last executing test programs:

3m23.682891387s ago: executing program 1 (id=218):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c2)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x1000004})
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m23.514645631s ago: executing program 1 (id=221):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3)
ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0)

3m23.282612947s ago: executing program 1 (id=225):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000840)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000008c0)="05031600ffff140000004788031c08102c28a632590b0bf6c86326c1ed7a2254c302", 0xfcbe, 0x4, &(0x7f0000000900)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14)

3m23.191418979s ago: executing program 1 (id=229):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0xc17, &(0x7f0000001dc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

3m22.75889318s ago: executing program 1 (id=237):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)

3m22.076871066s ago: executing program 1 (id=243):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0xe}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x2}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0)

3m21.837769362s ago: executing program 32 (id=243):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0xe}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x2}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0)

2m28.450508018s ago: executing program 3 (id=952):
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000500000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54)
bind(r0, &(0x7f0000000300)=@generic={0x8, "ffff0000feff00"}, 0xc)

2m27.619893639s ago: executing program 3 (id=966):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008404, &(0x7f00000001c0)=ANY=[], 0x85, 0x6bb, &(0x7f0000003680)="$eJzs3ctvXFcZAPDvjsdjTyiJkyZtgirFaiRAWE38kAtm04AQ8qJCVVmwthInsTJJg+0it0LEPAobFl3kDygL71ggJPYWZcMGdt16WQnBppua1UX3MeMZe2Y8xo3HVn+/6vqe+zjnfPe75z7GbjQBfGktTkV1O5JYnHpzI1ve2Zpr7GzNPWqWI2IsIioR1WIWyedpmn4ccTuKKa5lK8vmks7Wn1xolp6tLLz9yWc7nxZL1XLK968crNfD75/22LBZTjEZESPl/Bg62rvTs71KMRs/rLmkdYRZwm40EwfDNhoRae7fz4o1P/37C60tberdah868oEzICmemwdMRJwrL/TsPaB4KraefGfX5rADAAAAgBNwYTd2YyPODzsOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEvK7/9PyqnSLE9G0vz+/1q5Lsry6XL9aLtvP684AAAAAAAAAOAEXd+N3fblNMn/5v9qvnA5//mVeDfWYjlW42ZsxFKsx3qsxkxETLRVrG0sra+vzrRqNv/PgIM1Z7vWnD0k0LFyXj/uEQMAAAAAAADAWfR5mqZ9d/hVLMb5EwsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGkKRp+jQiiWK6XM6TiahUI2I8ImrZfpsR/2yWz6prr0VsDzsIAAAAOIZ0wP0u7MZubMT5Vr0k/8z/Uv65fzzejcexHiuxHo1Yjrv57wKKT/2Vna25xs7W3KNsOtju9/5zpHDzFiNiJF/q1vPVfI963IuVfM3NuBPvRJLcjUpeM3M1i2U0ipgOxvXLLKbkjcLogJHdLefZkX9YzverHulYezriL1Mm8oyMtjIyXcaWZeNiMwPdM3HEs7O/p5motIK93NZLloh9B9GR8zcG7O9cOc+O57c9cj4c+zMx2zb6XtrLxHjXq+Ibf/njTx40Hj98cG9t6vQc0kGbXdaNlPPivlIvM/F0LxNzbZl4uf/oOzuZGMh0PiautJYX44fx45iKyXgrVmMlfhZLsR7LMRk/yEtL5XhO2i75tkxV2pq+3dHRW4dFUitHaHGyOmOKQ2J6Na97PlbiR/FO3I3leD3/bzZm4tsxH/Ox0HaGr/Q/w/lVX+lx1adf7Rr8jW+WhXpE/K6c5+73uL8Oegs/tiyvF9vy2hr1SXEmL3bchfeydGmALO2/N/6pfyjVr5WFrI9fR+dwGa6JfZmYacvEi/0z8Yf8trLWePxw9cHSk8G6u/RhWcjOwQf9nxJf0AN6UNl4udTqtnN0ZNteLLbl7yDt+aqVf3Ep6lUObLvS2lZcqZs9r9Ra+Q53sKXZfNvLXbeN52uutm3b/77VaL0PdbyvnJ5BCMAHtYhz3zpXq/+r/o/6R/Xf1B/U3xz//th3xl6pxejfRr9bnR75euWV5M/xUfxi7/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/1t77/2HS43G8uq+QpqmT3tsOsuF5teZnWCn116IGNYh1yLidGT+v2malmuS0xBP/0KaGYv0qNWTovDXiBisVjUium26Pvwk9LlpHPELK4HT6db6oye31t57/7WVR0v3l+8vP16Yn1+YXph/fe7WvZXG8nTxc9hRAs/D3kN/2JEAAAAAAAAAAAAAgzqJf07Qu/fxkzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4IxanIrqdiQxM31zOlve2ZprZFOzHPXmntWIqERE8vOI5OOI21FMMdHWXNKrn2crC29/8tnOp3ttVZv7V/rVG8xmOcVkRIyU8y+qvTvHbi9pHWGWsBvNxMGw/S8AAP//43ALlw==")
creat(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00')

2m27.205500399s ago: executing program 3 (id=973):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000380)={0x33, 0x29, 0x1, {0x10001, [{{0x1, 0x2, 0x4}, 0x100000000, 0x85, 0x10, './proc_mnt/file0'}]}}, 0x33)

2m26.975374794s ago: executing program 3 (id=963):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0xc17, &(0x7f0000001dc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

