT4-fs (loop1): Ignoring removed orlov option
[  127.233616][ T6562] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  127.243871][ T6562] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  127.279163][ T5214] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected
[  127.289383][ T5214] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84
[  127.291876][ T6576] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,grpjquota=,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[  127.299936][ T5214] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2
[  127.335237][ T5214] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  127.345097][ T5214] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88
[  127.353467][ T5214] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6
[  127.362575][ T5214] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  127.586687][ T5217] usb 3-1: config 0 has no interfaces?
[  127.592524][ T5217] usb 3-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00
[  127.604672][ T5217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.613962][ T6576] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  127.615987][ T5217] usb 3-1: config 0 descriptor??
[  127.648034][ T6576] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  127.782529][ T6595] loop7: detected capacity change from 0 to 1024
[  127.831211][ T6595] EXT4-fs (loop7): Ignoring removed bh option
[  127.841212][ T6595] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  127.932591][ T6595] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none.
[  127.992204][   T21] usb 7-1: USB disconnect, device number 3
[  128.057862][   T21] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  128.104690][ T5217] usb 3-1: USB disconnect, device number 10
[  128.120262][   T21] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  128.151057][   T21] keyspan 7-1:1.0: device disconnected
[  128.387083][ T6613] loop7: detected capacity change from 0 to 4096
[  128.686205][ T6620] loop2: detected capacity change from 0 to 128
[  128.804786][ T6625] loop6: detected capacity change from 0 to 128
[  128.853285][   T26] audit: type=1800 audit(1787168365.017:15): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.618" name="file1" dev="loop2" ino=1048603 res=0 errno=0
[  128.884806][ T6625] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5
[  128.884806][ T6625] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  128.884806][ T6625] 
[  128.908152][ T6627] loop1: detected capacity change from 0 to 16
[  128.964938][ T6625] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouser_xattr,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  129.023348][ T6627] erofs: (device loop1): mounted with root inode @ nid 36.
[  129.040589][ T6627] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89
[  129.050672][ T6627] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89
[  129.054249][ T6625] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  129.059758][ T6627] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 89
[  129.059878][ T6627] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  129.110262][   T26] audit: type=1800 audit(1787168365.287:16): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.630" name="file2" dev="loop1" ino=89 res=0 errno=0
[  129.532874][ T6645] loop2: detected capacity change from 0 to 2048
[  129.592928][ T6622] loop7: detected capacity change from 0 to 32768
[  129.649258][ T6645] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.801900][ T6665] netlink: 'syz.6.627': attribute type 1 has an invalid length.
[  129.829511][ T6622] XFS (loop7): Mounting V5 Filesystem
[  129.986864][ T6665] 8021q: adding VLAN 0 to HW filter on device bond1
[  130.040631][ T6681] device bond1 entered promiscuous mode
[  130.183159][ T6622] XFS (loop7): Ending clean mount
[  130.196010][ T6622] XFS (loop7): Quotacheck needed: Please wait.
[  130.295854][   T26] audit: type=1800 audit(1787168366.457:17): pid=6663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.624" name="file1" dev="loop2" ino=1415 res=0 errno=0
[  130.419842][ T6622] XFS (loop7): Quotacheck: Done.
[  130.618971][ T6197] XFS (loop7): Unmounting Filesystem
[  131.354427][ T6732] loop6: detected capacity change from 0 to 4096
[  132.041565][ T6753] loop2: detected capacity change from 0 to 512
[  132.101409][ T6760] xt_hashlimit: size too large, truncated to 1048576
[  132.234515][ T6753] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  132.303992][ T6753] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.557341][ T6756] loop7: detected capacity change from 0 to 32768
[  132.781803][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.789557][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.810685][ T6756] XFS (loop7): Mounting V5 Filesystem
[  133.027285][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'.
[  133.054388][ T6786] nbd1: detected capacity change from 0 to 8
[  133.065030][ T6756] XFS (loop7): Ending clean mount
[  133.080873][ T6756] XFS (loop7): Quotacheck needed: Please wait.
[  133.138281][ T6790] block nbd1: shutting down sockets
[  133.171552][    C1] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  133.183083][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  133.195924][ T1201] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  133.207274][ T1201] Buffer I/O error on dev nbd1, logical block 0, async page read
[  133.220410][ T1201] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  133.231516][ T1201] Buffer I/O error on dev nbd1, logical block 0, async page read
[  133.239948][ T1201] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  133.250964][ T1201] Buffer I/O error on dev nbd1, logical block 0, async page read
[  133.259294][ T1201] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  133.270692][ T1201] Buffer I/O error on dev nbd1, logical block 0, async page read
[  133.278950][ T1201] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  133.290022][ T1201] Buffer I/O error on dev nbd1, logical block 0, async page read
[  133.298115][ T1201] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  133.309729][ T1201] Buffer I/O error on dev nbd1, logical block 0, async page read
[  133.318275][ T1201] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  133.329603][ T1201] Buffer I/O error on dev nbd1, logical block 0, async page read
[  133.337484][ T4178] ldm_validate_partition_table(): Disk read failed.
