last executing test programs:

7m7.005631996s ago: executing program 32 (id=1348):
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
setuid(0xee01)
syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, 0x0, 0x0, &(0x7f0000000000))

5m44.397985152s ago: executing program 33 (id=2188):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0xc03, &(0x7f0000008040)=ANY=[], 0x2, 0x5fbf, &(0x7f0000002080)="$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")
stat(&(0x7f0000000200)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)

5m25.192870114s ago: executing program 4 (id=2317):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000014000200776732000000002000000000000000003800088034"], 0x60}, 0x1, 0x0, 0x0, 0x4094}, 0x20000010)

5m24.922496398s ago: executing program 4 (id=2321):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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")
r0 = open(&(0x7f0000000140)='./file2\x00', 0x6c840, 0x50)
finit_module(r0, 0x0, 0x5)

5m24.210810695s ago: executing program 4 (id=2329):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x173)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0})

5m23.548847182s ago: executing program 4 (id=2336):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc0d6, &(0x7f00000000c0)={[{@noload}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x45b, &(0x7f0000000b00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

5m22.550765014s ago: executing program 4 (id=2345):
r0 = socket(0x11, 0x2, 0x0)
setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10)
close(r0)

5m19.615835836s ago: executing program 4 (id=2363):
r0 = syz_clone(0x23940200, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001300010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9010000081820000140003006261746164765f736c6176655f30000008001300", @ANYRES32=r0], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

5m18.933907454s ago: executing program 34 (id=2363):
r0 = syz_clone(0x23940200, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001300010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9010000081820000140003006261746164765f736c6176655f30000008001300", @ANYRES32=r0], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

3m21.02805403s ago: executing program 6 (id=3432):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000010280)={0xffffffffffffffff, 0x0, 0x30, 0x4, @val=@uprobe_multi={0x0, &(0x7f0000000100)=[0x9], 0x0, 0xfffffffffffffffd, 0x1}}, 0x40)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

3m20.824262173s ago: executing program 6 (id=3435):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000003c0)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x80)

3m20.614979175s ago: executing program 6 (id=3437):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d86dd", 0x12}, {0x0}], 0x2)

3m20.316019119s ago: executing program 6 (id=3438):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_off}]})

3m20.021649692s ago: executing program 6 (id=3440):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
writev(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)="943a1fcb24676066260d837c8a6bf0b9beecfdc4658c963ec2657e821760538c4816fa2c38ae206755a9fa86d7a322d0f6acde1d651d13bd821b76d0a9bdf18aa3da42afcf1643e8bb70f1e1b714c65b75a3814c102e8b95", 0x58}, {&(0x7f00000002c0)="cd02e3089dbb7069", 0x8}], 0x2)

3m19.396119769s ago: executing program 6 (id=3443):
syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed008e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@debug}, {@debug}, {@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@orlov}]}, 0xfe, 0x47d, &(0x7f0000000dc0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, 0x0, 0x0)

3m19.125532771s ago: executing program 35 (id=3443):
syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed008e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@debug}, {@debug}, {@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@orlov}]}, 0xfe, 0x47d, &(0x7f0000000dc0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, 0x0, 0x0)

3m2.664377724s ago: executing program 3 (id=3553):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10)
write(r0, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000001f00000000000000080009000d000000", 0x24)

3m2.394808917s ago: executing program 3 (id=3557):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x3000040, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, 0x0)

3m1.628569326s ago: executing program 3 (id=3563):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)

3m1.25552673s ago: executing program 3 (id=3566):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x10012, &(0x7f00000004c0)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc5666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db392743800000004002300"/111, @ANYRES8], 0x4, 0x339, &(0x7f0000000140)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0))
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

3m0.750727165s ago: executing program 3 (id=3571):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0)

3m0.135377272s ago: executing program 3 (id=3575):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000f80)=r0, 0x4)

2m59.336920601s ago: executing program 36 (id=3575):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000f80)=r0, 0x4)

2m6.481321006s ago: executing program 1 (id=4027):
unshare(0x22020600)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2})

2m6.098549871s ago: executing program 1 (id=4030):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905097a63"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="7fd58bb9bdc9fbbfc33fab0cac4f358fdd73562b82694d9298201667e8ed035055c42e53", 0x24}, {&(0x7f0000000600)="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", 0xb78}], 0x2)

2m2.55425481s ago: executing program 1 (id=4063):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x106, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x2c, 0x0, [0x3, 0x2, 0x4, 0x7, 0x7, 0x8b, 0x8, 0x5, 0xff, 0x3, 0x6, 0x15a, 0xffff8000, 0x6, 0xe57, 0x80000001]}, {0x2b, 0x0, [0xb39, 0xa6f, 0x10001, 0x2, 0xc, 0x0, 0xfffffffb, 0xe, 0x880, 0x430, 0x439, 0x308, 0xa35, 0x9655, 0x5, 0xfffffff0]}], r1, 0x1, 0x1, 0x90}}, 0x20)

2m2.224107424s ago: executing program 1 (id=4065):
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x4}, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0)

2m1.903686947s ago: executing program 1 (id=4067):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x5)

2m1.505879772s ago: executing program 1 (id=4070):
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="8595", 0x2, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0)

1m46.104474952s ago: executing program 37 (id=4070):
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="8595", 0x2, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0)

1m45.605071148s ago: executing program 0 (id=4194):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "12"}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

1m45.284401211s ago: executing program 0 (id=4195):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x54, 0x9, 0x1, {0x1, 0x1}, {0x60, 0x2}, @cond=[{0x7f, 0x2, 0x80, 0x6, 0x3, 0xe8}, {0x3, 0xffff, 0x1, 0x1, 0x2}]})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

1m44.962079035s ago: executing program 0 (id=4196):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r1, r0}, 0xc)

1m44.4775575s ago: executing program 0 (id=4199):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)

1m44.281648143s ago: executing program 0 (id=4200):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0904000000000000f3770200000048000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)

1m42.620014761s ago: executing program 0 (id=4207):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x2c, 0x400}, {0x20, 0x0, 0x2, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)

1m42.060677327s ago: executing program 38 (id=4207):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x2c, 0x400}, {0x20, 0x0, 0x2, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)

23.252525632s ago: executing program 7 (id=4828):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
sendmmsg(r0, &(0x7f0000009bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=[{0xc, 0x11, 0x88a1}], 0xc}}], 0x1, 0xa1a)

22.953177905s ago: executing program 7 (id=4831):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14020000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf250100000008000100010000000c00048005000300070000000800020001000000200008"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084)

22.53904361s ago: executing program 7 (id=4833):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
tee(r1, r0, 0x83, 0xd)

22.148578663s ago: executing program 7 (id=4835):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]})

20.962971347s ago: executing program 7 (id=4838):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r0, 0x2)
lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_default\x00')

17.357862087s ago: executing program 7 (id=4858):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40)

16.784956614s ago: executing program 39 (id=4858):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40)

2.865913428s ago: executing program 2 (id=4958):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

2.485815232s ago: executing program 5 (id=4962):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe80, &(0x7f00000002c0)="f3fffeffffffa000", &(0x7f0000000180), 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2.157553925s ago: executing program 5 (id=4965):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x8}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x20, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108)

1.945221108s ago: executing program 8 (id=4966):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x407, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x98}}, 0x0)

1.856567469s ago: executing program 9 (id=4967):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x3c}}, 0x84)

1.840733589s ago: executing program 2 (id=4968):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={@mcast2, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000, 0x0, 0x7d, 0x0, 0xfffffffffffffffc, 0x80200})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6, 0x0, 0x8, 0x400, 0x400000000000000b, 0x80910220})

1.77113563s ago: executing program 5 (id=4969):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000000306050000000000000000000200000805000100070000000900020073797a30"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

1.665765311s ago: executing program 8 (id=4970):
capset(&(0x7f0000001e80)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r0, 0x4b52, 0xfffffffffffffffe)

1.586579782s ago: executing program 9 (id=4971):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)

1.514216983s ago: executing program 2 (id=4972):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x2808082, &(0x7f0000000280)={[{@uid}, {@part={'part', 0x3d, 0x9}}, {@nls={'nls', 0x3d, 'cp850'}}, {@nodecompose}, {}, {@force}, {@type={'type', 0x3d, "eea74fc7"}}]}, 0x1, 0x6e8, &(0x7f0000001f80)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000001f80)=""/4088, 0xff8)

1.470999293s ago: executing program 5 (id=4973):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000)
readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/262, 0x106}], 0x1)

1.381502525s ago: executing program 8 (id=4974):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000025c0)=@newtaction={0x44c, 0x30, 0x10, 0x70b925, 0x25dfdbfb, {}, [{0x438, 0x1, [@m_police={0x434, 0xb, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2d4, 0xd8, 0x0, 0x8, 0x80000000, 0x9, 0x9, 0x9, 0x9, 0xb9b, 0x8, 0x9, 0x9, 0x1, 0xc, 0x6, 0x5, 0x6, 0x9, 0x0, 0x40, 0x100, 0x62, 0x0, 0x3, 0x4, 0x3, 0x1, 0x48, 0x1, 0x0, 0x3ea581b3, 0x7, 0x9, 0xa, 0xffffffff, 0x1, 0x8, 0x101, 0x2, 0x7ff, 0x4, 0x10f4, 0x6, 0x4, 0x7, 0x3, 0x8001, 0x4, 0x7, 0x85, 0x6, 0xfffffffd, 0x1, 0x3, 0x0, 0x6, 0x3dd, 0x0, 0x99f, 0x1, 0x401, 0x9, 0x40, 0x0, 0x1, 0x7, 0x5, 0x1, 0x7, 0xa, 0x2, 0xa3, 0x89, 0x5, 0x7ff, 0x2, 0x2, 0xfae4, 0xb0, 0x1, 0x2, 0x10001, 0x5, 0x5, 0xd9000000, 0x4, 0x5, 0x3, 0x7, 0xb8ff, 0x5, 0x3, 0x8, 0x5, 0x4, 0x3, 0x0, 0x6, 0x5, 0x9, 0x5, 0xa, 0x3, 0x1000, 0x6, 0x10000, 0x2, 0x5, 0x9, 0xd, 0x4, 0x5, 0x200, 0x3, 0x4fa3, 0x1, 0x3, 0xb, 0x9, 0x6, 0x400, 0x2, 0x1, 0x5, 0x1, 0x4, 0x7, 0x1, 0x80000000, 0x0, 0x0, 0x9, 0xfffffeff, 0x2ac6, 0x6, 0x3, 0x3, 0x80, 0x0, 0x2, 0x9, 0x9, 0xc8, 0x7ff, 0x5, 0x9a, 0x80000001, 0xc, 0x9, 0xcd, 0x8, 0x3, 0x5, 0xe77, 0x0, 0xfa4f, 0x42, 0x7, 0x80000000, 0x8, 0x1, 0x2, 0xffffffff, 0x7f8, 0x1, 0x7, 0x6, 0x2, 0x4, 0x100, 0x4, 0x2, 0x7, 0xcdae, 0x4, 0x6, 0x2, 0x8, 0x8, 0xd7, 0x65, 0xffffffff, 0x400, 0x8, 0x81, 0x2, 0x6, 0x0, 0x0, 0x80000000, 0x9, 0x6, 0x9, 0xe, 0x80000000, 0x0, 0x4, 0x8, 0xa47, 0x10000, 0x3, 0x6, 0x7fffffff, 0xf4, 0x5, 0x0, 0xc, 0x10001, 0x4, 0x1, 0x7fffffff, 0x2, 0xffffffff, 0xc08b, 0x6, 0x0, 0x8, 0x6, 0x9, 0xffff, 0x4, 0x5, 0x6, 0x86f, 0x2, 0x2, 0x401, 0x9ce2, 0xfffffffc, 0x2, 0x5, 0xffffffff, 0x9, 0xe, 0x10001, 0x7, 0x10000, 0x6, 0xfffffff8, 0x1, 0x6, 0x7, 0xfffffffa, 0x1, 0x8, 0x8000, 0x8, 0x5, 0x7f, 0xfffffffe, 0x6, 0x9, 0x8, 0x2800, 0xfffff032]}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x40}, 0x0)

1.256249946s ago: executing program 9 (id=4975):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1.089838768s ago: executing program 8 (id=4976):
r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b9030006"], 0xd8)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

967.563609ms ago: executing program 2 (id=4977):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x2002888c)

855.39594ms ago: executing program 9 (id=4978):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockname$packet(r1, 0x0, 0x0)

631.998202ms ago: executing program 9 (id=4979):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x2, 0x634, &(0x7f0000000480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

579.700053ms ago: executing program 2 (id=4980):
unshare(0x2040400)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0)
copy_file_range(r0, &(0x7f0000000000)=0x8, r0, 0x0, 0x4, 0x0)

531.462374ms ago: executing program 8 (id=4981):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x84, &(0x7f0000000300)=ANY=[], 0x8b, 0x2e7, &(0x7f00000003c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x183341, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

378.559515ms ago: executing program 5 (id=4982):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102000000000000000007"], 0xf4}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012"], 0xa0}}, 0x0)

200.068398ms ago: executing program 2 (id=4983):
unshare(0x26020400)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
ioctl$FICLONE(r0, 0x40049409, r0)

95.190049ms ago: executing program 9 (id=4984):
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x8880)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x51, 0x1, 0x568e, {0xced0, 0xd1}, {0xbffa, 0x84}, @period={0x5a, 0x21d0, 0xc5c, 0x4, 0x4, {0x1, 0x4, 0x867a, 0xff42}, 0x0, 0x0}})