2m26.512906346s ago: executing program 3 (id=968):
r0 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000100), 0x4)
recvmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x38}, 0x22)
recvmsg$kcm(r0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/4096, 0x1000}, 0x0)

2m25.878597071s ago: executing program 3 (id=978):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r2, 0x200e0, 0x40}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xa6, 0x5}}]}, {0x4}]}]}, 0x38}, 0x1, 0xd, 0x0, 0x480c5}, 0x10)

2m25.696129886s ago: executing program 33 (id=978):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r2, 0x200e0, 0x40}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xa6, 0x5}}]}, {0x4}]}]}, 0x38}, 0x1, 0xd, 0x0, 0x480c5}, 0x10)

2m18.085163332s ago: executing program 2 (id=1042):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000b40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0)

2m17.645993793s ago: executing program 2 (id=1045):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0)

2m17.313052891s ago: executing program 2 (id=1047):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d3030303030303030303030303030000000000000dc599bad22eebebb0002372c6e6f6465000000000000000000390e76074346345e20ee423ffe932f8fd731d7e5109a66e338f494fcf14d7988148b1f0f97e8f0314b9b6754e68921c32ea2e5a4cdd0ead4e785cd5e181444ce9d9378443e18871897286c63f1775ef56c413fdb807b02d14dfbd6f233fbbbb2a7fb2947a9b78cf735c7db", @ANYRES32=0x0], 0x2, 0x6bb, &(0x7f0000001a40)="$eJzs3U9sHFcdB/DvbJx1Nkip26ZpQEi1GqmCRiR2ViVBQmpACOUQoQguvVqJ01jZpJXjorRCZAOUAydOqAcORSgcekIIIZUTajkjIXHhlHskbhwiBLiaP2uv7Y3/5I/XbT8faTxv5s177ze/nZndnU00AT63zr2W/f0UOXf8/M1y+e6dbu/une61QTnJZJJWMlHPUnSS4uPkbOopXyxXNt0VDxrnlXsfFhPvfdCtlyaaqdq+tVm7DUZu2U8OrCzsSzJdF/+77W439FdNVT8XV/t7SMVK3GXCjg0SB+O2vEF/tbK1ZfPtn7fAnnWrft/cYCo5mPrdtfwckObqsPWVYfw2vTb1dy8OAAAAeFJGfpcf9tT93M/NHNqdcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzoaifGVg0U2tQnk4xeP5/e+iZ+u0xh/uI3r1czb7/1LgDAQAAAAAAAIBH8sL93M/NHBosLxfVb/4vVguHq79fyFu5kfks5kRuZi5LWcpiZpNMDXXUvjm3tLQ4u7Hlr1K2XF5evtW0PDWy5am1cfXXBzrqXxps2AgAAAAAAAAAPrd+knOrv/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBeUCT76lk1HR6Up9KaSHIgSbuYXtm8PdZgH4O/jDsAAAAAePI6zfxQ8f+6sFxU3/mPVN/7D+StXM9SFrKUXuZzqboXUH/rb/293+3dvdO9Vk4bO/7Wv3YUR9Vj6nsPo0eeqbZ4LsnZaptz+W5+kOOZzoUsZiE/zFyWMp/pfKcqzaXIVHP3YurunU4GsW6M9+yapQvrY3thqFzGd7SKpJPLWahiO5GL7UHorWa7o0Oj/amdrBvxdpmd4tXGNnN0qZmXe/TLZr43TFV7vn8lIzNN7stsPD2c94253+Fxsn6k2bRW7kEdXh2lXFw/0kPl/GAzL3P98yeb8x3eSlubif4vyqXB0Xdk85wnX/3HRxeutK5fvXL5xvG9cxg9pEEmWs0x0R3KxPNbZaLIRxeu9MpM9B8hEwceJf7Hp91ko76K1lfL2tZXyxertoeykO/ljVzKfE5nJrM5k5l8I6fSzamhvD63eV6rc621s3Pt2FeaQif/Wa49lqRs3+SDKsq8Pj2U1+Er3VRVN7xmNUvPbCNLRTujs/TPkaFMfKkplGP8dOgdZ/zWZ2J2KBPPbp6J3/yvfK1v9K5fXbwy9+Y2x3upmZen7btrr82/fSw7tHPN7pbHyzPli5X6bWP46Cjrnh3UrctXu/nFZaLpbE1dO9X5XNdtdaaWPR25Paqnuu75oaBX67pV3dGhCNZ8yskb6a18CgFgDzv48sF2517nb533Oz/rXOmcP/DtyTOTX25n/18n/rzv963ftb5ZvJz38+McGnekAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwWXDj7XeuzvV684t7sJDWY+7w9siqQSrqNe29se+f1sLkZkfUH5Js0rw9jpg7SfZE6jKxC2NNZkTV+ZU1naS1Ek+Sq3vkAXfAk3By6dqbJ2+8/c7XFq7NvT7/+vz1U2dOv3q6+/XZWycvL/TmZ+q/444SeBJWPwZsv80Dn5cKAAAAAAAAAAAA7Ird+O8NI4Yt+mPYVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODT6dxr2d9PkdmZEzPl8t073V45DcqrW04kaSUpfpQUHydnU0+ZGuqueNA4r9z78NcvvfdBd7WvicH2rXXt/vjv5eUd7kW/mTKdZF8z39rkA9Z31vR3cai//g4DqxUre1gm7NggcTBunwQAAP//DTkOGw==")
creat(&(0x7f00000036c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a6)
syz_mount_image$vfat(&(0x7f00000037c0), &(0x7f0000003800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399442c, 0x0, 0x3, 0x0, &(0x7f0000003880))
rmdir(&(0x7f00000038c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