[  133.344353][ T1201] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  133.348739][ T6756] XFS (loop7): Quotacheck: Done.
[  133.358777][ T1201] Buffer I/O error on dev nbd1, logical block 0, async page read
[  133.368997][ T1201] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  133.379964][ T1201] Buffer I/O error on dev nbd1, logical block 0, async page read
[  133.387943][ T4178] Dev nbd1: unable to read RDB block 0
[  133.393456][ T4178]  nbd1: unable to read partition table
[  133.401951][ T4178] nbd1: partition table beyond EOD, truncated
[  133.651091][ T6795] netlink: 51 bytes leftover after parsing attributes in process `syz.1.665'.
[  133.797725][   T26] audit: type=1800 audit(1787168369.967:18): pid=6799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.667" name="dbroot" dev="configfs" ino=41677 res=0 errno=0
[  133.852531][ T6197] XFS (loop7): Unmounting Filesystem
[  134.126261][ T6813] netlink: 'syz.0.674': attribute type 3 has an invalid length.
[  134.933831][ T6843] loop2: detected capacity change from 0 to 512
[  135.066070][ T6843] EXT4-fs (loop2): 1 truncate cleaned up
[  135.073094][ T6843] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none.
[  135.642634][ T6861] gadgetfs: bound to dummy_udc driver
[  135.939033][   T26] audit: type=1804 audit(1787168372.107:19): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.690" name="/newroot/13/file0/file1" dev="overlay" ino=96 res=1 errno=0
[  135.987597][ T6879] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  136.172232][ T6885] APIC base relocation is unsupported by KVM
[  136.326169][ T6897] netlink: 27 bytes leftover after parsing attributes in process `syz.1.698'.
[  136.719167][ T6889] loop2: detected capacity change from 0 to 32768
[  136.756553][   T21] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  136.764850][ T5217] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  136.782873][ T6889] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.696 (6889)
[  136.818486][ T6889] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  136.826361][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!!
[  136.836512][ T6889] BTRFS info (device loop2): using free space tree
[  136.847758][ T6889] BTRFS info (device loop2): has skinny extents
[  136.980392][ T6889] BTRFS info (device loop2): enabling ssd optimizations
[  137.046431][ T5217] usb 8-1: Using ep0 maxpacket: 8
[  137.156570][   T21] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  137.188040][   T21] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  137.272287][ T4178] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop2 scanned by udevd (4178)
[  137.326798][ T5217] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  137.344414][ T5217] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  137.366619][   T21] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  137.381095][ T5217] usb 8-1: Product: syz
[  137.388958][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.401960][ T5217] usb 8-1: Manufacturer: syz
[  137.412876][ T5217] usb 8-1: SerialNumber: syz
[  137.418695][   T21] usb 2-1: Product: syz
[  137.436430][   T21] usb 2-1: Manufacturer: syz
[  137.443468][ T5217] usb 8-1: config 0 descriptor??
[  137.451487][   T21] usb 2-1: SerialNumber: syz
[  137.498772][ T5217] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  137.732277][   T21] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  137.988215][   T21] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  138.141508][ T4508] usb 2-1: USB disconnect, device number 9
[  138.150260][ T5217] input: gspca_zc3xx as /devices/platform/dummy_hcd.7/usb8/8-1/input/input9
[  138.174603][ T4508] usblp0: removed
[  138.236667][   T21] usb 3-1: Using ep0 maxpacket: 32
[  138.355301][ T5217] usb 8-1: USB disconnect, device number 3
[  138.366854][   T21] usb 3-1: config 2 has an invalid interface number: 88 but max is 0
[  138.391861][   T21] usb 3-1: config 2 has no interface number 0
[  138.406981][   T21] usb 3-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  138.429916][   T21] usb 3-1: config 2 interface 88 has no altsetting 0
[  138.596652][   T21] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  138.623693][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  138.646575][   T21] usb 3-1: Product: syz
[  138.676653][   T21] usb 3-1: Manufacturer: syz
[  138.681877][   T21] usb 3-1: SerialNumber: syz
[  138.746672][ T6955] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  138.794418][ T6975] loop6: detected capacity change from 0 to 32768
[  138.998668][ T6955] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  139.027833][ T6975] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt
[  139.027833][ T6975] 
[  139.079895][ T7013] loop1: detected capacity change from 0 to 64
[  139.094597][ T6975] xtLookup: xtSearch returned -5
[  139.156677][ T6975] add_index: get/read_metapage failed!