89.861948ms ago: executing program 5 (id=4985):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="3a000e0080000000ffffffffffffffff000000000000000064000100060206083c04010f8404760600012b0006000000080026006c"], 0xa8}, 0x1, 0x0, 0x0, 0x84}, 0x0)

0s ago: executing program 8 (id=4986):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xdc0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  543.731732][ T4365] usb 2-1: Product: syz
[  543.736590][ T4365] usb 2-1: Manufacturer: syz
[  543.760764][ T4365] usb 2-1: SerialNumber: syz
[  543.783918][ T4365] usb 2-1: config 0 descriptor??
[  543.789619][T15306] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  543.839569][ T4365] usb 2-1: selecting invalid altsetting 0
[  544.348157][T15337] loop7: detected capacity change from 0 to 4096
[  544.379950][T15337] EXT4-fs (loop7): Test dummy encryption mode enabled
[  544.442364][T15337] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[  544.549696][T15337] System zones: 0-5
[  544.583495][T15337] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  544.765012][T15323] loop9: detected capacity change from 0 to 32768
[  544.891697][T10612] EXT4-fs (loop7): unmounting filesystem.
[  545.502265][T15367] netlink: 'syz.0.4053': attribute type 5 has an invalid length.
[  545.793151][ T5325] usb 2-1: USB disconnect, device number 23
[  545.910782][ T4850] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  546.100921][ T4850] usb 10-1: Using ep0 maxpacket: 8
[  546.107905][ T4850] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  546.149750][ T4850] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  546.181162][ T4850] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  546.236307][ T4850] usb 10-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  546.280773][ T4850] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.312698][ T4850] usb 10-1: config 0 descriptor??
[  546.372314][T15394] loop7: detected capacity change from 0 to 4096
[  546.467314][T15397] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  546.542562][T15394] NILFS (loop7): nilfs_palloc_freev (ino=3): entry number 64 already freed
[  546.591462][T15394] NILFS (loop7): nilfs_sufile_do_free: segment 9 is already clean
[  546.739857][ T4850] dragonrise 0003:0079:0006.002A: hidraw0: USB HID v0.0b Device [HID 0079:0006] on usb-dummy_hcd.9-1/input0
[  546.791040][ T4850] dragonrise 0003:0079:0006.002A: no inputs found
[  546.797548][ T4850] dragonrise 0003:0079:0006.002A: force feedback init failed
[  547.026114][    T7] usb 10-1: USB disconnect, device number 3
[  547.042554][T15408] loop7: detected capacity change from 0 to 8
[  547.299278][T15414] loop8: detected capacity change from 0 to 512
[  547.338733][T15406] fido_id[15406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  547.394418][T15414] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  547.463062][T15414] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  547.548305][T15414] EXT4-fs error (device loop8): ext4_ext_check_inode:520: inode #2: comm syz.8.4068: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  547.856240][T13597] EXT4-fs (loop8): unmounting filesystem.
[  548.090174][T15428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4074'.
[  548.190683][T15431] loop9: detected capacity change from 0 to 1024
[  548.292724][T15436] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4076'.
[  548.714496][T15440] TCP: TCP_TX_DELAY enabled
[  548.950325][T15452] loop8: detected capacity change from 0 to 512
[  548.991309][T15452] EXT4-fs: inline encryption not supported
[  549.084196][T15452] EXT4-fs (loop8): orphan cleanup on readonly fs
[  549.118895][T15452] EXT4-fs (loop8): 1 truncate cleaned up
[  549.165678][T15452] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  549.428710][T13597] EXT4-fs (loop8): unmounting filesystem.
[  549.551133][ T4278] Bluetooth: hci3: command 0x0406 tx timeout
[  549.737617][T15473] vim2m vim2m.0: vidioc_s_fmt queue busy
[  549.941661][   T27] audit: type=1326 audit(1777976347.459:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.0.4091" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f59cdd9 code=0x7ffc0000
[  549.997464][   T27] audit: type=1326 audit(1777976347.489:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.0.4091" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f59cdd9 code=0x7ffc0000
[  550.069475][   T27] audit: type=1326 audit(1777976347.489:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.0.4091" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f59cdd9 code=0x7ffc0000
[  550.177843][   T27] audit: type=1326 audit(1777976347.489:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.0.4091" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f59cdd9 code=0x7ffc0000
[  550.275287][T10822] kernel read not supported for file /adsp1 (pid: 10822 comm: kworker/1:19)
[  550.314572][   T27] audit: type=1326 audit(1777976347.489:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.0.4091" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f6c3f59cdd9 code=0x7ffc0000
[  550.450812][   T27] audit: type=1326 audit(1777976347.489:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.0.4091" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f59cdd9 code=0x7ffc0000
[  550.566399][   T27] audit: type=1326 audit(1777976347.489:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.0.4091" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f59cdd9 code=0x7ffc0000
[  550.693209][   T27] audit: type=1326 audit(1777976347.489:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.0.4091" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f59cdd9 code=0x7ffc0000
[  550.779032][   T27] audit: type=1326 audit(1777976347.489:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.0.4091" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f59cdd9 code=0x7ffc0000
[  550.884801][   T27] audit: type=1326 audit(1777976347.489:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15476 comm="syz.0.4091" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f6c3f59cdd9 code=0x7ffc0000
[  551.039470][T15504] loop8: detected capacity change from 0 to 512
[  551.159494][T15504] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  551.221148][T15504] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  551.365615][T15504] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  551.438004][T15504] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.4101: Failed to acquire dquot type 0
[  551.634626][T13597] EXT4-fs (loop8): unmounting filesystem.
[  551.987236][T15528] loop9: detected capacity change from 0 to 64
[  552.574905][T15540] loop9: detected capacity change from 0 to 256
[  552.601833][T15540] FAT-fs (loop9): "posix" option is obsolete, not supported now
[  554.259469][T15579] loop8: detected capacity change from 0 to 512
[  554.349199][T15579] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  554.387086][T15579] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  554.712789][T15591] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4130'.
[  554.745283][T13597] EXT4-fs (loop8): unmounting filesystem.
[  555.211677][ T5324] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  555.412838][ T5324] usb 9-1: Using ep0 maxpacket: 16
[  555.420318][ T5324] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  555.460475][ T5324] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  555.502674][ T5324] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  555.546964][ T5324] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  555.576811][ T5324] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.641859][ T5324] usb 9-1: config 0 descriptor??
[  556.061556][ T5324] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0
[  556.069556][ T5324] microsoft 0003:045E:07DA.002B: No inputs registered, leaving
[  556.112053][ T5324] microsoft 0003:045E:07DA.002B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[  556.161346][ T5324] microsoft 0003:045E:07DA.002B: no inputs found
[  556.189728][ T5324] microsoft 0003:045E:07DA.002B: could not initialize ff, continuing anyway
[  556.263656][ T5324] usb 9-1: USB disconnect, device number 4
[  556.642756][T15630] fido_id[15630]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  556.690186][T15634] loop7: detected capacity change from 0 to 4096
[  557.633098][T15658] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4153'.
[  558.017261][T15670] netlink: 'syz.0.4157': attribute type 1 has an invalid length.
[  559.257050][T15700] loop7: detected capacity change from 0 to 2048
[  559.390083][T15700] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  559.471068][T15700] NILFS (loop7): mounting unchecked fs
[  559.531029][T15700] NILFS (loop7): recovery complete
[  559.599726][T15710] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  559.919626][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  559.919642][   T27] audit: type=1400 audit(1777976357.429:191): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=15718 comm="syz.8.4176"
[  560.024207][T15723] tipc: Started in network mode
[  560.049653][T15723] tipc: Node identity 00000000000000000040ffffe0000001, cluster identity 4711
[  560.081929][T15723] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  560.293917][T15728] loop8: detected capacity change from 0 to 64
[  561.616327][ T4891] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  561.831523][ T4891] usb 9-1: Using ep0 maxpacket: 16
[  561.841564][ T4891] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  561.890832][ T4891] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.919717][ T4891] usb 9-1: Product: syz
[  561.929876][ T4891] usb 9-1: Manufacturer: syz
[  561.950232][ T4891] usb 9-1: SerialNumber: syz
[  561.992487][ T4891] usb 9-1: config 0 descriptor??
[  562.008773][T15736] loop9: detected capacity change from 0 to 40427
[  562.026047][ T4891] visor 9-1:0.0: Sony Clie 3.5 converter detected
[  562.100825][T15736] F2FS-fs (loop9): invalid crc value
[  562.144528][T15736] F2FS-fs (loop9): Found nat_bits in checkpoint
[  562.306094][T15747] loop7: detected capacity change from 0 to 32768
[  562.399478][T15736] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  562.419590][ T4891] usb 9-1: clie_3_5_startup: get interface number bad return length: 0
[  562.488926][ T4891] visor: probe of 9-1:0.0 failed with error -5
[  562.525788][T15747] XFS (loop7): Mounting V5 Filesystem
[  562.628241][ T5324] usb 9-1: USB disconnect, device number 5
[  562.636250][T15747] XFS (loop7): Ending clean mount
[  562.838411][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  562.845255][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  562.873142][T10612] XFS (loop7): Unmounting Filesystem
[  563.561648][T15791] loop8: detected capacity change from 0 to 512
[  563.764063][T15791] EXT4-fs (loop8): 1 truncate cleaned up
[  563.769801][T15791] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  564.161299][T13597] EXT4-fs (loop8): unmounting filesystem.
[  564.481243][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  564.493434][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  564.501803][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  564.509816][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  564.523676][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  564.535928][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  564.802826][ T4276] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  564.845934][ T4326] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  565.089731][ T4359] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (4359)
[  565.602923][T15834] loop9: detected capacity change from 0 to 512
[  565.644791][T15834] EXT4-fs: Ignoring removed orlov option
[  565.687022][T15834] EXT4-fs: Ignoring removed mblk_io_submit option
[  565.738893][T15826] loop8: detected capacity change from 0 to 4096
[  565.758867][ T4326] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  565.850370][T15834] EXT4-fs error (device loop9): ext4_iget_extra_inode:4763: inode #15: comm syz.9.4205: corrupted in-inode xattr
[  565.909368][T15807] lo speed is unknown, defaulting to 1000
[  565.967168][T15834] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.4205: couldn't read orphan inode 15 (err -117)
[  565.989627][T15815] loop7: detected capacity change from 0 to 32768
[  566.001586][T15834] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  566.186308][T15815] XFS (loop7): Mounting V5 Filesystem
[  566.257408][T14029] EXT4-fs (loop9): unmounting filesystem.
[  566.287541][ T4326] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  566.431275][T15815] XFS (loop7): Ending clean mount
[  566.537112][ T4326] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  566.591454][ T4282] Bluetooth: hci0: command 0x0409 tx timeout
[  566.649920][T10612] XFS (loop7): Unmounting Filesystem
[  566.794420][T13597] ntfs3: loop8: ntfs_evict_inode r=5 failed, -22.
[  566.840749][T13597] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  567.134674][T15807] chnl_net:caif_netlink_parms(): no params data found
[  567.388584][T15861] loop9: detected capacity change from 0 to 128
[  567.457002][T15861] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  567.554147][T15861] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  567.590648][T15807] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.680892][T15807] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.689337][T15807] device bridge_slave_0 entered promiscuous mode
[  567.726552][T15861] EXT4-fs error (device loop9): swap_inode_boot_loader:378: inode #5: comm syz.9.4212: iget: checksum invalid
[  568.026530][T14029] EXT4-fs (loop9): unmounting filesystem.
[  568.141088][T15807] bridge0: port 2(bridge_slave_1) entered blocking state
[  568.172133][T15807] bridge0: port 2(bridge_slave_1) entered disabled state
[  568.200946][T15807] device bridge_slave_1 entered promiscuous mode
[  568.332757][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  568.354007][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  568.364659][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  568.382964][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  568.390591][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  568.401505][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  568.488662][T15807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  568.622699][T15890] binder: 15887:15890 ioctl c0046209 0 returned -22
[  568.665451][T15807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  568.681472][ T4278] Bluetooth: hci0: command 0x041b tx timeout
[  568.708126][T15886] loop9: detected capacity change from 0 to 4096
[  568.770793][T15881] lo speed is unknown, defaulting to 1000
[  568.967109][T15807] team0: Port device team_slave_0 added
[  569.161218][T14029] ntfs3: loop9: ntfs_evict_inode r=5 failed, -22.
[  569.196869][T14029] ntfs3: loop9: Mark volume as dirty due to NTFS errors
[  569.209742][T15807] team0: Port device team_slave_1 added
[  569.348412][T15903] loop8: detected capacity change from 0 to 512
[  569.425516][T15807] batman_adv: batadv0: Adding interface: batadv_slave_0
[  569.447796][T15903] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  569.460864][T15807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  569.552236][T15807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  569.664234][T15910] loop7: detected capacity change from 0 to 256
[  569.697648][T15910] exfat: Deprecated parameter 'utf8'
[  569.733835][T15807] batman_adv: batadv0: Adding interface: batadv_slave_1
[  569.756112][T15807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  569.766384][T15910] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  569.812993][T15903] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  569.909113][T15807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  569.944484][T15903] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  570.054939][ T4326] batman_adv: batadv0: Interface deactivated: gretap1
[  570.302771][ T4326] batman_adv: batadv0: Removing interface: gretap1
[  570.361792][T13597] EXT4-fs (loop8): unmounting filesystem.
[  570.437783][ T4278] Bluetooth: hci1: command 0x0409 tx timeout
[  570.614949][T15807] device hsr_slave_0 entered promiscuous mode
[  570.621179][T15906] loop9: detected capacity change from 0 to 32768
[  570.628728][T15807] device hsr_slave_1 entered promiscuous mode