2m16.744087255s ago: executing program 2 (id=1052):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0xc17, &(0x7f0000001dc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

2m15.562844464s ago: executing program 2 (id=1054):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4)

2m13.720816539s ago: executing program 2 (id=1065):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0)
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

2m13.464275525s ago: executing program 34 (id=1065):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0)
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

1m15.2306462s ago: executing program 4 (id=1702):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c61677300070200000000020000000002000000000802000000000200000000", 0x45)

1m15.169769721s ago: executing program 4 (id=1703):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000200)={0x4, 0x0, [{0x2, 0x0, 0x0, 0x5, 0x2de}, {0x76b48f433226e54c, 0x5, 0x4, 0x0, 0xcdd, 0x2, 0x810000}, {0xc0000000, 0x0, 0x4, 0x0, 0x0, 0x1}, {0xd, 0x3, 0x6, 0x10, 0x0, 0xa, 0x7fe}]})

1m15.099238283s ago: executing program 4 (id=1706):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x5, 0x0, "16"}, @NL80211_BAND_60GHZ={0x4, 0x11}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4048840)

1m15.057781374s ago: executing program 4 (id=1708):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000004, &(0x7f0000002000)=ANY=[], 0xfc, 0x5520, &(0x7f0000000380)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2888004, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0))

1m13.787828535s ago: executing program 4 (id=1721):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sec\x00', &(0x7f0000000240)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)="3c6b65726e656c3e202f6e5c615f646f013df0acaa2ca2074c9341f853bc1d6d61696e0a", 0x24)

1m11.881565102s ago: executing program 4 (id=1743):
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="03000000000000000a004e240000000cff"], 0x110)

1m11.638857828s ago: executing program 35 (id=1743):
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="03000000000000000a004e240000000cff"], 0x110)

27.134595487s ago: executing program 7 (id=2422):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x20002})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x52, 0x0, &(0x7f00000001c0)="b461802305624431ed3373010000003d2600906919d5d5fe00c6fc7ef8eef9757a601bee936390009c5bbd000000003632b69f0eb206f51005002818f2980660abbc6f6322cbfac48000d75bfab0cd655ba6", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffefffc}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

26.969897911s ago: executing program 7 (id=2425):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x7}, &(0x7f00000000c0)=0x8)

26.844612273s ago: executing program 7 (id=2429):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102001, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000002c0)=0x40)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x2, 0x20000009, 0x4, 0x7, 0x19, "07ded6c2992e7b76271749b420a2c6193eb48d"})
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x4a3, 0x20063f1, 0x4, 0xffffffff, 0x7e, "f9b70000000200000013001c00", 0xffffffff, 0x6})

26.730673596s ago: executing program 7 (id=2432):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030362c626172726965722c6e6f626172726965722c736d61636b66737472616e736d7574653d55dac73dddd1aa0ff491f57216572f1e671a989f42c64dc0b65d67d4250567573bb5e8d8c2d916d55de0fad0693e50202f126e0e71e930d123c47bc4a1d2ab46e52a07fd8ca501f330abb8b07d3a5364154ec1faf99b6a9779abe230ce8f5a290ef9442c7569643c", @ANYRES8, @ANYBLOB="101500000000", @ANYRES32, @ANYRESDEC, @ANYRES64], 0x1, 0x6fa, &(0x7f00000016c0)="$eJzs3TtoJOcdAPD/rHZXuwqcdfY9nGCw8IETInInnZATpcklhKDCBOMUqcWdzidupTOSHHRHiOU8+hSuUjmFOpMiOFWag6SOMQS3Kg0JblypU5jZmdWu9imdXhf/fmJ2vpnvOf/ZmdndQUwAX1uL01F+GkksTr+5lS7v7sw1xnbmxvPsRkRUI6IUUW7OIlmLLPdOPsU305V5+aRfPx+uLLz9+Ve7XzSXyvmUlS8NqtdDtXvVdj7FVESM5fNulT4tfnK4+4727vZtb1RJawvTgN0oAhd/eqZW4Zntd9lu5X387+x1UPWjHLfABZU0r5tdJiMmIqIW0bzq52eH0tmO7uRtn/cAAAAA4KjqR6/ywl7sxVZcOo3hAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP+r/Pn/ST6VivRUJMXz/6v5usjTF9DwByF+Nt6cPz39wQAAAAAAAADAqXt1L/ZiKy4Vy/tJds//tbZ7/N+I92IjlmM9bsZWLMVmbMZ6zEbEZFtD1a2lzc312axmxJUBNW/Hpz1q3u4/xjsnvM0AAAAAAAAAcMHVhuQ/rHSv+20sHtz/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiyCJGGvOsulKkZ6MUjkiahFRTcttR3xapJ8TSa+VT89+HAAAAPBMap2LSW2EOi+8H3uxFZeK5f0k+85/Lfu+XIv3Yi02YyU2oxHLcS//Dp1+6y/t7sw1dnfmVqM2t5qu/Pt/9zPNdn785ZGGnrUYzd8eevf8claiHvdjJVtzM+5GEs0uS3krL+/uzKXz1XRc2dg6fJCOKflRbsBoxtrS99KX659k6T92/opQPtImHsN4HpXeJrPcSisiM/nY0hqXiwj0jsTQvVMe2NNslFq//FwZ3FPvmH8wuPeJQ6V6/nJzLg5H4naUWnvoWlckKp2Vv/23j3/5oLH28MH9jemLs0k9vT+0xOFIzLVF4vrg98RzFYnhZrJIXG0tL8bP4hdRiS/H34r1WIlfxVJsxvJUkb+Uv5/T18nBkfpson3prWEjSY/Jqdb5q3tM0zEVHWOKqfhpllqK17J9eilWIolHEbEcb2R/t2O2dTY42MNXRzjqSyOcadvc+E42a4Up6v3L/mW0Jk9KGtfLbXFtP+dOZnntaw6i9GLPKBXXutGvR23K38oTaQu/G3h9OGuHIzHbFomX+r1fmiH9c/apYaOx9nD9wdK7I/b3ej5Pj6M/XKirRLqHX4xavnGXs9ckO6ZmsryXWlfYznhV8zsuTaWuvKutes0j9efxKO51HKnfj/mYj4Ws9LWsdKXripXmXW+11HkOT/PST1rl1o2d9s9bj6LR/DwEwMU28d2Jav0/9X/VP6r/vv6g/mbtJ+M/GH+lGpV/Vn5Ynhl7vfRK8tf4KH5z8P0fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4vo3HTx4uNRrL670Tpd5ZyaBaE7HU2C8eJNa35UOJJH9UzgiFk43HT/aHNjg4MZ4P75jVTzJRPK2xPat4mmJn4alTHEayfXh/1Ybvi+IpTyN0kXQFPK187DEXPR+sqVyAXXk4MXXM6u3blSeKN2xb4aO/e+u99tdYRPQqPOTEMfbMpx7gnN3aXH331sbjJ99bWV16Z/md5bXK/PzCzML8G3O37q80lmear20VTv3ht8BZaf840VKNiFeH1x3woFYAAAAAAAAAAADgFJ3F/0Kc9zYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz7fF6Sg/jSRmZ27OpMu7O3ONdCrSByXLEVGKiOTXEck/Iu5Ec4rJtuaSfv18uLLw9udf7X5x0Fa5KF+K2O5bbzTb+RRTETGWz0+qvbvD26seJMd7ZCetyKQBu1EEDs7b/wIAAP//xjfvbw==")
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000240)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0)