[  139.169978][ T6975] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt
[  139.169978][ T6975] 
[  139.215046][ T7013] overlayfs: upper fs needs to support d_type.
[  139.224287][ T6975] xtLookup: xtSearch returned -5
[  139.236778][ T6975] free_index: error reading directory table
[  139.243031][ T6975] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt
[  139.243031][ T6975] 
[  139.294385][ T6975] xtLookup: xtSearch returned -5
[  139.309541][ T6975] free_index: error reading directory table
[  139.333521][ T6975] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt
[  139.333521][ T6975] 
[  139.355731][ T7013] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  139.371368][ T7013] overlayfs: failed to set xattr on upper
[  139.376800][ T6975] xtLookup: xtSearch returned -5
[  139.382095][ T6975] free_index: error reading directory table
[  139.401218][ T7013] overlayfs: ...falling back to index=off,metacopy=off.
[  139.409651][ T6975] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt
[  139.409651][ T6975] 
[  139.444941][ T6975] xtLookup: xtSearch returned -5
[  139.461942][ T6975] free_index: error reading directory table
[  139.477007][ T6975] ERROR: (device loop6): xtSearch: XT_GETPAGE: xtree page corrupt
[  139.477007][ T6975] 
[  139.503072][ T6975] xtLookup: xtSearch returned -5
[  139.519515][ T6975] free_index: error reading directory table
[  139.574603][    T9] general protection fault, probably for non-canonical address 0xdffffc00000000bb: 0000 [#1] PREEMPT SMP KASAN
[  139.590020][    T9] KASAN: null-ptr-deref in range [0x00000000000005d8-0x00000000000005df]
[  139.603962][    T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0
[  139.619622][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  139.638605][    T9] Workqueue: writeback wb_workfn (flush-7:6)
[  139.647906][    T9] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9d0
[  139.657676][    T9] Code: ff df 41 80 3c 04 00 74 08 4c 89 ff e8 81 73 e7 fd bb d8 05 00 00 49 03 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 5a 73 e7 fd 41 be 90 00 00 00 4c 03
[  139.684567][    T9] RSP: 0018:ffffc90000ce6dd8 EFLAGS: 00010206
[  139.692057][    T9] RAX: 00000000000000bb RBX: 00000000000005d8 RCX: dffffc0000000000
[  139.701586][    T9] RDX: 0000000000000000 RSI: ffffffff9649de20 RDI: ffff888026100500
[  139.712142][    T9] RBP: ffffffff9649df30 R08: dffffc0000000000 R09: 1ffffffff203de18
[  139.721398][    T9] R10: dffffc0000000000 R11: fffffbfff203de19 R12: 1ffff11004c200a1
[  139.729911][    T9] R13: 1ffff11004c200a1 R14: dffffc0000000000 R15: ffff888026100508
[  139.738442][    T9] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  139.747738][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  139.755153][    T9] CR2: 0000555588265a38 CR3: 000000005967e000 CR4: 00000000003506f0
[  139.764516][    T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  139.772995][    T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  139.782117][    T9] Call Trace:
[  139.785496][    T9]  <TASK>
[  139.788442][    T9]  bio_associate_blkg+0x23a/0x340
[  139.793590][    T9]  lbmStartIO+0x20b/0x4d0
[  139.798115][    T9]  lbmWrite+0x361/0x480
[  139.802298][    T9]  jfs_flush_journal+0x537/0xe80
[  139.808356][    T9]  ? lmLogShutdown+0x850/0x850
[  139.813840][    T9]  ? rcu_lock_release+0x5/0x20
[  139.819164][    T9]  ? __lock_acquire+0x7b50/0x7b50
[  139.825346][    T9]  metapage_writepage+0x575/0x1010
[  139.830919][    T9]  ? percpu_counter_add_batch+0x135/0x150
[  139.837193][    T9]  ? clear_page_dirty_for_io+0x889/0x9f0
[  139.843750][    T9]  ? metapage_exit+0x20/0x20
[  139.849701][    T9]  ? mark_lock+0x94/0x320
[  139.854348][    T9]  __writepage+0x63/0x130
[  139.858892][    T9]  write_cache_pages+0x997/0xfb0