[  570.665868][T15807] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  570.681398][T15807] Cannot create hsr debugfs directory
[  570.730577][T15928] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4229'.
[  570.753356][ T4278] Bluetooth: hci0: command 0x040f tx timeout
[  571.154978][T15881] chnl_net:caif_netlink_parms(): no params data found
[  571.710342][T15941] loop7: detected capacity change from 0 to 4096
[  571.837994][ T4326] device hsr_slave_0 left promiscuous mode
[  571.891634][ T4326] device hsr_slave_1 left promiscuous mode
[  571.953281][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  571.965485][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_0
[  572.010907][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  572.031358][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_1
[  572.056373][ T4326] bridge0: port 3(batadv0) entered disabled state
[  572.171965][ T4326] device bridge_slave_1 left promiscuous mode
[  572.190220][T10612] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22.
[  572.208955][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.221447][T10612] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  572.273024][ T4326] device bridge_slave_0 left promiscuous mode
[  572.279408][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.511614][ T4278] Bluetooth: hci1: command 0x041b tx timeout
[  572.562072][ T4326] device veth1_macvtap left promiscuous mode
[  572.568192][ T4326] device veth0_macvtap left promiscuous mode
[  572.592855][ T4326] device veth1_vlan left promiscuous mode
[  572.603221][ T4326] device veth0_vlan left promiscuous mode
[  572.696286][T15945] loop9: detected capacity change from 0 to 32768
[  572.759144][T15945] ocfs2: Slot 0 on device (7,9) was already allocated to this node!
[  572.786635][T15945] JBD2: Ignoring recovery information on journal
[  572.831379][ T4278] Bluetooth: hci0: command 0x0419 tx timeout
[  572.949940][T15966] loop7: detected capacity change from 0 to 128
[  572.986690][T15945] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  573.248397][T15945] OCFS2: ERROR (device loop9): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #65 has bad signature INODE01
[  573.369364][T15945] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  573.430841][T15945] OCFS2: File system is now read-only.
[  573.436457][T15945] (syz.9.4233,15945,0):ocfs2_search_one_group:1684 ERROR: status = -30
[  573.480804][T15945] (syz.9.4233,15945,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30
[  573.489514][T15945] (syz.9.4233,15945,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  573.518920][T15945] (syz.9.4233,15945,0):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  573.550874][T15945] (syz.9.4233,15945,0):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  573.581197][T15945] (syz.9.4233,15945,0):ocfs2_mknod_locked:639 ERROR: status = -30
[  573.589140][T15945] (syz.9.4233,15945,0):ocfs2_mknod:385 ERROR: status = -30
[  573.624517][T15945] (syz.9.4233,15945,0):ocfs2_mknod:502 ERROR: status = -30
[  573.636441][T15974] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  573.671096][T15945] (syz.9.4233,15945,0):ocfs2_mkdir:659 ERROR: status = -30
[  573.771109][T15945] (syz.9.4233,15945,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  573.923317][T14029] ocfs2: Unmounting device (7,9) on (node local)
[  574.078674][T15980] loop7: detected capacity change from 0 to 256
[  574.258394][T15952] loop8: detected capacity change from 0 to 32768
[  574.522135][T15952] XFS (loop8): Mounting V5 Filesystem
[  574.601448][ T4278] Bluetooth: hci1: command 0x040f tx timeout
[  574.667861][T15952] XFS (loop8): Ending clean mount
[  574.728024][   T27] audit: type=1800 audit(1777976372.239:192): pid=15952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4234" name="file1" dev="loop8" ino=9286 res=0 errno=0
[  574.786543][T13597] XFS (loop8): Unmounting Filesystem
[  575.396845][ T4326] team0 (unregistering): Port device team_slave_1 removed
[  575.496709][ T4326] team0 (unregistering): Port device team_slave_0 removed
[  575.643237][ T4326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  575.659639][T16006] loop8: detected capacity change from 0 to 512
[  575.720329][T16006] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  575.732302][T16006] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  575.758075][ T4326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  575.924375][T13597] EXT4-fs (loop8): unmounting filesystem.
[  576.272104][T16015] loop8: detected capacity change from 0 to 8192
[  576.281190][    C0] vkms_vblank_simulate: vblank timer overrun
[  576.390440][T16015] FAT-fs (loop8): error, invalid access to FAT (entry 0x00008115)
[  576.415576][T16015] FAT-fs (loop8): Filesystem has been set read-only
[  576.653554][ T4326] bond0 (unregistering): Released all slaves
[  576.681456][ T4278] Bluetooth: hci1: command 0x0419 tx timeout
[  576.727435][T16019] loop8: detected capacity change from 0 to 256
[  576.734835][T16019] exfat: Deprecated parameter 'utf8'
[  576.792695][T16019] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  576.856304][   T27] audit: type=1800 audit(1777976374.369:193): pid=16019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4255" name="file1" dev="loop8" ino=1048867 res=0 errno=0
[  576.936456][ T4317] lo speed is unknown, defaulting to 1000
[  577.219690][T16025] loop9: detected capacity change from 0 to 1024
[  577.314940][T15881] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.323474][   T27] audit: type=1800 audit(1777976374.829:194): pid=16025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4258" name="file1" dev="loop9" ino=20 res=0 errno=0
[  577.353073][T15881] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.371724][T15881] device bridge_slave_0 entered promiscuous mode
[  577.413760][T15881] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.421538][   T27] audit: type=1804 audit(1777976374.889:195): pid=16025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4258" name=2F6E6577726F6F742F3131332F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop9" ino=20 res=1 errno=0
[  577.525037][T15881] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.544757][T15881] device bridge_slave_1 entered promiscuous mode
[  577.621462][ T1177] hfsplus: b-tree write err: -5, ino 25
[  577.627345][ T1177] hfsplus: b-tree write err: -5, ino 4
[  577.650804][ T1177] hfsplus: b-tree write err: -5, ino 2
[  577.671337][ T1177] hfsplus: b-tree write err: -5, ino 20
[  578.001322][T16037] sp0: Synchronizing with TNC
[  578.025834][T15881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  578.349256][T15881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  578.890619][T16045] loop9: detected capacity change from 0 to 32768
[  579.000122][T16045] XFS (loop9): Mounting V5 Filesystem
[  579.098214][T15881] team0: Port device team_slave_0 added
[  579.110512][T15881] team0: Port device team_slave_1 added
[  579.284848][T15881] batman_adv: batadv0: Adding interface: batadv_slave_0
[  579.311396][T15881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  579.323391][T16045] XFS (loop9): Ending clean mount
[  579.410337][T15881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  579.418691][T16045] XFS (loop9): Quotacheck needed: Please wait.
[  579.504449][T15881] batman_adv: batadv0: Adding interface: batadv_slave_1
[  579.523571][T16045] XFS (loop9): Quotacheck: Done.
[  579.538512][T15881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  579.629733][T15881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  579.717501][T15807] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  579.740163][T14029] XFS (loop9): Unmounting Filesystem
[  579.841209][T15807] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  579.874032][T15881] device hsr_slave_0 entered promiscuous mode
[  579.921863][T15881] device hsr_slave_1 entered promiscuous mode
[  579.939812][T15881] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  579.960786][T15881] Cannot create hsr debugfs directory
[  579.969507][T15807] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  580.137245][ T4326] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.224607][T15807] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  580.352791][ T4326] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.516400][ T4326] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.729222][ T4326] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  581.106554][T16081] loop8: detected capacity change from 0 to 40427
[  581.132082][T16081] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  581.139989][T16081] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  581.206803][T16081] F2FS-fs (loop8): invalid crc_offset: 33558524
[  581.292505][T16081] F2FS-fs (loop8): Found nat_bits in checkpoint
[  581.328703][T16106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4277'.
[  581.504209][T16081] F2FS-fs (loop8): recover fsync data on readonly fs
[  581.542938][T16081] F2FS-fs (loop8): Try to recover 1th superblock, ret: -30
[  581.550244][T16081] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  581.666504][T15807] 8021q: adding VLAN 0 to HW filter on device bond0
[  581.882139][T16115] loop9: detected capacity change from 0 to 4096
[  581.903932][T16115] ntfs3: loop9: Different NTFS' sector size (1024) and media sector size (512)
[  581.958380][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  582.017231][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  582.114444][T15807] 8021q: adding VLAN 0 to HW filter on device team0
[  582.166905][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  582.182077][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  582.218886][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  582.226086][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  582.258457][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  582.282086][T16119] ntfs3: loop9: ntfs3_write_inode r=1e failed, -22.
[  582.316141][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  582.358871][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  582.409681][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.416927][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[  582.498948][T14029] ntfs3: loop9: ntfs_evict_inode r=1e failed, -22.
[  582.502929][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  582.527779][T14029] ntfs3: loop9: Mark volume as dirty due to NTFS errors
[  582.559460][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  582.607199][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  582.670841][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  582.699644][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  582.753141][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  582.813267][ T4326] tipc: Disabling bearer <eth:team0>
[  582.829709][ T4326] tipc: Left network mode
[  582.836042][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  582.859998][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  582.886189][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  582.903980][T15807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  582.924405][T15807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  582.944975][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  582.959387][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  583.474809][T16149] overlayfs: unrecognized mount option "\" or missing value
[  583.664933][T16155] netlink: 'syz.8.4293': attribute type 1 has an invalid length.
[  583.772931][T16159] loop7: detected capacity change from 0 to 512
[  583.805729][T16159] EXT4-fs: Ignoring removed nobh option
[  583.849441][T16159] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  583.981799][T16159] EXT4-fs warning (device loop7): ext4_xattr_inode_get:492: inode #11: comm syz.7.4294: ea_inode file size=0 entry size=6
[  584.041855][T16159] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #11: comm syz.7.4294: iget: bad extra_isize 90 (inode size 256)
[  584.087291][T16159] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.4294: error while reading EA inode 11 err=-117
[  584.131866][T16159] EXT4-fs (loop7): 1 orphan inode deleted
[  584.167996][T16159] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  584.467045][T10612] EXT4-fs (loop7): unmounting filesystem.
[  584.674204][T15807] 8021q: adding VLAN 0 to HW filter on device batadv0
[  584.861564][T16187] loop7: detected capacity change from 0 to 128
[  584.969484][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  584.991579][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  585.182133][ T4326] IPVS: stopping master sync thread 10803 ...
[  585.221514][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  585.278727][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  585.320551][T16195] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4307'.
[  585.499422][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  585.508846][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  585.530161][T15807] device veth0_vlan entered promiscuous mode
[  585.604534][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  585.622626][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  585.644718][T15807] device veth1_vlan entered promiscuous mode
[  585.671012][  T125] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  585.841748][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  585.860555][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  585.869561][  T125] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  585.889503][  T125] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.898035][  T125] usb 9-1: Product: syz
[  585.903729][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  585.904078][  T125] usb 9-1: Manufacturer: syz
[  585.917410][  T125] usb 9-1: SerialNumber: syz
[  585.931237][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  585.932524][  T125] usb 9-1: config 0 descriptor??
[  585.977991][T15807] device veth0_macvtap entered promiscuous mode
[  586.038048][ T4326] device hsr_slave_0 left promiscuous mode
[  586.064942][T16203] loop9: detected capacity change from 0 to 2048
[  586.072946][ T4326] device hsr_slave_1 left promiscuous mode
[  586.086114][T16203] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  586.101782][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  586.107465][T16203] NILFS (loop9): mounting unchecked fs
[  586.116896][T16197] loop7: detected capacity change from 0 to 32768
[  586.131158][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_0
[  586.154863][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  586.178747][T16203] NILFS (loop9): recovery complete
[  586.209267][T16197] 
[  586.209267][T16197]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  586.209267][T16197] 
[  586.213457][T16204] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  586.234558][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_1
[  586.254286][ T4326] bridge0: port 3(batadv0) entered disabled state
[  586.278154][T16197] ERROR: (device loop7): diWrite: ixpxd invalid
[  586.278154][T16197] 
[  586.288805][ T4326] device bridge_slave_1 left promiscuous mode
[  586.308651][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.321907][T16197] ERROR: (device loop7): txCommit: 
[  586.321907][T16197] 
[  586.343236][ T4326] device bridge_slave_0 left promiscuous mode
[  586.349571][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.377950][T16197] 
[  586.377950][T16197]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  586.377950][T16197] 
[  586.423839][T16197] 
[  586.423839][T16197]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  586.423839][T16197] 
[  586.518034][ T4326] device veth1_macvtap left promiscuous mode
[  586.547322][ T4326] device veth1_vlan left promiscuous mode
[  586.554494][T16206] loop9: detected capacity change from 0 to 512
[  586.563401][ T4326] device veth0_vlan left promiscuous mode
[  586.588161][T10612] 
[  586.588161][T10612]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  586.588161][T10612] 
[  586.601056][  T125] usb 9-1: Firmware version (0.0) predates our first public release.
[  586.609195][  T125] usb 9-1: Please update to version 0.2 or newer
[  586.626410][T10612] 
[  586.626410][T10612]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  586.626410][T10612] 