26.456551923s ago: executing program 7 (id=2438):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0)

25.644768313s ago: executing program 7 (id=2453):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0)

25.402045459s ago: executing program 36 (id=2453):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0)

3.120668224s ago: executing program 5 (id=2820):
setns(0xc9, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000010000000000fedbdf2508000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="14001a800c00020003000000000000000400020004003780"], 0x38}], 0x1}, 0x4000010)

2.86569231s ago: executing program 5 (id=2826):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20c00, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4d)

2.701465264s ago: executing program 5 (id=2829):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x4)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000004c0)=0xffff1884, 0x4)

1.779317507s ago: executing program 9 (id=2850):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write(r0, &(0x7f0000000300)='udp ', 0x4)

1.772309007s ago: executing program 5 (id=2852):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x10)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x42)
preadv(r0, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/205, 0xcd}], 0x1, 0x802e, 0x79654e17)

1.66348174s ago: executing program 5 (id=2855):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x1a9100, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

1.569987922s ago: executing program 9 (id=2858):
r0 = userfaultfd(0x801)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})

1.494963344s ago: executing program 9 (id=2861):
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000000), 0x8)

1.368665347s ago: executing program 9 (id=2864):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x4, @private1, 0x9}}, 0x7, 0x4, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c)

981.293066ms ago: executing program 6 (id=2879):
unshare(0x22020400)
r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0)
mq_notify(r0, &(0x7f00000003c0)={0x0, 0xd, 0x1, @thr={0x0, 0x0}})
mq_notify(r0, &(0x7f0000000300)={0x0, 0x2d, 0x1})

896.073508ms ago: executing program 6 (id=2882):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

837.7798ms ago: executing program 0 (id=2884):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/lo/statistics/tx_window_errors\x00', 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/100, 0x64)

761.355172ms ago: executing program 5 (id=2885):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000140), 0x2)
preadv(r0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000100)=""/24, 0x18}], 0x2, 0x5, 0x3)

756.758462ms ago: executing program 8 (id=2886):
r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000040), 0x342, 0x2)
r1 = getpid()
r2 = getpid()
write$damon_target_ids(r0, &(0x7f0000000340)={@void, [{' ', r1}, {' ', r2}, {}]}, 0x3f)

752.877672ms ago: executing program 6 (id=2887):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

705.240503ms ago: executing program 0 (id=2888):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x18, 0x37, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_PROTO_DOWN={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)

666.600494ms ago: executing program 6 (id=2889):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000)

642.633934ms ago: executing program 8 (id=2890):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @bcast, @bcast]}, 0x48)
connect$netrom(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48)

560.687467ms ago: executing program 0 (id=2891):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20020800}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='pim6reg\x00')

560.336907ms ago: executing program 6 (id=2892):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f00000002c0)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3", @ANYRESHEX], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}})

554.373107ms ago: executing program 8 (id=2893):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000040)='P', 0xfe1b}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x40)

510.614778ms ago: executing program 9 (id=2894):
syz_mount_image$nilfs2(&(0x7f0000000b80), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000003140)=ANY=[], 0x3, 0xa76, &(0x7f00000000c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2020c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0))
unlink(&(0x7f0000000300)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101243, 0x15)