[  139.863859][    T9]  ? generic_writepages+0x170/0x170
[  139.869356][    T9]  ? tag_pages_for_writeback+0x4b0/0x4b0
[  139.875023][    T9]  ? writeback_sb_inodes+0x433/0x1750
[  139.880735][    T9]  do_writepages+0x515/0x700
[  139.885618][    T9]  ? __writepage+0x130/0x130
[  139.890236][    T9]  ? __lock_acquire+0x7b50/0x7b50
[  139.895449][    T9]  ? do_raw_spin_lock+0x128/0x2f0
[  139.900671][    T9]  __writeback_single_inode+0x153/0xda0
[  139.906536][    T9]  writeback_sb_inodes+0xaaa/0x1750
[  139.912393][    T9]  ? queue_io+0x530/0x530
[  139.917243][    T9]  ? move_expired_inodes+0x722/0x770
[  139.923429][    T9]  ? stack_trace_save+0xf0/0xf0
[  139.928773][    T9]  ? rcu_is_watching+0x11/0xa0
[  139.934887][    T9]  ? queue_io+0x3ba/0x530
[  139.940239][    T9]  wb_writeback+0x44a/0xbc0
[  139.946666][    T9]  ? rcu_lock_release+0x20/0x20
[  139.952384][    T9]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  139.958944][    T9]  ? __lock_acquire+0x7b50/0x7b50
[  139.964229][    T9]  ? _raw_spin_unlock_irq+0x1f/0x40
[  139.971541][    T9]  wb_workfn+0x43a/0xf20
[  139.976795][    T9]  ? inode_wait_for_writeback+0x220/0x220
[  139.982555][    T9]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  139.989233][    T9]  ? __lock_acquire+0x7b50/0x7b50
[  139.995023][    T9]  ? read_lock_is_recursive+0x10/0x10
[  140.000687][    T9]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  140.006613][    T9]  ? _raw_spin_unlock+0x40/0x40
[  140.011650][    T9]  ? _raw_spin_unlock_irq+0x1f/0x40
[  140.016876][    T9]  process_one_work+0x867/0xff0
[  140.021916][    T9]  ? worker_detach_from_pool+0x240/0x240
[  140.027577][    T9]  ? lockdep_hardirqs_off+0x70/0x100
[  140.033281][    T9]  ? _raw_spin_lock_irq+0xb7/0xf0
[  140.038874][    T9]  ? _raw_spin_lock_irqsave+0x100/0x100
[  140.044576][    T9]  ? wq_worker_running+0x97/0x170
[  140.050060][    T9]  worker_thread+0xad7/0x12a0
[  140.056165][    T9]  kthread+0x42e/0x520
[  140.060601][    T9]  ? rcu_lock_release+0x20/0x20
[  140.066367][    T9]  ? kthread_blkcg+0xd0/0xd0
[  140.070978][    T9]  ret_from_fork+0x1f/0x30
[  140.075528][    T9]  </TASK>
[  140.078569][    T9] Modules linked in:
[  140.116605][   T21] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  140.136745][   T21] asix: probe of 3-1:2.88 failed with error -71
[  140.176134][   T21] usb 3-1: USB disconnect, device number 11
[  140.195332][    T9] ---[ end trace 2f74ee4229043b27 ]---
[  140.204762][    T9] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9d0
[  140.213623][    T9] Code: ff df 41 80 3c 04 00 74 08 4c 89 ff e8 81 73 e7 fd bb d8 05 00 00 49 03 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 5a 73 e7 fd 41 be 90 00 00 00 4c 03
[  140.234186][    T9] RSP: 0018:ffffc90000ce6dd8 EFLAGS: 00010206
[  140.241101][    T9] RAX: 00000000000000bb RBX: 00000000000005d8 RCX: dffffc0000000000
[  140.253479][    T9] RDX: 0000000000000000 RSI: ffffffff9649de20 RDI: ffff888026100500
[  140.267473][    T9] RBP: ffffffff9649df30 R08: dffffc0000000000 R09: 1ffffffff203de18
[  140.275815][    T9] R10: dffffc0000000000 R11: fffffbfff203de19 R12: 1ffff11004c200a1
[  140.298494][    T9] R13: 1ffff11004c200a1 R14: dffffc0000000000 R15: ffff888026100508
[  140.312904][    T9] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  140.326275][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.332947][    T9] CR2: 00007f51d11cf368 CR3: 0000000066ea8000 CR4: 00000000003506f0
[  140.345050][    T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  140.354620][    T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  140.363146][    T9] Kernel panic - not syncing: Fatal exception
[  140.370569][    T9] Kernel Offset: disabled
[  140.374912][    T9] Rebooting in 86400 seconds..