[  586.657575][T16206] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #16: comm syz.9.4311: corrupted inode contents
[  586.748998][T16206] EXT4-fs error (device loop9): ext4_dirty_inode:6156: inode #16: comm syz.9.4311: mark_inode_dirty error
[  586.843276][T16206] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #16: comm syz.9.4311: corrupted inode contents
[  586.866369][T16206] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #16: comm syz.9.4311: mark_inode_dirty error
[  586.896389][T16206] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #16: comm syz.9.4311: corrupted inode contents
[  586.931809][T16206] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem
[  586.955012][T16206] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #16: comm syz.9.4311: corrupted inode contents
[  586.970119][T16206] EXT4-fs error (device loop9): ext4_truncate:4325: inode #16: comm syz.9.4311: mark_inode_dirty error
[  586.989555][T16206] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem
[  587.026965][T16206] EXT4-fs (loop9): 1 truncate cleaned up
[  587.035015][T16206] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  587.048604][   T46] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  587.076981][   T46] EXT4-fs error (device loop9): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 1
[  587.093412][T16206] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  587.202191][   T27] audit: type=1800 audit(1777976384.719:196): pid=16206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4311" name="file2" dev="loop9" ino=16 res=0 errno=0
[  587.396663][T14029] EXT4-fs (loop9): unmounting filesystem.
[  587.411295][   T30] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  587.441825][   T30] EXT4-fs error (device loop9): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 1
[  588.445872][ T4326] team0 (unregistering): Port device team_slave_1 removed
[  588.523861][ T4326] team0 (unregistering): Port device team_slave_0 removed
[  588.582000][ T4326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  588.646483][ T4326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  589.099615][ T4326] bond0 (unregistering): Released all slaves
[  589.207769][T15881] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  589.219090][T15807] device veth1_macvtap entered promiscuous mode
[  589.235191][T16228] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4319'.
[  589.270793][T15881] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  589.344454][T15881] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  589.375661][T15881] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  589.391189][  T125] usb 9-1: USB disconnect, device number 6
[  589.425433][T15807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  589.456694][T16237] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4323'.
[  589.466045][T15807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.480815][T15807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  589.500990][T15807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.520815][T15807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  589.546376][T15807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.568726][T15807] batman_adv: batadv0: Interface activated: batadv_slave_0
[  589.621701][T16238] loop8: detected capacity change from 0 to 4096
[  589.654207][T16238] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512)
[  589.672197][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  589.703247][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  589.718676][T15807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  589.730508][T15807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.747908][T15807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  589.759524][T15807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.776227][T15807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  589.786986][T15807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  589.818620][T15807] batman_adv: batadv0: Interface activated: batadv_slave_1
[  589.880833][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  589.913194][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  589.947196][T15807] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  589.967318][T15807] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  589.983831][T15807] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  589.999749][T15807] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  590.064446][T13597] ntfs3: loop8: ntfs_sync_fs r=1a failed, -22.
[  590.149090][T13597] ntfs3: loop8: ntfs_evict_inode r=1a failed, -22.
[  590.213399][T13597] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  590.347480][T15881] 8021q: adding VLAN 0 to HW filter on device bond0
[  590.391469][   T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  590.406226][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  590.416439][   T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  590.442182][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  590.468693][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  590.512026][T15881] 8021q: adding VLAN 0 to HW filter on device team0
[  590.564193][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  590.573784][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  590.602447][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  590.611695][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.618832][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  590.626702][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  590.657536][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  590.711328][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  590.721696][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  590.742264][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  590.784425][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.791603][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  590.832386][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  590.889297][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  590.926178][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  590.968463][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  591.006631][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  591.030372][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  591.058280][T15881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  591.104877][T15881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  591.118977][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  591.134935][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  591.144447][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  591.155161][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  591.164804][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  591.199188][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  591.514447][T16266] tipc: Invalid UDP bearer configuration
[  591.514490][T16266] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  591.645321][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4338'.
[  592.155241][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  592.188711][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  592.212703][T16287] loop2: detected capacity change from 0 to 22
[  592.224483][T15881] 8021q: adding VLAN 0 to HW filter on device batadv0
[  592.261232][T16287] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  592.325937][T16287] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  592.446349][T16292] loop8: detected capacity change from 0 to 64
[  592.587181][   T27] audit: type=1800 audit(1777976390.099:197): pid=16292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4348" name="file1" dev="loop8" ino=21 res=0 errno=0
[  593.079783][T16310] loop9: detected capacity change from 0 to 1024
[  593.277547][   T30] hfsplus: b-tree write err: -5, ino 25
[  593.284009][   T30] hfsplus: b-tree write err: -5, ino 4
[  593.289597][   T30] hfsplus: b-tree write err: -5, ino 2
[  593.907141][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  593.932350][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  593.992555][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  594.013864][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  594.033808][T15881] device veth0_vlan entered promiscuous mode
[  594.047304][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  594.057937][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  594.078484][T15881] device veth1_vlan entered promiscuous mode
[  594.130082][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  594.155133][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  594.179717][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  594.227335][T16314] loop8: detected capacity change from 0 to 40427
[  594.241403][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  594.275897][T15881] device veth0_macvtap entered promiscuous mode
[  594.289966][T16314] F2FS-fs (loop8): invalid crc value
[  594.318613][T16314] F2FS-fs (loop8): Found nat_bits in checkpoint
[  594.335175][T15881] device veth1_macvtap entered promiscuous mode
[  594.406489][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.439575][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.476445][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.501389][T16314] F2FS-fs (loop8): Start checkpoint disabled!
[  594.507680][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.542984][T16314] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  594.586468][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.644645][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.685772][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.713953][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.755703][T15881] batman_adv: batadv0: Interface activated: batadv_slave_0
[  594.819627][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  594.832962][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  594.867350][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  594.890203][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  594.928291][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.956925][ T1177] kworker/u4:5: attempt to access beyond end of device
[  594.956925][ T1177] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  594.984252][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.043927][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  595.072940][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.109027][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  595.170831][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.209558][T15881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  595.270753][T15881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.316483][T15881] batman_adv: batadv0: Interface activated: batadv_slave_1
[  595.363743][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  595.378985][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  595.414832][T15881] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  595.449663][T15881] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  595.469433][T15881] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  595.506454][T15881] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  595.631675][ T4282] Bluetooth: hci2: command 0x0406 tx timeout
[  595.840461][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.876152][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  595.913172][T16369] loop2: detected capacity change from 0 to 1024
[  595.922935][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  595.983756][T16376] mkiss: ax0: crc mode is auto.
[  596.015702][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.065780][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.141657][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  596.364405][T16386] loop5: detected capacity change from 0 to 128
[  596.369323][ T4341] hfsplus: b-tree write err: -5, ino 25
[  596.377268][ T4341] hfsplus: b-tree write err: -5, ino 4
[  596.404858][ T4341] hfsplus: b-tree write err: -5, ino 2
[  596.425112][T16390] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4378'.
[  596.505631][T16386] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  596.621301][T16386] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  596.906830][T15881] EXT4-fs (loop5): unmounting filesystem.
[  597.291669][T16419] usb usb8: usbfs: process 16419 (syz.2.4388) did not claim interface 5 before use
[  598.113214][T16445] loop2: detected capacity change from 0 to 256
[  598.158343][T16401] loop7: detected capacity change from 0 to 32768
[  598.444786][T16457] netlink: 'syz.8.4403': attribute type 1 has an invalid length.
[  599.135013][T16478] usb usb9: usbfs: process 16478 (syz.5.4411) did not claim interface 0 before use
[  599.617137][   T27] audit: type=1326 audit(1777976397.129:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16494 comm="syz.8.4418" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4c39cdd9 code=0x7ffc0000
[  599.731295][   T27] audit: type=1326 audit(1777976397.189:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16494 comm="syz.8.4418" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c4c39cdd9 code=0x7ffc0000
[  599.817554][   T27] audit: type=1326 audit(1777976397.189:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16494 comm="syz.8.4418" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4c39cdd9 code=0x7ffc0000
[  599.938066][T16502] loop8: detected capacity change from 0 to 1024
[  599.950918][   T27] audit: type=1326 audit(1777976397.189:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16494 comm="syz.8.4418" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4c39cdd9 code=0x7ffc0000
[  600.045493][ T4326] hfsplus: b-tree write err: -5, ino 25
[  600.078045][ T4326] hfsplus: b-tree write err: -5, ino 4
[  600.107165][   T27] audit: type=1326 audit(1777976397.189:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16494 comm="syz.8.4418" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f6c4c39cdd9 code=0x7ffc0000
[  600.133827][ T4326] hfsplus: b-tree write err: -5, ino 2
[  600.234366][T16509] loop9: detected capacity change from 0 to 512
[  600.244638][   T27] audit: type=1326 audit(1777976397.189:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16494 comm="syz.8.4418" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c4c39cdd9 code=0x7ffc0000
[  600.301739][T16509] EXT4-fs (loop9): Test dummy encryption mode enabled
[  600.373675][T16513] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  600.397571][T16509] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  600.448330][T16509] EXT4-fs error (device loop9): htree_dirblock_to_tree:1083: inode #2: comm syz.9.4425: Directory hole found for htree leaf block 0
[  600.534309][T16509] EXT4-fs (loop9): Remounting filesystem read-only
[  600.739525][T14029] EXT4-fs (loop9): unmounting filesystem.
[  600.789614][T16484] loop7: detected capacity change from 0 to 32768
[  601.137406][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4433'.
[  602.333719][T16573] loop7: detected capacity change from 0 to 2048
[  602.400062][T16573] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  602.506936][T16578] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  602.683801][T16544] loop2: detected capacity change from 0 to 32768
[  602.697567][T16584] netlink: 'syz.8.4455': attribute type 38 has an invalid length.
[  602.832959][   T27] audit: type=1800 audit(1777976400.349:204): pid=16544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4438" name="file1" dev="loop2" ino=4 res=0 errno=0
[  603.002956][T16590] netlink: 'syz.7.4456': attribute type 298 has an invalid length.
[  603.089313][T16593] loop5: detected capacity change from 0 to 4096
[  603.263113][T16601] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  603.405575][T16593] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean
[  603.635083][ T4282] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  603.644674][ T4282] Bluetooth: hci0: Injecting HCI hardware error event
[  603.655625][ T4278] Bluetooth: hci0: hardware error 0x00
[  603.834020][T16615] loop8: detected capacity change from 0 to 256
[  603.937683][T16615] FAT-fs (loop8): Directory bread(block 64) failed
[  603.982903][T16615] FAT-fs (loop8): Directory bread(block 65) failed