456.112879ms ago: executing program 0 (id=2895):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x4c, r1, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x2000067}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0x40c2010)

391.874581ms ago: executing program 8 (id=2896):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

240.449504ms ago: executing program 0 (id=2897):
r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000900)=0x6)
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0x7, 0x7, 0x0})

240.105934ms ago: executing program 8 (id=2898):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043)

114.310947ms ago: executing program 0 (id=2899):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801)

57.527609ms ago: executing program 6 (id=2900):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000002, 0x4, 0x32, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x1, 0xfffe, 0x0, 0x9, 0x8a}, 0x9c)
sendto$inet6(r0, &(0x7f0000000340)="19", 0x1, 0x2004c101, &(0x7f0000000000)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7}, 0x1c)

15.8791ms ago: executing program 9 (id=2901):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd0"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x1f, 0x0, "fec34e77f1263643b52aa7beb3171ddb9cbe0cfef7c87cb4af8b03bc9f40e8d97a8de1e0af2e350dce1d05f076b9cb42ce8acf171c1499fd401e7e756a5653ea39b4ecd9805ee428eb40cef5df6ef362"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8)

0s ago: executing program 8 (id=2902):
syz_open_dev$dvb_frontend(0x0, 0x0, 0x2)
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002cbd70100400000004fc0000060001000500000008000900020000000800"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

kernel console output (not intermixed with test programs):

nd, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[  199.983005][ T4338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  199.991075][ T4338] usb 5-1: SerialNumber: syz
[  200.027315][ T4338] usb 5-1: config 0 descriptor??
[  200.089665][ T4338] usb-storage 5-1:0.0: USB Mass Storage device detected
[  200.123842][ T4338] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[  200.296360][ T8798] loop6: detected capacity change from 0 to 40427
[  200.323159][ T6581] usb 5-1: USB disconnect, device number 10
[  200.368703][ T8798] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  200.389962][   T26] audit: type=1400 audit(1792671990.166:27): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="/" pid=8861 comm="syz.5.1463" name="/" offset=33
[  200.408441][ T8798] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  200.442907][ T8798] F2FS-fs (loop6): invalid crc value
[  200.489683][ T8798] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  200.647261][ T8798] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  200.656686][ T8798] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  200.750990][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1471'.
[  200.759262][ T7076] attempt to access beyond end of device
[  200.759262][ T7076] loop6: rw=2049, want=40968, limit=40427
[  200.966902][ T5751] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  201.247657][ T8904] loop4: detected capacity change from 0 to 2048
[  201.269972][ T8890] loop7: detected capacity change from 0 to 32768
[  201.327303][ T8904] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  201.334215][ T5751] usb 1-1: config index 0 descriptor too short (expected 46, got 32)
[  201.371094][ T8904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  201.385244][ T5751] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  201.396185][ T5751] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.444938][ T5751] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  201.453235][   T21] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  201.475646][ T5751] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 0.00
[  201.485382][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.516076][ T8890] XFS (loop7): Mounting V5 Filesystem
[  201.631928][ T8890] XFS (loop7): Ending clean mount
[  201.707371][ T8923] loop5: detected capacity change from 0 to 256
[  201.730188][ T7414] XFS (loop7): Unmounting Filesystem
[  201.853243][   T21] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  201.878612][   T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.896912][   T21] usb 7-1: config 0 descriptor??
[  201.941804][   T21] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  201.979167][ T5751] usb 1-1: cannot create comm data receiver.
[  201.991526][ T5751] snd-usb-6fire: probe of 1-1:1.0 failed with error -8
[  201.998699][ T8931] batman_adv: Routing algorithm 'B' is not supported
[  202.095630][ T8937] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  202.105299][ T8937] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  202.143332][   T21] gp8psk: usb in 128 operation failed.
[  202.189437][ T4279] usb 1-1: USB disconnect, device number 10
[  202.403059][   T21] gp8psk: FW Version = 0.00.0 (0x0)  Build 2000/00/00
[  202.538056][ T8956] block2mtd: device name too long
[  202.623015][   T21] gp8psk: usb in 149 operation failed.
[  202.628984][   T21] gp8psk: failed to get FPGA version
[  202.653113][   T21] gp8psk: usb in 138 operation failed.
[  202.659362][   T21] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  202.679679][   T21] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  202.698255][   T21] usb 7-1: USB disconnect, device number 7
[  202.715509][ T4338] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  202.851689][   T26] audit: type=1326 audit(1792671992.626:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.4.1507" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a9d7c1559 code=0x0
[  203.002988][ T4338] usb 6-1: Using ep0 maxpacket: 8
[  203.076111][ T8979] tap0: tun_chr_ioctl cmd 2147767520
[  203.304104][ T4338] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64
[  203.314123][ T4338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  203.322563][ T4338] usb 6-1: Product: syz
[  203.327694][ T4338] usb 6-1: Manufacturer: syz
[  203.332477][ T4338] usb 6-1: SerialNumber: syz
[  203.345537][ T4338] usb 6-1: config 0 descriptor??
[  203.397217][ T4338] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  203.623146][ T4338] gspca_sn9c2028: read1 error -32
[  203.685423][ T4338] gspca_sn9c2028: read1 error -32
[  203.883094][ T9004] loop6: detected capacity change from 0 to 32768
[  203.939849][ T4338] usb 6-1: USB disconnect, device number 9
[  203.973486][ T9004] JBD2: Ignoring recovery information on journal
[  204.070574][ T9004] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  204.112258][ T9020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1527'.
[  204.159208][ T7076] ocfs2: Unmounting device (7,6) on (node local)
[  204.970828][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1537'.
[  205.636794][ T9043] loop5: detected capacity change from 0 to 40427
[  205.779412][ T9043] F2FS-fs (loop5): invalid crc value
[  205.830132][ T9043] F2FS-fs (loop5): Found nat_bits in checkpoint
[  205.937158][ T9092] loop4: detected capacity change from 0 to 128
[  205.963176][ T9043] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  206.024688][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1561'.
[  206.055858][ T9092] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  206.068651][ T9092] ext4 filesystem being mounted at /368/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  206.090320][ T9092] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes
[  206.174790][ T4936] attempt to access beyond end of device
[  206.174790][ T4936] loop5: rw=2049, want=45104, limit=40427
[  206.690070][ T9090] loop6: detected capacity change from 0 to 32768
[  206.813399][ T9090] JBD2: Ignoring recovery information on journal
[  206.914403][ T9090] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  207.030014][ T9111] loop4: detected capacity change from 0 to 32768
[  207.154741][ T9111] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  207.214824][ T7076] ocfs2: Unmounting device (7,6) on (node local)
[  207.233380][ T9111] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  207.312229][ T9132] loop0: detected capacity change from 0 to 512
[  207.416766][ T9132] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  207.429679][ T4185] ocfs2: Unmounting device (7,4) on (node local)
[  207.457573][ T9137] loop6: detected capacity change from 0 to 256
[  207.519631][ T9132] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  207.599416][ T5751] Bluetooth: hci0: command 0x0401 tx timeout
[  207.627231][ T9137] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  207.663668][ T9142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1577'.
[  207.683144][ T9132] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1574: bg 0: block 248: padding at end of block bitmap is not set
[  207.742999][ T9132] Quota error (device loop0): write_blk: dquota write failed
[  207.773043][ T9132] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  207.813212][ T9132] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1574: Failed to acquire dquot type 1
[  207.853130][ T9137] exFAT-fs (loop6): error, invalid size(size(72) > aligned(9223372036854777344)
[  207.853130][ T9137] 
[  207.854951][ T9131] loop5: detected capacity change from 0 to 32768
[  207.900686][ T9137] exFAT-fs (loop6): Filesystem has been set read-only
[  207.914947][ T9132] EXT4-fs (loop0): 1 truncate cleaned up
[  207.920752][ T9132] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  207.960844][ T9131] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1562 (9131)
[  208.095667][ T9131] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  208.166337][ T9131] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  208.179890][ T4615] Quota error (device loop0): remove_tree: Getting block too big (0 >= 6)