[  604.010899][T16615] FAT-fs (loop8): Directory bread(block 66) failed
[  604.050829][T16615] FAT-fs (loop8): Directory bread(block 67) failed
[  604.057553][T16615] FAT-fs (loop8): Directory bread(block 68) failed
[  604.100857][T16615] FAT-fs (loop8): Directory bread(block 69) failed
[  604.107643][T16615] FAT-fs (loop8): Directory bread(block 70) failed
[  604.149295][T16615] FAT-fs (loop8): Directory bread(block 71) failed
[  604.199762][T16615] FAT-fs (loop8): Directory bread(block 72) failed
[  604.240560][T16615] FAT-fs (loop8): Directory bread(block 73) failed
[  604.708175][T16644] loop2: detected capacity change from 0 to 512
[  604.752529][T16644] EXT4-fs: Ignoring removed nomblk_io_submit option
[  604.893499][T16644] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  604.929758][T16644] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  605.165233][T15807] EXT4-fs (loop2): unmounting filesystem.
[  605.567865][T16661] loop2: detected capacity change from 0 to 4096
[  605.687344][T16661] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  605.808683][T16642] loop7: detected capacity change from 0 to 32768
[  605.871404][ T4278] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  606.021731][T15807] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  606.049143][T16642] JBD2: Ignoring recovery information on journal
[  606.237532][T16642] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  606.452481][T16647] loop8: detected capacity change from 0 to 40427
[  606.504432][T16647] F2FS-fs (loop8): invalid crc value
[  606.579291][T16647] F2FS-fs (loop8): Found nat_bits in checkpoint
[  606.829696][T16647] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  607.195642][T16703] loop9: detected capacity change from 0 to 1024
[  607.207622][T10612] ocfs2: Unmounting device (7,7) on (node local)
[  607.369782][T16703] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  607.439375][T16703] EXT4-fs (loop9): orphan cleanup on readonly fs
[  607.526911][T16703] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.4497: Invalid inode table block 0 in block_group 0
[  607.571885][T16703] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  607.614883][T16679] loop5: detected capacity change from 0 to 32768
[  607.634682][T16703] EXT4-fs error (device loop9): ext4_quota_write:7253: inode #3: comm syz.9.4497: mark_inode_dirty error
[  607.703180][T16703] Quota error (device loop9): write_blk: dquota write failed
[  607.801368][T16703] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[  607.861701][T16703] EXT4-fs error (device loop9): ext4_acquire_dquot:6841: comm syz.9.4497: Failed to acquire dquot type 0
[  607.895801][T16679] XFS (loop5): Mounting V5 Filesystem
[  607.932728][T16703] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.4497: Invalid inode table block 0 in block_group 0
[  607.973505][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4502'.
[  608.025596][T16703] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  608.083421][T16679] XFS (loop5): Ending clean mount
[  608.106083][T16679] XFS (loop5): Quotacheck needed: Please wait.
[  608.116679][T16703] EXT4-fs error (device loop9): ext4_ext_truncate:4460: inode #15: comm syz.9.4497: mark_inode_dirty error
[  608.180637][T16703] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.4497: Invalid inode table block 0 in block_group 0
[  608.257936][T16703] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  608.293087][T16703] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem
[  608.331995][T16703] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.4497: Invalid inode table block 0 in block_group 0
[  608.396163][T16679] XFS (loop5): Quotacheck: Done.
[  608.422867][T16703] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  608.495784][T16703] EXT4-fs error (device loop9): ext4_truncate:4325: inode #15: comm syz.9.4497: mark_inode_dirty error
[  608.543203][T16703] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem
[  608.585099][T16715] loop2: detected capacity change from 0 to 32768
[  608.605098][T15881] XFS (loop5): Unmounting Filesystem
[  608.635213][T16703] EXT4-fs (loop9): 1 truncate cleaned up
[  608.698448][T16703] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  608.707273][T16715] XFS (loop2): Mounting V5 Filesystem
[  608.837301][T16715] XFS (loop2): Ending clean mount
[  608.897018][T16715] XFS (loop2): Quotacheck needed: Please wait.
[  608.951767][T14029] EXT4-fs (loop9): unmounting filesystem.
[  609.137073][T16715] XFS (loop2): Quotacheck: Done.
[  609.368734][T15807] XFS (loop2): Unmounting Filesystem
[  609.532019][T16753] loop8: detected capacity change from 0 to 4096
[  609.703119][T16758] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  609.715725][T16730] loop7: detected capacity change from 0 to 32768
[  609.886516][   T27] audit: type=1326 audit(1777976407.399:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16761 comm="syz.5.4506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f038f99cdd9 code=0x0
[  609.915047][T16730] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9
[  610.199400][ T4359] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9
[  610.321457][T10822] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  610.508315][T16776] loop7: detected capacity change from 0 to 512
[  610.515469][T10822] usb 9-1: Using ep0 maxpacket: 32
[  610.533000][T10822] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  610.575669][T10822] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  610.586474][T16776] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  610.621293][T10822] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.640555][T10822] usb 9-1: Product: syz
[  610.657844][T10822] usb 9-1: Manufacturer: syz
[  610.683785][T10822] usb 9-1: SerialNumber: syz
[  610.697683][T16776] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  610.732922][T10822] usb 9-1: config 0 descriptor??
[  610.738760][T16766] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  610.762130][T10822] hub 9-1:0.0: bad descriptor, ignoring hub
[  610.768611][T10822] hub: probe of 9-1:0.0 failed with error -5
[  610.827349][T10822] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input29
[  611.043163][ T5205] usb 9-1: USB disconnect, device number 7
[  611.043205][    C1] usbtouchscreen 9-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  611.499320][T16795] loop2: detected capacity change from 0 to 4096
[  611.574146][T16801] loop9: detected capacity change from 0 to 256
[  611.688015][T16801] FAT-fs (loop9): Directory bread(block 64) failed
[  611.721423][T16801] FAT-fs (loop9): Directory bread(block 65) failed
[  611.728125][T16801] FAT-fs (loop9): Directory bread(block 66) failed
[  611.786664][T16801] FAT-fs (loop9): Directory bread(block 67) failed
[  611.829144][T16801] FAT-fs (loop9): Directory bread(block 68) failed
[  611.856504][T16801] FAT-fs (loop9): Directory bread(block 69) failed
[  611.884202][T16801] FAT-fs (loop9): Directory bread(block 70) failed
[  611.904378][T16801] FAT-fs (loop9): Directory bread(block 71) failed
[  611.941483][T16801] FAT-fs (loop9): Directory bread(block 72) failed
[  611.980844][T16801] FAT-fs (loop9): Directory bread(block 73) failed
[  612.503083][T16812] loop2: detected capacity change from 0 to 4096
[  612.522708][T16787] loop7: detected capacity change from 0 to 32768
[  612.529586][T16814] loop8: detected capacity change from 0 to 1024
[  612.609503][T16820] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  612.667678][T16812] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean
[  612.707688][ T1177] hfsplus: b-tree write err: -5, ino 25
[  612.720913][ T1177] hfsplus: b-tree write err: -5, ino 4
[  612.726890][ T1177] hfsplus: b-tree write err: -5, ino 2
[  612.742689][T16787] XFS (loop7): Mounting V5 Filesystem
[  612.751950][T16812] NILFS (loop2): nilfs_sufile_do_free: segment 13 is already clean
[  612.806749][T16797] loop5: detected capacity change from 0 to 40427
[  612.870141][T16787] XFS (loop7): Ending clean mount
[  612.888993][T16787] XFS (loop7): Quotacheck needed: Please wait.
[  612.905625][T16797] F2FS-fs (loop5): invalid crc value
[  612.957709][T16797] F2FS-fs (loop5): Found nat_bits in checkpoint
[  613.035890][T16787] XFS (loop7): Quotacheck: Done.
[  613.242766][T16797] F2FS-fs (loop5): Start checkpoint disabled!
[  613.280542][T16797] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  613.292575][T10612] XFS (loop7): Unmounting Filesystem
[  613.351424][ T5205] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  613.551127][ T5205] usb 10-1: Using ep0 maxpacket: 32
[  613.562113][ T5205] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  613.622955][ T5205] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[  613.673804][ T5205] usb 10-1: config 0 interface 0 has no altsetting 0
[  613.710872][ T5205] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  613.748713][ T5205] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.797639][ T5205] usb 10-1: config 0 descriptor??
[  614.228996][ T5205] corsair-psu 0003:1B1C:1C09.002C: unknown main item tag 0x0
[  614.254707][ T5205] corsair-psu 0003:1B1C:1C09.002C: unknown main item tag 0x0
[  614.289622][ T5205] corsair-psu 0003:1B1C:1C09.002C: unknown main item tag 0x0
[  614.321453][ T5205] corsair-psu 0003:1B1C:1C09.002C: unknown main item tag 0x0
[  614.352014][ T5205] corsair-psu 0003:1B1C:1C09.002C: unknown main item tag 0x0
[  614.395447][ T5205] corsair-psu 0003:1B1C:1C09.002C: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.9-1/input0
[  614.522842][T16858] usb usb9: usbfs: process 16858 (syz.7.4535) did not claim interface 0 before use
[  614.564194][ T5205] corsair-psu 0003:1B1C:1C09.002C: unable to initialize device (-90)
[  614.611820][ T5205] corsair-psu: probe of 0003:1B1C:1C09.002C failed with error -90
[  614.654252][ T5205] usb 10-1: USB disconnect, device number 4
[  615.090561][T16860] fido_id[16860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  615.167743][T16872] mkiss: ax0: crc mode is auto.
[  615.291255][T16846] loop5: detected capacity change from 0 to 32768
[  615.411187][T16846] ERROR: (device loop5): dbAlloc: the hint is outside the map
[  615.411187][T16846] 
[  615.553977][T16846] read_mapping_page failed!
[  615.562940][   T27] audit: type=1326 audit(1777976413.079:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16883 comm="syz.9.4550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebe99cdd9 code=0x7ffc0000
[  615.584818][T16846] ERROR: (device loop5): txCommit: 
[  615.584818][T16846] 
[  615.650798][   T27] audit: type=1326 audit(1777976413.119:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16883 comm="syz.9.4550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebe99cdd9 code=0x7ffc0000
[  615.762131][   T27] audit: type=1326 audit(1777976413.119:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16883 comm="syz.9.4550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f8ebe99cdd9 code=0x7ffc0000
[  615.890854][   T27] audit: type=1326 audit(1777976413.119:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16883 comm="syz.9.4550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebe99cdd9 code=0x7ffc0000
[  615.913915][ T5205] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[  615.942407][T16894] loop2: detected capacity change from 0 to 256
[  615.949554][T16894] exfat: Deprecated parameter 'utf8'
[  616.013997][   T27] audit: type=1326 audit(1777976413.119:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16883 comm="syz.9.4550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ebe99cdd9 code=0x7ffc0000
[  616.042396][T16894] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  616.142058][ T5205] usb 10-1: unable to get BOS descriptor or descriptor too short
[  616.167027][   T27] audit: type=1326 audit(1777976413.129:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16883 comm="syz.9.4550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ebe95d60e code=0x7ffc0000
[  616.210098][ T5205] usb 10-1: not running at top speed; connect to a high speed hub
[  616.247718][ T5205] usb 10-1: config 4 has an invalid interface number: 147 but max is 0
[  616.291803][ T5205] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  616.309193][   T27] audit: type=1326 audit(1777976413.129:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16883 comm="syz.9.4550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ebe99ca6b code=0x7ffc0000
[  616.355378][ T5205] usb 10-1: config 4 has no interface number 0
[  616.386964][ T5205] usb 10-1: string descriptor 0 read error: -22
[  616.410716][   T27] audit: type=1326 audit(1777976413.129:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16883 comm="syz.9.4550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ebe99ca6b code=0x7ffc0000
[  616.432725][ T5205] usb 10-1: Dual-Role OTG device on HNP port
[  616.491826][ T5205] usb 10-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  616.541357][   T27] audit: type=1326 audit(1777976413.139:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16883 comm="syz.9.4550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ebe99ca6b code=0x7ffc0000
[  616.548991][ T5205] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38
[  616.647452][ T5205] usb 10-1: Found UVC 0.02 device <unnamed> (04f2:b746)
[  616.659471][T16908] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4556'.
[  616.675149][ T5205] usb 10-1: No valid video chain found.
[  616.681368][   T27] audit: type=1326 audit(1777976413.139:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16883 comm="syz.9.4550" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ebe99ca6b code=0x7ffc0000
[  616.716359][T16908] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4556'.
[  616.884513][T10822] usb 10-1: USB disconnect, device number 5
[  616.934817][T16913] loop2: detected capacity change from 0 to 512
[  616.974157][T16913] FAT-fs (loop2): Directory bread(block 199916) failed
[  617.030428][T16913] FAT-fs (loop2): Directory bread(block 199917) failed
[  617.071477][T16913] FAT-fs (loop2): Directory bread(block 199918) failed
[  617.094872][T16913] FAT-fs (loop2): Directory bread(block 199919) failed
[  617.110716][T16913] FAT-fs (loop2): Directory bread(block 199920) failed
[  617.138080][T16913] FAT-fs (loop2): Directory bread(block 199921) failed
[  617.154675][T16913] FAT-fs (loop2): Directory bread(block 199922) failed
[  617.181003][T16913] FAT-fs (loop2): Directory bread(block 199923) failed
[  617.362287][T16919] loop8: detected capacity change from 0 to 4096
[  617.387559][T16913] FAT-fs (loop2): FAT read failed (blocknr 128)
[  617.439832][T16919] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  617.494272][T16896] loop7: detected capacity change from 0 to 40427
[  617.561614][T16896] F2FS-fs (loop7): build fault injection attr: rate: 684, type: 0x3ffff
[  617.598001][T16896] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x35f7
[  617.682528][T16896] F2FS-fs (loop7): invalid crc value
[  617.721996][T16896] F2FS-fs (loop7): Found nat_bits in checkpoint
[  617.757578][T13597] ntfs3: loop8: ntfs_evict_inode r=5 failed, -22.
[  617.878479][T16929] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4565'.
[  617.946918][T16896] F2FS-fs (loop7): Start checkpoint disabled!
[  617.993622][T16896] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  618.167377][T16935] loop2: detected capacity change from 0 to 2048
[  618.242374][T16935] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  618.328964][T16935] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  618.388375][T16935] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  618.437591][T16935] UDF-fs: Scanning with blocksize 512 failed
[  618.477024][T16935] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  618.651296][ T1177] kworker/u4:5: attempt to access beyond end of device
[  618.651296][ T1177] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  619.660318][T16976] loop5: detected capacity change from 0 to 64
[  619.736946][T16949] loop9: detected capacity change from 0 to 32768
[  619.882867][T16949] JBD2: Ignoring recovery information on journal
[  620.024947][T16985] loop7: detected capacity change from 0 to 1024
[  620.069996][T16949] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  620.249622][   T46] hfsplus: b-tree write err: -5, ino 25
[  620.263968][   T46] hfsplus: b-tree write err: -5, ino 4
[  620.310916][   T46] hfsplus: b-tree write err: -5, ino 2
[  620.426160][T16996] Invalid ELF header magic: != ELF
[  620.545010][T14029] ocfs2: Unmounting device (7,9) on (node local)
[  620.812569][T17003] loop2: detected capacity change from 0 to 2048
[  620.875095][T17005] mkiss: ax0: crc mode is auto.
[  620.902495][T17009] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  621.525018][T17028] loop5: detected capacity change from 0 to 1024
[  621.772482][T10117] hfsplus: b-tree write err: -5, ino 25
[  621.783088][T10117] hfsplus: b-tree write err: -5, ino 4
[  621.788865][T10117] hfsplus: b-tree write err: -5, ino 2
[  621.970388][T17031] loop9: detected capacity change from 0 to 4096
[  622.157090][T17031] ntfs: volume version 3.1.
[  622.173441][T17007] loop7: detected capacity change from 0 to 32768
[  622.421302][T17007] UFO tlock:0xffffc9000286a3a8
[  622.787131][T17021] loop8: detected capacity change from 0 to 32768
[  622.898743][T17021] XFS (loop8): Mounting V5 Filesystem
[  623.119351][T17021] XFS (loop8): Ending clean mount
[  623.140095][T17021] XFS (loop8): Quotacheck needed: Please wait.
[  623.317081][T17021] XFS (loop8): Quotacheck: Done.
[  623.388166][   T27] kauditd_printk_skb: 24 callbacks suppressed
[  623.388183][   T27] audit: type=1800 audit(1777976420.899:240): pid=17021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4600" name="bus" dev="loop8" ino=9290 res=0 errno=0
[  623.515173][T13597] XFS (loop8): Unmounting Filesystem
[  624.275254][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  624.282314][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  624.307644][T17092] loop2: detected capacity change from 0 to 64
[  624.577805][T17101] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  624.695178][T17106] fuse: Unexpected value for 'default_permissions'
[  624.757017][ T4365] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[  624.967217][ T4365] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  625.016786][ T4365] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  625.045003][ T4365] usb 10-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  625.089425][ T4365] usb 10-1: config 0 interface 0 has no altsetting 0
[  625.122430][ T4365] usb 10-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  625.158154][ T4365] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.185065][ T4365] usb 10-1: config 0 descriptor??
[  625.510174][T17129] loop5: detected capacity change from 0 to 1024
[  625.612712][T17129] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  625.626252][ T4365] holtek 0003:1241:5015.002D: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.9-1/input0
[  625.651375][T17129] hfsplus: xattr searching failed
[  625.711033][ T4365] holtek 0003:1241:5015.002D: no inputs found
[  625.842245][ T4365] usb 10-1: USB disconnect, device number 6
[  625.885105][T10117] hfsplus: b-tree write err: -5, ino 25
[  625.891066][T10117] hfsplus: b-tree write err: -5, ino 4
[  625.913587][T17139] usb usb8: usbfs: process 17139 (syz.2.4641) did not claim interface 0 before use
[  625.930812][T10117] hfsplus: b-tree write err: -5, ino 2
[  626.132153][T17142] loop5: detected capacity change from 0 to 128
[  626.164263][T17135] fido_id[17135]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  626.227253][   T27] audit: type=1800 audit(1777976423.739:241): pid=17142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4642" name="file1" dev="loop5" ino=1048902 res=0 errno=0
[  626.616490][T17158] loop5: detected capacity change from 0 to 256
[  626.660126][T17158] exfat: Deprecated parameter 'utf8'
[  626.703978][T17158] exfat: Deprecated parameter 'utf8'
[  626.725517][T17152] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  626.801891][T17158] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  627.382406][T17178] loop2: detected capacity change from 0 to 4096
[  627.473152][T17185] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  628.122694][T17201] loop8: detected capacity change from 0 to 512
[  628.217800][T17201] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  628.263640][T17201] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  628.393593][T17201] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  628.599012][T17218] loop5: detected capacity change from 0 to 1024
[  628.711766][T13597] EXT4-fs (loop8): unmounting filesystem.
[  628.784398][T17222] device batadv0 entered promiscuous mode
[  628.847714][T17222] device macsec1 entered promiscuous mode
[  628.910309][   T30] hfsplus: b-tree write err: -5, ino 20
[  628.919706][T17222] device batadv0 left promiscuous mode
[  629.088136][T17189] loop9: detected capacity change from 0 to 32768
[  629.337886][T17189] XFS (loop9): Mounting V5 Filesystem
[  629.532846][T17189] XFS (loop9): Ending clean mount
[  629.549737][T17189] XFS (loop9): Quotacheck needed: Please wait.
[  629.699528][T17189] XFS (loop9): Quotacheck: Done.
[  629.762187][   T27] audit: type=1800 audit(1777976427.279:242): pid=17189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4662" name="bus" dev="loop9" ino=9290 res=0 errno=0
[  629.862930][T17260] loop8: detected capacity change from 0 to 256
[  629.973798][T14029] XFS (loop9): Unmounting Filesystem
[  630.021713][T17260] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d)
[  630.252085][T17263] loop7: detected capacity change from 0 to 4096
[  631.252724][T17296] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4697'.
[  631.317028][T17298] loop9: detected capacity change from 0 to 2048
[  631.382986][T17298] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  631.426060][T17298] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  631.875484][T17312] sctp: [Deprecated]: syz.8.4704 (pid 17312) Use of int in maxseg socket option.
[  631.875484][T17312] Use struct sctp_assoc_value instead
[  631.907991][T17318] loop5: detected capacity change from 0 to 8
[  632.094348][T17318] SQUASHFS error: Unable to read directory block [247:71]
[  632.297312][T17329] tipc: Started in network mode
[  632.308349][T17329] tipc: Node identity bbbbbb, cluster identity 4711
[  632.317121][T17329] tipc: Enabled bearer <eth:nr0>, priority 10
[  632.484618][T17327] loop7: detected capacity change from 0 to 4096
[  632.685468][T17341] loop9: detected capacity change from 0 to 512
[  632.835532][T17341] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  632.895834][T17341] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  632.995372][T17341] EXT4-fs error (device loop9): ext4_lookup:1858: inode #12: comm syz.9.4714: iget: bad i_size value: 2533274857506816
[  633.117503][ T4889] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  633.163473][T14029] EXT4-fs (loop9): unmounting filesystem.
[  633.288249][T17359] loop8: detected capacity change from 0 to 512
[  633.323027][ T4889] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  633.358222][T17359] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  633.377466][ T4889] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  633.418502][ T4889] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  633.430971][ T4365] tipc: Node number set to 3149642496
[  633.451341][ T4889] usb 3-1: config 0 interface 0 has no altsetting 0
[  633.465272][ T4889] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  633.469445][T17359] EXT4-fs (loop8): 1 truncate cleaned up
[  633.476896][ T4889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  633.516753][ T4889] usb 3-1: config 0 descriptor??
[  633.558080][T17359] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  633.724002][T13597] EXT4-fs (loop8): unmounting filesystem.
[  633.944806][ T4889] holtek 0003:1241:5015.002E: unbalanced collection at end of report description
[  633.981349][ T4889] holtek 0003:1241:5015.002E: parse failed
[  634.007998][ T4889] holtek: probe of 0003:1241:5015.002E failed with error -22
[  634.008281][T17379] loop5: detected capacity change from 0 to 764
[  634.022843][T17377] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  634.060890][T17377] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  634.105272][T17381] loop9: detected capacity change from 0 to 256
[  634.140231][T17381] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  634.168456][ T4889] usb 3-1: USB disconnect, device number 11
[  634.190449][T17381] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010364, chksum : 0x4400851b, utbl_chksum : 0xe619d30d)
[  634.278116][T17379] Symlink component flag not implemented
[  634.309893][T17379] Symlink component flag not implemented (116)
[  634.366658][T17388] netlink: 'syz.8.4731': attribute type 21 has an invalid length.
[  634.431038][T17388] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4731'.
[  634.829851][T17398] netlink: 336 bytes leftover after parsing attributes in process `syz.8.4735'.
[  634.892923][T17398] netlink: 156 bytes leftover after parsing attributes in process `syz.8.4735'.
[  635.549068][T17425] loop8: detected capacity change from 0 to 1024
[  635.660520][T17425] hfsplus: bad catalog entry type
[  635.864765][T10117] hfsplus: b-tree write err: -5, ino 25
[  635.870614][T10117] hfsplus: b-tree write err: -5, ino 4
[  635.892509][T10117] hfsplus: b-tree write err: -5, ino 2
[  636.115269][T17444] loop8: detected capacity change from 0 to 256
[  636.188510][T17444] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d)
[  636.329882][T17447] loop7: detected capacity change from 0 to 4096
[  636.384372][T17447] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512)
[  636.564899][T17457] loop2: detected capacity change from 0 to 256
[  636.598785][ T4282] Bluetooth: hci4: command 0x0406 tx timeout
[  636.687880][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4761'.
[  636.777410][T17457] FAT-fs (loop2): Directory bread(block 64) failed
[  636.825922][T17457] FAT-fs (loop2): Directory bread(block 65) failed
[  636.827315][T17461] netlink: set zone limit has 4 unknown bytes
[  636.866643][T17457] FAT-fs (loop2): Directory bread(block 66) failed
[  636.899860][T17457] FAT-fs (loop2): Directory bread(block 67) failed
[  636.957918][T17457] FAT-fs (loop2): Directory bread(block 68) failed
[  636.993626][T17457] FAT-fs (loop2): Directory bread(block 69) failed
[  637.066849][T17457] FAT-fs (loop2): Directory bread(block 70) failed
[  637.096294][T17457] FAT-fs (loop2): Directory bread(block 71) failed
[  637.141663][T17467] loop9: detected capacity change from 0 to 1024
[  637.156097][T17457] FAT-fs (loop2): Directory bread(block 72) failed
[  637.211298][T17457] FAT-fs (loop2): Directory bread(block 73) failed
[  637.360798][T17467] hfsplus: request for non-existent node 33423360 in B*Tree
[  637.400598][T17467] hfsplus: request for non-existent node 33423360 in B*Tree
[  637.761347][T17478] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  637.806898][T17478] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem
[  637.851370][T17485] netlink: 'syz.9.4769': attribute type 3 has an invalid length.
[  637.921886][T17454] loop5: detected capacity change from 0 to 32768
[  637.981323][ T4889] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  638.212391][ T4889] usb 9-1: config 220 has an invalid interface number: 76 but max is 2
[  638.231226][ T4889] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  638.291203][ T4889] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  638.348906][ T4889] usb 9-1: config 220 has no interface number 2
[  638.369204][ T4889] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  638.444814][ T4889] usb 9-1: config 220 interface 0 has no altsetting 0
[  638.481353][ T4889] usb 9-1: config 220 interface 76 has no altsetting 0
[  638.508679][ T4889] usb 9-1: config 220 interface 1 has no altsetting 0
[  638.531464][ T4889] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  638.571326][ T4889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.609982][ T4889] usb 9-1: Product: syz
[  638.630250][ T4889] usb 9-1: Manufacturer: syz
[  638.650562][ T4889] usb 9-1: SerialNumber: syz
[  638.702113][T17499] loop7: detected capacity change from 0 to 4096
[  638.763964][T17499] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512)
[  638.908693][ T4889] usb 9-1: Found UVC 7.01 device syz (8086:0b07)
[  638.926427][ T4889] usb 9-1: No valid video chain found.
[  638.951879][ T4889] usb 9-1: selecting invalid altsetting 0
[  639.023298][ T4889] usb 9-1: selecting invalid altsetting 0
[  639.029119][ T4889] usbtest: probe of 9-1:220.1 failed with error -22
[  639.120370][ T4889] usb 9-1: USB disconnect, device number 8
[  639.252996][T17511] loop9: detected capacity change from 0 to 2048
[  639.402315][T17511] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  639.480103][T17511] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  639.829531][T17509] loop5: detected capacity change from 0 to 32768
[  639.845789][T14029] EXT4-fs (loop9): unmounting filesystem.
[  639.990168][T17509] XFS (loop5): Mounting V5 Filesystem
[  640.018075][T17502] loop2: detected capacity change from 0 to 32768
[  640.059197][T17502] 
[  640.059197][T17502]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  640.059197][T17502] 
[  640.197713][T17509] XFS (loop5): Ending clean mount
[  640.423765][T15807] 
[  640.423765][T15807]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  640.423765][T15807] 
[  640.454431][T15807] 
[  640.454431][T15807]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  640.454431][T15807] 
[  640.469378][T15881] XFS (loop5): Unmounting Filesystem
[  640.651294][T10824] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[  640.860476][T10824] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  640.891450][T10824] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  640.936868][T10824] usb 10-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00
[  640.977758][T10824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.002988][T10824] usb 10-1: config 0 descriptor??
[  641.175537][T17522] loop7: detected capacity change from 0 to 32768
[  641.266533][T17522] XFS: ikeep mount option is deprecated.
[  641.462756][T10824] sigmamicro 0003:1C4F:0059.002F: unknown main item tag 0x3
[  641.518496][T10824] sigmamicro 0003:1C4F:0059.002F: unknown main item tag 0x0
[  641.565780][T10824] sigmamicro 0003:1C4F:0059.002F: unknown main item tag 0x0
[  641.594353][T10824] sigmamicro 0003:1C4F:0059.002F: unknown main item tag 0x0
[  641.624773][T10824] sigmamicro 0003:1C4F:0059.002F: unknown main item tag 0x0
[  641.689132][T10824] sigmamicro 0003:1C4F:0059.002F: unknown main item tag 0x0
[  641.731432][T10824] sigmamicro 0003:1C4F:0059.002F: unknown main item tag 0x0
[  641.759244][T10824] sigmamicro 0003:1C4F:0059.002F: unknown main item tag 0x0
[  641.790301][T10824] sigmamicro 0003:1C4F:0059.002F: hidraw0: USB HID v0.04 Device [HID 1c4f:0059] on usb-dummy_hcd.9-1/input0
[  641.837226][T10824] usb 10-1: USB disconnect, device number 7
[  641.881377][T17522] XFS (loop7): Mounting V5 Filesystem
[  641.922500][T17569] loop2: detected capacity change from 0 to 512
[  642.021621][T17569] EXT4-fs: Ignoring removed nobh option
[  642.099097][T17569] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  642.199637][T17569] EXT4-fs (loop2): 1 truncate cleaned up
[  642.222791][T17522] XFS (loop7): Ending clean mount
[  642.235222][T17569] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  642.271064][T17522] XFS (loop7): Quotacheck needed: Please wait.
[  642.316664][T17572] fido_id[17572]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  642.355814][T17569] EXT4-fs (loop2): resizing filesystem from 256 to 1 blocks
[  642.396570][T17522] XFS (loop7): Quotacheck: Done.
[  642.421081][T17569] EXT4-fs warning (device loop2): ext4_resize_fs:2051: can't shrink FS - resize aborted
[  642.646149][T15807] EXT4-fs (loop2): unmounting filesystem.
[  642.758091][T10612] XFS (loop7): Unmounting Filesystem
[  642.905198][T17593] loop2: detected capacity change from 0 to 64
[  642.950151][T17593] hfs: unable to locate alternate MDB
[  643.014220][T17593] hfs: continuing without an alternate MDB
[  643.354082][T17601] netlink: 'syz.5.4801': attribute type 3 has an invalid length.
[  643.387449][T17603] device macsec0 entered promiscuous mode
[  643.781158][T17610] loop5: detected capacity change from 0 to 512
[  643.784700][T17613] sg_write: process 596 (syz.8.4806) changed security contexts after opening file descriptor, this is not allowed.