[  208.193251][ T4615] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 1
[  208.240561][ T9131] BTRFS info (device loop5): use zstd compression, level 3
[  208.263107][ T9131] BTRFS info (device loop5): using free space tree
[  208.281742][ T9131] BTRFS info (device loop5): has skinny extents
[  208.324508][ T9158] loop6: detected capacity change from 0 to 256
[  208.359299][ T9158] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d)
[  208.423078][ T6581] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  208.551980][ T9131] BTRFS info (device loop5): enabling ssd optimizations
[  208.580866][ T9179] netlink: 'syz.0.1587': attribute type 6 has an invalid length.
[  208.600552][   T26] audit: type=1800 audit(1792671998.376:29): pid=9131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1562" name="file0" dev="loop5" ino=258 res=0 errno=0
[  208.713096][ T6581] usb 5-1: Using ep0 maxpacket: 32
[  208.844534][ T6581] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  208.854740][ T6581] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.895330][ T6581] usb 5-1: config 0 descriptor??
[  208.946628][ T6581] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  208.988303][ T9190] pimreg: tun_chr_ioctl cmd 1074025677
[  208.996943][ T9190] pimreg: linktype set to 1
[  209.053041][ T5802] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  209.388944][ T5802] usb 1-1: not running at top speed; connect to a high speed hub
[  209.483008][ T5802] usb 1-1: config 0 has too many interfaces: 223, using maximum allowed: 32
[  209.491780][ T5802] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.546241][ T5802] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 223
[  209.566246][ T5802] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  209.586341][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.612384][ T5802] usb 1-1: config 0 descriptor??
[  209.674024][ T5802] usb 1-1: Found UVC 9.00 device <unnamed> (046d:0825)
[  209.751845][ T9201] loop5: detected capacity change from 0 to 32768
[  209.813088][ T6581] gspca_vc032x: reg_w err -71
[  209.817944][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.823752][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.829202][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.835061][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.840485][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.846253][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.851699][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.859220][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.864780][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.870490][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.876047][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.881698][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.887173][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.893484][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.899044][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.904822][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.914610][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.928595][ T6581] gspca_vc032x: I2c Bus Busy Wait 00
[  209.935718][ T6581] gspca_vc032x: Unknown sensor...
[  209.940954][ T6581] vc032x: probe of 5-1:0.0 failed with error -22
[  209.952744][ T6581] usb 5-1: USB disconnect, device number 11
[  210.030469][ T9201] XFS (loop5): Mounting V5 Filesystem
[  210.125537][ T9201] XFS (loop5): Ending clean mount
[  210.152975][ T5802] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  210.379015][ T4936] XFS (loop5): Unmounting Filesystem
[  210.432301][ T9232] loop4: detected capacity change from 0 to 128
[  210.452256][ T5802] usb 1-1: USB disconnect, device number 11
[  210.519442][ T9232] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none.
[  210.597663][ T9232] ext4 filesystem being mounted at /374/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  210.734765][ T9238] loop7: detected capacity change from 0 to 128
[  210.802617][ T9238] EXT4-fs (loop7): Test dummy encryption mode enabled
[  210.863735][ T9238] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000001,,errors=continue. Quota mode: none.
[  210.928789][ T9238] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  211.201543][ T9256] loop0: detected capacity change from 0 to 64
[  211.475490][ T9238] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  211.772146][ T9243] loop4: detected capacity change from 0 to 131072
[  211.843280][ T9243] F2FS-fs (loop4): invalid crc value
[  211.882602][ T9243] F2FS-fs (loop4): Found nat_bits in checkpoint
[  211.916676][ T9243] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  211.927096][ T9277] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  211.947626][ T9243] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  211.973621][ T9243] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  212.007582][ T9277] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  212.198776][ T9290] loop7: detected capacity change from 0 to 512
[  212.278006][ T9290] EXT4-fs (loop7): Ignoring removed nobh option
[  212.316536][ T9295] loop6: detected capacity change from 0 to 256
[  212.349290][ T9290] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13
[  212.387227][ T9290] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.1627: attempt to clear invalid blocks 1 len 1
[  212.461457][ T9290] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  212.481524][ T9290] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1627: invalid indirect mapped block 1819239214 (level 0)
[  212.497320][ T9295] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204323ec, utbl_chksum : 0xe619d30d)
[  212.510081][ T9290] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.1627: invalid indirect mapped block 1819239214 (level 1)
[  212.631833][ T9290] EXT4-fs (loop7): 1 truncate cleaned up
[  212.645147][ T9290] EXT4-fs (loop7): mounted filesystem without journal. Opts: nolazytime,resuid=0x0000000000000000,jqfmt=vfsv1,errors=continue,nobh,usrjquota=..,errors=continue. Quota mode: writeback.
[  212.747897][ T9290] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.7.1627: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  212.900396][ T9311] i2c i2c-0: new_device: Missing parameters
[  212.915108][ T9313] loop6: detected capacity change from 0 to 128
[  212.983070][ T9313] FAT-fs (loop6): bogus number of reserved sectors
[  212.989776][ T9313] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  213.025837][ T9313] FAT-fs (loop6): Can't find a valid FAT filesystem
[  213.450688][ T9337] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1643'.
[  213.513622][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1643'.
[  213.648308][ T9353] sctp: [Deprecated]: syz.5.1650 (pid 9353) Use of struct sctp_assoc_value in delayed_ack socket option.
[  213.648308][ T9353] Use struct sctp_sack_info instead
[  213.740823][ T9358] loop7: detected capacity change from 0 to 512
[  213.774727][ T9358] EXT4-fs (loop7): Ignoring removed oldalloc option
[  213.801099][   T26] audit: type=1807 audit(1792672003.576:30): action=measure func=F res=0
[  213.801717][ T9364] ima: policy update failed
[  213.834176][ T9358] EXT4-fs (loop7): mounted filesystem without journal. Opts: oldalloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback.
[  213.839687][   T26] audit: type=1802 audit(1792672003.576:31): pid=9366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.1655" res=0 errno=0
[  213.858744][ T9358] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.899784][   T26] audit: type=1802 audit(1792672003.596:32): pid=9364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1655" res=0 errno=0
[  213.936038][ T9365] loop5: detected capacity change from 0 to 1024
[  214.157966][ T9377] attempt to access beyond end of device
[  214.157966][ T9377] loop5: rw=0, want=1028, limit=1024
[  214.200786][ T9377] Buffer I/O error on dev loop5, logical block 256, async page read