[  643.876985][T17610] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  643.910872][T17610] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  644.151764][T15881] EXT4-fs (loop5): unmounting filesystem.
[  644.402329][    C1] sd 0:0:1:0: [sda] tag#5979 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  644.412839][    C1] sd 0:0:1:0: [sda] tag#5979 CDB: Read(6) 08 00 00 00 00 00
[  644.456292][T17634] loop7: detected capacity change from 0 to 2048
[  644.608913][T17634] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  644.639823][T17647] loop2: detected capacity change from 0 to 512
[  644.671340][T17634] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  644.696812][T17647] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  644.780832][T17647] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  645.003495][T10612] EXT4-fs (loop7): unmounting filesystem.
[  645.126716][T15807] EXT4-fs (loop2): unmounting filesystem.
[  645.637939][T17639] loop9: detected capacity change from 0 to 32768
[  645.672258][T17639] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 scanned by syz.9.4815 (17639)
[  645.763427][T17639] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  645.822025][T17639] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  645.851526][T17639] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  645.936249][T17639] BTRFS info (device loop9): use zstd compression, level 3
[  645.971642][T17639] BTRFS info (device loop9): using free space tree
[  646.203170][T17693] netlink: 452 bytes leftover after parsing attributes in process `syz.7.4831'.
[  646.233759][T17693] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4831'.
[  646.251387][T17639] BTRFS info (device loop9): enabling ssd optimizations
[  646.374250][T17703] loop5: detected capacity change from 0 to 1024
[  646.442093][   T27] audit: type=1800 audit(1777976443.959:243): pid=17703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4832" name="file1" dev="loop5" ino=20 res=0 errno=0
[  646.457027][T17703] syz.5.4832: attempt to access beyond end of device
[  646.457027][T17703] loop5: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  646.521520][   T27] audit: type=1800 audit(1777976443.999:244): pid=17639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4815" name="file1" dev="loop9" ino=260 res=0 errno=0
[  646.608425][T17663] loop2: detected capacity change from 0 to 32768
[  646.641590][T14029] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  646.678224][T17663] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.4822 (17663)
[  647.023073][T17709] loop7: detected capacity change from 0 to 1024
[  647.132286][T17709] EXT4-fs: Ignoring removed bh option
[  647.157350][ T4359] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop9 scanned by udevd (4359)
[  647.181623][T17663] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  647.221810][T17663] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  647.275061][T17709] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  647.314969][T17663] BTRFS info (device loop2): enabling ssd optimizations
[  647.358722][T17663] BTRFS info (device loop2): not using ssd optimizations
[  647.398208][T17663] BTRFS info (device loop2): turning off barriers
[  647.448809][T17663] BTRFS info (device loop2): using free space tree
[  647.642179][T17720] loop5: detected capacity change from 0 to 8192
[  647.665220][T17720] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  647.755947][T17720] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  647.765401][T17720] REISERFS (device loop5): using ordered data mode
[  647.772031][T17720] reiserfs: using flush barriers
[  647.853433][T17720] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  647.876037][T17678] loop8: detected capacity change from 0 to 40427
[  647.928189][T17678] F2FS-fs (loop8): Corrupted extension count (64 + 1 > 64)
[  647.996346][T17678] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  648.026868][T10612] EXT4-fs error (device loop7): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /476/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  648.133130][T17678] F2FS-fs (loop8): invalid crc value
[  648.172009][T10612] EXT4-fs (loop7): Remounting filesystem read-only
[  648.183126][T17720] REISERFS (device loop5): checking transaction log (loop5)
[  648.203846][T17678] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  648.214519][T10612] EXT4-fs error (device loop7): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /476/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  648.239394][T15807] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  648.401487][T10612] EXT4-fs (loop7): Remounting filesystem read-only
[  648.408633][T10612] EXT4-fs error (device loop7): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  648.429500][    C0] vkms_vblank_simulate: vblank timer overrun
[  648.605940][T15380] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop2 scanned by udevd (15380)
[  648.622353][T17678] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  648.629493][T17678] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  648.639022][T10612] EXT4-fs (loop7): Remounting filesystem read-only
[  648.658656][T10612] EXT4-fs warning (device loop7): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  648.704366][T10612] EXT4-fs error (device loop7): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /476/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  648.780381][T17744] f2fs_ckpt-7:8: attempt to access beyond end of device
[  648.780381][T17744] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  648.815983][T17720] REISERFS (device loop5): Using tea hash to sort names
[  648.846364][T17720] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  648.867755][T10612] EXT4-fs (loop7): Remounting filesystem read-only
[  648.897158][T10612] EXT4-fs error (device loop7): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /476/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  649.032380][T10612] EXT4-fs (loop7): Remounting filesystem read-only
[  649.066954][T10612] EXT4-fs error (device loop7): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  649.173510][T10612] EXT4-fs (loop7): Remounting filesystem read-only
[  649.209196][T10612] EXT4-fs warning (device loop7): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  649.294021][T10612] EXT4-fs error (device loop7): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /476/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  649.440718][T10612] EXT4-fs (loop7): Remounting filesystem read-only
[  649.460914][T10612] EXT4-fs error (device loop7): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /476/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  649.472566][T17760] tipc: Started in network mode
[  649.541347][T17760] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  649.550508][T17760] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  649.573340][T10612] EXT4-fs (loop7): Remounting filesystem read-only
[  649.584623][T10612] EXT4-fs error (device loop7): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  649.676293][T17762] loop5: detected capacity change from 0 to 512
[  649.683592][T17760] tipc: Enabled bearer <udp:syz0>, priority 10
[  649.708765][T10612] EXT4-fs (loop7): Remounting filesystem read-only
[  649.728366][T17762] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  649.761182][T10612] EXT4-fs warning (device loop7): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  649.829932][T10612] EXT4-fs error (device loop7): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /476/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  649.865312][T10612] EXT4-fs warning (device loop7): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  649.912233][T17762] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  649.920294][T17762] System zones: 1-12
[  649.981320][T10612] EXT4-fs warning (device loop7): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  650.032975][T10612] EXT4-fs warning (device loop7): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  650.032990][T17762] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.4842: corrupted in-inode xattr
[  650.123499][T10612] EXT4-fs warning (device loop7): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  650.181485][T10612] EXT4-fs warning (device loop7): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  650.255883][T10612] EXT4-fs warning (device loop7): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  650.275226][T17762] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.4842: couldn't read orphan inode 15 (err -117)
[  650.349090][T10612] EXT4-fs warning (device loop7): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  650.366323][T17762] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  650.671028][T17777] binfmt_misc: register: failed to install interpreter file ./file0
[  650.701472][ T4889] tipc: Node number set to 1
[  650.764360][T15881] EXT4-fs (loop5): unmounting filesystem.
[  650.992837][T17782] loop8: detected capacity change from 0 to 16
[  651.014293][T17782] erofs: (device loop8): mounted with root inode @ nid 36.
[  651.780198][T10117] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  651.865911][T17804] tipc: MTU too low for tipc bearer
[  652.026361][T10117] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.235041][T10117] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.411194][T10117] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.529365][T17822] loop9: detected capacity change from 0 to 1024
[  652.593052][T17802] loop2: detected capacity change from 0 to 32768
[  652.608707][T17822] EXT4-fs: Ignoring removed orlov option
[  652.632500][T17802] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.4857 (17802)
[  652.702142][T17822] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  652.742719][T17802] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  652.789178][T17802] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  652.800608][T17822] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  652.864957][T17802] BTRFS info (device loop2): using free space tree
[  653.096966][T14029] EXT4-fs (loop9): unmounting filesystem.
[  653.135883][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  653.166349][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  653.179659][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  653.189946][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  653.202784][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  653.210273][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  653.307270][T17858] loop5: detected capacity change from 0 to 512
[  653.335836][T17802] BTRFS info (device loop2): enabling ssd optimizations
[  653.370336][T10117] tipc: Left network mode
[  653.460400][T17858] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.4868: inode has both inline data and extents flags
[  653.551786][T17858] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.4868: couldn't read orphan inode 15 (err -117)
[  653.617333][T17858] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  653.645374][T15807] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  653.770192][T17866] Unsupported ieee802154 address type: 0
[  653.874004][T17870] loop8: detected capacity change from 0 to 512
[  653.897147][T17870] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  653.995313][T17870] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters
[  654.024345][T17870] Quota error (device loop8): write_blk: dquota write failed
[  654.031887][T17870] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  654.041906][T17870] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.4873: Failed to acquire dquot type 0
[  654.062674][T17870] EXT4-fs (loop8): 1 truncate cleaned up
[  654.068439][T17870] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  654.474454][T13597] EXT4-fs (loop8): unmounting filesystem.
[  654.504055][T15881] EXT4-fs (loop5): unmounting filesystem.
[  654.878831][T17894] loop9: detected capacity change from 0 to 4096
[  654.888174][T17894] ntfs: (device loop9): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  654.952943][T17894] ntfs: volume version 3.1.
[  655.093159][T17894] ntfs: (device loop9): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1251.  You might want to try to use the mount option nls=utf8.
[  655.121645][T17901] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4881'.
[  655.170973][T17901] netlink: 'syz.8.4881': attribute type 6 has an invalid length.
[  655.194940][T17894] ntfs: (device loop9): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  655.201125][T17901] netlink: 'syz.8.4881': attribute type 5 has an invalid length.
[  655.201147][T17901] netlink: 'syz.8.4881': attribute type 4 has an invalid length.
[  655.313129][ T4278] Bluetooth: hci3: command 0x0409 tx timeout
[  655.686966][T17851] chnl_net:caif_netlink_parms(): no params data found
[  655.880119][T17911] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4886'.
[  656.025946][T17918] loop9: detected capacity change from 0 to 1024
[  656.155845][T17898] loop2: detected capacity change from 0 to 32768
[  656.220878][ T4365] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  656.251214][ T4341] hfsplus: b-tree write err: -5, ino 25
[  656.257058][ T4341] hfsplus: b-tree write err: -5, ino 4
[  656.298133][ T4341] hfsplus: b-tree write err: -5, ino 2
[  656.420925][ T4365] usb 6-1: Using ep0 maxpacket: 16
[  656.436247][ T4365] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  656.451717][T17851] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.467736][T17851] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.506069][ T4365] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  656.518751][T17851] device bridge_slave_0 entered promiscuous mode
[  656.571964][ T4365] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  656.629342][ T4365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.647739][T17851] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.656453][T17851] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.680589][ T4365] usb 6-1: config 0 descriptor??
[  656.691055][T17851] device bridge_slave_1 entered promiscuous mode
[  656.811381][T10822] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  657.020611][T17934] sp0: Synchronizing with TNC
[  657.026170][T17937] sp0: Found TNC
[  657.039135][T10822] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  657.069945][T17936] loop8: detected capacity change from 0 to 4096
[  657.087671][T10822] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  657.102042][T17936] ntfs: (device loop8): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  657.125379][T10822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.141832][ T4365] ntrig 0003:1B96:0008.0030: item fetching failed at offset 3/7
[  657.143097][T17851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  657.160194][ T4365] ntrig 0003:1B96:0008.0030: parse failed
[  657.168749][T10822] usb 3-1: Product: syz
[  657.185279][T10822] usb 3-1: Manufacturer: syz
[  657.189943][T10822] usb 3-1: SerialNumber: syz
[  657.193547][ T4365] ntrig: probe of 0003:1B96:0008.0030 failed with error -22
[  657.219202][T10822] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  657.252822][T17936] ntfs: volume version 3.1.
[  657.328507][ T4317] usb 6-1: USB disconnect, device number 4
[  657.352150][T17936] ntfs: (device loop8): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp1251.  You might want to try to use the mount option nls=utf8.
[  657.387205][T17936] ntfs: (device loop8): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  657.390930][ T4278] Bluetooth: hci3: command 0x041b tx timeout
[  657.433271][T17851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  657.738247][T17947] loop8: detected capacity change from 0 to 512
[  657.773127][T17947] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  657.851130][T17947] EXT4-fs (loop8): 1 truncate cleaned up
[  657.859500][T17947] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  657.872654][T10822] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  657.889546][T10822] usb 3-1: USB disconnect, device number 12
[  657.979627][T17851] team0: Port device team_slave_0 added
[  657.999033][T17953] loop9: detected capacity change from 0 to 512
[  658.055928][T17953] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  658.137614][T17851] team0: Port device team_slave_1 added
[  658.145814][T17953] EXT4-fs (loop9): 1 truncate cleaned up
[  658.154010][T17953] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  658.189542][T10117] device hsr_slave_0 left promiscuous mode
[  658.254983][T13597] EXT4-fs (loop8): unmounting filesystem.
[  658.273899][T10117] device hsr_slave_1 left promiscuous mode
[  658.280508][T10117] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  658.338164][T10117] batman_adv: batadv0: Removing interface: batadv_slave_0
[  658.359720][T14029] EXT4-fs (loop9): unmounting filesystem.
[  658.403738][T10117] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  658.470888][T10117] batman_adv: batadv0: Removing interface: batadv_slave_1
[  658.520178][T17961] Bluetooth: MGMT ver 1.22
[  658.551618][T10117] device bridge_slave_0 left promiscuous mode
[  658.558014][T10117] bridge0: port 1(bridge_slave_0) entered disabled state
[  658.676928][T17968] loop5: detected capacity change from 0 to 512
[  658.736785][T17968] EXT4-fs: Ignoring removed oldalloc option
[  658.762278][T10117] device veth1_macvtap left promiscuous mode
[  658.769179][T10117] device veth0_macvtap left promiscuous mode
[  658.837338][T17968] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.4902: inode #1: comm syz.5.4902: iget: illegal inode #
[  658.853919][T17968] EXT4-fs (loop5): Remounting filesystem read-only
[  658.860503][T17968] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.4902: error while reading EA inode 1 err=-117
[  658.901453][T10117] device veth1_vlan left promiscuous mode
[  658.907353][T10117] device veth0_vlan left promiscuous mode
[  658.990408][T17968] EXT4-fs (loop5): Remounting filesystem read-only
[  659.000894][T17968] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.4902: inode #1: comm syz.5.4902: iget: illegal inode #
[  659.044393][T17968] EXT4-fs (loop5): Remounting filesystem read-only
[  659.075458][T17968] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.4902: error while reading EA inode 1 err=-117
[  659.158452][T17968] EXT4-fs (loop5): Remounting filesystem read-only
[  659.201966][T17968] EXT4-fs (loop5): 1 orphan inode deleted
[  659.207799][T17968] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  659.301752][T17968] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.4902: deleted inode referenced: 15
[  659.405245][T17968] EXT4-fs (loop5): Remounting filesystem read-only
[  659.442307][T17987] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.4902: deleted inode referenced: 15
[  659.471158][ T4278] Bluetooth: hci3: command 0x040f tx timeout
[  659.608751][T17987] EXT4-fs (loop5): Remounting filesystem read-only
[  659.712575][T15881] EXT4-fs (loop5): unmounting filesystem.
[  659.810883][    T7] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  660.010786][    T7] usb 3-1: Using ep0 maxpacket: 32
[  660.018207][    T7] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  660.061863][    T7] usb 3-1: config 0 interface 0 has no altsetting 0
[  660.090842][    T7] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  660.117699][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  660.159619][    T7] usb 3-1: config 0 descriptor??
[  660.604536][    T7] aureal 0003:0755:2626.0031: unknown main item tag 0x4
[  660.622085][    T7] aureal 0003:0755:2626.0031: collection stack underflow
[  660.689450][    T7] aureal 0003:0755:2626.0031: item 0 4 0 12 parsing failed
[  660.722182][    T7] aureal: probe of 0003:0755:2626.0031 failed with error -22
[  660.824068][T10822] usb 3-1: USB disconnect, device number 13
[  660.857940][T18017] loop9: detected capacity change from 0 to 4096
[  660.902445][T18017] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512)
[  660.935093][T18020] loop8: detected capacity change from 0 to 4096
[  661.025186][T18020] NILFS error (device loop8): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  661.045851][T18021] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  661.084850][T18020] Remounting filesystem read-only
[  661.394825][T18028] netlink: 277 bytes leftover after parsing attributes in process `syz.9.4923'.
[  661.550766][ T4278] Bluetooth: hci3: command 0x0419 tx timeout
[  662.112834][T18047] loop2: detected capacity change from 0 to 256
[  662.183305][T18047] FAT-fs (loop2): Directory bread(block 64) failed
[  662.189960][T18047] FAT-fs (loop2): Directory bread(block 65) failed
[  662.207680][T18047] FAT-fs (loop2): Directory bread(block 66) failed
[  662.244962][T18047] FAT-fs (loop2): Directory bread(block 67) failed
[  662.256753][T18047] FAT-fs (loop2): Directory bread(block 68) failed
[  662.297550][T18047] FAT-fs (loop2): Directory bread(block 69) failed
[  662.306824][T18047] FAT-fs (loop2): Directory bread(block 70) failed
[  662.350102][T18047] FAT-fs (loop2): Directory bread(block 71) failed
[  662.359939][T18047] FAT-fs (loop2): Directory bread(block 72) failed
[  662.376598][T18047] FAT-fs (loop2): Directory bread(block 73) failed
[  662.533198][T10824] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  662.622847][T10117] team0 (unregistering): Port device team_slave_1 removed
[  662.716191][T10117] team0 (unregistering): Port device team_slave_0 removed
[  662.731506][T10824] usb 9-1: Using ep0 maxpacket: 32
[  662.739729][T10824] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  662.750566][T10824] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  662.761453][T10824] usb 9-1: config 0 interface 0 has no altsetting 0
[  662.777647][T10824] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  662.787086][T10824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  662.795558][T10824] usb 9-1: Product: syz
[  662.800056][T10824] usb 9-1: Manufacturer: syz
[  662.808339][T10824] usb 9-1: SerialNumber: syz
[  662.825716][T10824] usb 9-1: config 0 descriptor??
[  662.848449][T10117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  662.924015][T10117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  663.273207][T10824] gs_usb 9-1:0.0: Couldn't get device config: (err=-71)
[  663.287128][T10824] gs_usb: probe of 9-1:0.0 failed with error -71
[  663.298639][T10824] usb 9-1: USB disconnect, device number 9
[  663.530386][T10117] bond0 (unregistering): Released all slaves
[  663.682219][T17851] batman_adv: batadv0: Adding interface: batadv_slave_0
[  663.689578][T17851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  663.862745][T17851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  663.931384][T17851] batman_adv: batadv0: Adding interface: batadv_slave_1
[  663.938424][T17851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  664.111981][T17851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  664.175263][T18071] loop8: detected capacity change from 0 to 256
[  664.282376][T18071] FAT-fs (loop8): Directory bread(block 64) failed
[  664.310858][T18071] FAT-fs (loop8): Directory bread(block 65) failed
[  664.340986][T18071] FAT-fs (loop8): Directory bread(block 66) failed
[  664.368828][T17851] device hsr_slave_0 entered promiscuous mode
[  664.375250][T18071] FAT-fs (loop8): Directory bread(block 67) failed
[  664.375378][T18071] FAT-fs (loop8): Directory bread(block 68) failed
[  664.375411][T18071] FAT-fs (loop8): Directory bread(block 69) failed
[  664.375511][T18071] FAT-fs (loop8): Directory bread(block 70) failed
[  664.375561][T18071] FAT-fs (loop8): Directory bread(block 71) failed
[  664.375636][T18071] FAT-fs (loop8): Directory bread(block 72) failed
[  664.375665][T18071] FAT-fs (loop8): Directory bread(block 73) failed
[  664.582590][T17851] device hsr_slave_1 entered promiscuous mode
[  664.593073][T17851] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  664.613604][T17851] Cannot create hsr debugfs directory
[  664.925922][T18090] loop9: detected capacity change from 0 to 256
[  664.975799][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4948'.
[  665.029715][T18094] device sit0 entered promiscuous mode
[  665.047571][T18090] FAT-fs (loop9): Directory bread(block 64) failed
[  665.064631][T18094] netlink: 'syz.2.4949': attribute type 1 has an invalid length.
[  665.078186][T18090] FAT-fs (loop9): Directory bread(block 65) failed
[  665.085516][T18090] FAT-fs (loop9): Directory bread(block 66) failed
[  665.111146][T18090] FAT-fs (loop9): Directory bread(block 67) failed
[  665.111690][T18094] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4949'.
[  665.177927][T18090] FAT-fs (loop9): Directory bread(block 68) failed
[  665.206442][T18090] FAT-fs (loop9): Directory bread(block 69) failed
[  665.281189][T18090] FAT-fs (loop9): Directory bread(block 70) failed
[  665.287805][T18090] FAT-fs (loop9): Directory bread(block 71) failed
[  665.360929][T18090] FAT-fs (loop9): Directory bread(block 72) failed
[  665.387679][T18090] FAT-fs (loop9): Directory bread(block 73) failed
[  665.585983][T18105] loop8: detected capacity change from 0 to 64
[  666.074668][T18116] loop5: detected capacity change from 0 to 1024
[  666.119199][T18116] hfsplus: request for non-existent node 3 in B*Tree
[  666.243852][T18116] hfsplus: request for non-existent node 3 in B*Tree
[  667.425423][T17851] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  667.482666][T17851] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  667.557839][T17851] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  667.604452][T17851] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  667.668388][T18161] loop2: detected capacity change from 0 to 1024
[  667.817509][T18161] hfsplus: bad catalog entry type
[  667.887271][T17851] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.937148][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  667.956125][ T1177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  667.989833][T17851] 8021q: adding VLAN 0 to HW filter on device team0
[  667.998001][   T11] hfsplus: b-tree write err: -5, ino 25
[  668.019481][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  668.028290][   T11] hfsplus: b-tree write err: -5, ino 4
[  668.044201][   T11] hfsplus: b-tree write err: -5, ino 2
[  668.050603][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  668.110082][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.117275][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[  668.175963][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  668.206575][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  668.257248][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  668.280912][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[  668.288119][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[  668.328877][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  668.352905][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  668.404844][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  668.427522][T18180] loop9: detected capacity change from 0 to 1024
[  668.464507][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  668.526552][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  668.535797][T18183] loop8: detected capacity change from 0 to 64
[  668.551116][T18180] syz.9.4979: attempt to access beyond end of device
[  668.551116][T18180] loop9: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  668.606458][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  668.658994][T18183] hfs: hfs: Invalid key length: 94
[  668.668089][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  668.711474][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  668.736266][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  668.797007][T17851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  668.839378][T17851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  668.861524][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  668.875363][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  668.922868][    T9] ------------[ cut here ]------------
[  668.928420][    T9] kernel BUG at fs/hfs/inode.c:449!
[  668.972288][    T9] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  668.978449][    T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0
[  668.985814][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  668.995930][    T9] Workqueue: writeback wb_workfn (flush-7:8)
[  669.001977][    T9] RIP: 0010:hfs_write_inode+0xa1a/0xa20
[  669.007562][    T9] Code: 87 ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 b0 0a 87 ff e9 47 fe ff ff e8 76 fe 35 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00
[  669.027214][    T9] RSP: 0018:ffffc900000e73a0 EFLAGS: 00010293
[  669.033318][    T9] RAX: ffffffff824c76da RBX: ffff8880569ec918 RCX: ffff88813fe70000
[  669.041315][    T9] RDX: 0000000000000000 RSI: ffffffff8cd25620 RDI: 0000000000000000
[  669.049323][    T9] RBP: ffffc900000e7530 R08: ffff88813fe70000 R09: 0000000000000003
[  669.057326][    T9] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  669.065320][    T9] R13: 1ffff9200001ce78 R14: 0000000000000000 R15: ffff8880569ec8d8
[  669.073318][    T9] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  669.082273][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  669.088886][    T9] CR2: 000055cb12497008 CR3: 000000006414c000 CR4: 00000000003506e0
[  669.096880][    T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  669.104867][    T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  669.112859][    T9] Call Trace:
[  669.116158][    T9]  <TASK>
[  669.119134][    T9]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  669.124531][    T9]  ? __writeback_single_inode+0x4ae/0x1160
[  669.130369][    T9]  ? __rwlock_init+0x140/0x140
[  669.135155][    T9]  __writeback_single_inode+0x75b/0x1160
[  669.140841][    T9]  writeback_sb_inodes+0xb30/0x1850
[  669.146175][    T9]  ? queue_io+0x5a0/0x5a0
[  669.150547][    T9]  ? rcu_is_watching+0x11/0xa0
[  669.155342][    T9]  wb_writeback+0x482/0xd50
[  669.159909][    T9]  ? percpu_ref_tryget+0x250/0x250
[  669.165051][    T9]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  669.171059][    T9]  ? _raw_spin_unlock_irq+0x1f/0x40
[  669.176272][    T9]  wb_workfn+0x423/0xee0
[  669.180548][    T9]  ? inode_wait_for_writeback+0x220/0x220
[  669.186316][    T9]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  669.192337][    T9]  ? read_lock_is_recursive+0x10/0x10
[  669.197749][    T9]  ? _raw_spin_unlock_irq+0x1f/0x40
[  669.202971][    T9]  ? process_one_work+0x7b0/0x1160
[  669.208102][    T9]  process_one_work+0x8a2/0x1160
[  669.213070][    T9]  ? worker_detach_from_pool+0x240/0x240
[  669.218754][    T9]  ? _raw_spin_lock_irq+0xb7/0xf0
[  669.223801][    T9]  ? _raw_spin_lock_irqsave+0x100/0x100
[  669.229386][    T9]  ? kthread_data+0x4b/0xc0
[  669.233922][    T9]  worker_thread+0xaa2/0x1270
[  669.238671][    T9]  kthread+0x29d/0x330
[  669.242764][    T9]  ? worker_clr_flags+0x1a0/0x1a0
[  669.247833][    T9]  ? kthread_blkcg+0xd0/0xd0
[  669.252459][    T9]  ret_from_fork+0x1f/0x30
[  669.256911][    T9]  </TASK>
[  669.259950][    T9] Modules linked in:
[  669.333087][    T9] ---[ end trace 0000000000000000 ]---
[  669.338695][    T9] RIP: 0010:hfs_write_inode+0xa1a/0xa20
[  669.345533][    T9] Code: 87 ff e9 09 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 54 fe ff ff 4c 89 f7 e8 b0 0a 87 ff e9 47 fe ff ff e8 76 fe 35 ff <0f> 0b 0f 1f 40 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00
[  669.367449][    T9] RSP: 0018:ffffc900000e73a0 EFLAGS: 00010293
[  669.376257][    T9] RAX: ffffffff824c76da RBX: ffff8880569ec918 RCX: ffff88813fe70000
[  669.387860][    T9] RDX: 0000000000000000 RSI: ffffffff8cd25620 RDI: 0000000000000000
[  669.398371][    T9] RBP: ffffc900000e7530 R08: ffff88813fe70000 R09: 0000000000000003
[  669.408498][    T9] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  669.418022][    T9] R13: 1ffff9200001ce78 R14: 0000000000000000 R15: ffff8880569ec8d8
[  669.428973][    T9] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  669.445919][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  669.452961][    T9] CR2: 00007f8ebe985f40 CR3: 0000000023965000 CR4: 00000000003506f0
[  669.463196][    T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  669.471979][    T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  669.480086][    T9] Kernel panic - not syncing: Fatal exception
[  669.486837][    T9] Kernel Offset: disabled
[  669.491174][    T9] Rebooting in 86400 seconds..