[  214.225459][ T9377] attempt to access beyond end of device
[  214.225459][ T9377] loop5: rw=0, want=1032, limit=1024
[  214.251805][ T9374] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512)
[  214.291072][ T9377] Buffer I/O error on dev loop5, logical block 257, async page read
[  214.422701][ T9383] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback.
[  214.465995][ T9383] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.497468][ T9383] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  214.524265][ T9383] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 28
[  214.537455][ T9383] EXT4-fs (loop0): This should not happen!! Data will be lost
[  214.537455][ T9383] 
[  214.547760][ T9383] EXT4-fs (loop0): Total free blocks count 0
[  214.554254][ T9383] EXT4-fs (loop0): Free/Dirty block details
[  214.571077][ T9383] EXT4-fs (loop0): free_blocks=65281
[  214.583393][ T9383] EXT4-fs (loop0): dirty_blocks=5
[  214.637237][ T9383] EXT4-fs (loop0): Block reservation details
[  214.641215][ T9390] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  214.668418][ T9383] EXT4-fs (loop0): i_reserved_data_blocks=5
[  214.767377][ T9390] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  leaving read-only.
[  214.770629][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1666'.
[  214.892522][ T9397] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  215.111374][ T9413] set_capacity_and_notify: 3 callbacks suppressed
[  215.111391][ T9413] loop4: detected capacity change from 0 to 2048
[  215.354554][ T9413] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,noquota,. Quota mode: none.
[  215.411208][ T9413] EXT4-fs (loop4): shut down requested (1)
[  215.558989][ T9441] loop5: detected capacity change from 0 to 1024
[  215.584765][ T9441] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  215.620769][ T9441] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none.
[  215.676400][ T9441] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.1685: missing EA_INODE flag
[  215.697069][ T9441] EXT4-fs (loop5): Remounting filesystem read-only
[  215.704385][ T9441] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1685: error while reading EA inode 11 err=-117
[  215.717820][ T9441] EXT4-fs (loop5): Remounting filesystem read-only
[  215.718057][ T9448] EXT4-fs (loop5): shut down requested (2)
[  215.724781][ T9441] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  215.744012][ T6581] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  215.754984][ T9449] loop4: detected capacity change from 0 to 16
[  215.770344][ T9449] erofs: (device loop4): mounted with root inode @ nid 36.
[  215.801514][ T9449] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89
[  215.823146][ T9449] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89
[  215.845338][ T9449] attempt to access beyond end of device
[  215.845338][ T9449] loop4: rw=524288, want=34359738368, limit=16
[  215.876185][ T9449] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89
[  215.907764][ T9449] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117]
[  215.917170][   T26] audit: type=1800 audit(1792672005.696:33): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1686" name="file2" dev="loop4" ino=89 res=0 errno=0
[  216.022570][ T9454] scsi_strcpy_devinfo: vendor string '�F�� P��?�����o�;"Ӣ�ژ' is too long
[  216.047141][ T9454] scsi_strcpy_devinfo: model string '�rT�eg�Ɂx���Rrba*
[  216.047141][ T9454] �HƬ`U�b���E6��X�,�Yud�,�^��5�h��Uaי'�^�)�O���lqG�V�A4�!�y�ѐ�S�
[  216.047141][ T9454] �'@H>3�&w��k' is too long
[  216.113193][ T9456] loop4: detected capacity change from 0 to 4096
[  216.134428][ T9456] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  216.373878][ T6581] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  216.384434][ T9467] loop0: detected capacity change from 0 to 512
[  216.403581][ T6581] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.420133][ T9467] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  216.429713][ T9467] System zones: 1-12
[  216.434411][ T6581] usb 7-1: Product: syz
[  216.439077][ T9467] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.1694: missing EA_INODE flag
[  216.452172][ T9467] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1694: error while reading EA inode 12 err=-117
[  216.456994][ T6581] usb 7-1: Manufacturer: syz
[  216.471089][ T9467] EXT4-fs (loop0): 1 orphan inode deleted
[  216.476939][ T9467] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  216.497003][ T9467] fscrypt (loop0, inode 15): Reserved bits set in encryption policy
[  216.510842][ T6581] usb 7-1: SerialNumber: syz
[  216.843902][   T26] audit: type=1400 audit(1792672006.626:34): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=9485 comm="syz.4.1702" name="p" offset=69
[  217.018663][ T9499] loop0: detected capacity change from 0 to 64
[  217.132444][ T9501] loop5: detected capacity change from 0 to 1024
[  217.359003][ T6581] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  217.459440][ T9509] loop5: detected capacity change from 0 to 4096
[  217.523375][ T9513] loop0: detected capacity change from 0 to 4096
[  217.530542][ T9509] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  217.577704][ T9513] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  217.630021][ T9509] Quota error (device loop5): find_tree_dqentry: Getting block too big (8 >= 6)
[  217.711008][ T9509] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  217.736160][ T9497] loop4: detected capacity change from 0 to 40427
[  217.742761][ T9509] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.1713: Failed to acquire dquot type 0
[  217.798750][ T9497] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x40002010)
[  217.829273][ T9497] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  217.844078][ T9497] F2FS-fs (loop4): invalid crc value
[  217.885816][ T9497] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241185545270265317)
[  217.974950][ T5802] usb 7-1: USB disconnect, device number 8
[  218.014698][ T9521] EXT4-fs (loop0): Ignoring removed bh option
[  218.046789][ T9497] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  218.068477][ T9497] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  218.079852][ T9521] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce028, mo2=0000]
[  218.097674][ T9521] System zones: 0-1, 3-12
[  218.163645][ T9521] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #3: block 1: comm syz.0.1718: lblock 1 mapped to illegal pblock 1 (length 1)
[  218.208756][ T9521] EXT4-fs (loop0): Remounting filesystem read-only
[  218.218386][ T9521] Quota error (device loop0): write_blk: dquota write failed
[  218.226156][ T9521] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  218.234755][ T4185] attempt to access beyond end of device
[  218.234755][ T4185] loop4: rw=524288, want=45072, limit=40427
[  218.248559][ T9521] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1718: Failed to acquire dquot type 0
[  218.268414][ T4185] attempt to access beyond end of device
[  218.268414][ T4185] loop4: rw=0, want=45072, limit=40427
[  218.282292][ T9521] EXT4-fs (loop0): Remounting filesystem read-only
[  218.304051][ T9521] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.1718: Freeing blocks not in datazone - block = 0, count = 4096
[  218.327889][ T9521] EXT4-fs (loop0): Remounting filesystem read-only
[  218.357538][ T9521] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1718: Invalid inode bitmap blk 0 in block_group 0
[  218.374990][  T155] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  218.401316][ T9521] EXT4-fs (loop0): Remounting filesystem read-only
[  218.411739][ T9521] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem
[  218.427240][ T9521] EXT4-fs (loop0): Remounting filesystem read-only
[  218.438514][ T9527] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.466332][ T9521] EXT4-fs (loop0): 1 orphan inode deleted
[  218.478627][ T9521] EXT4-fs (loop0): mounted filesystem without journal. Opts: ��; usrquota,auto_da_alloc,bh,max_batch_time=0x00000000000008c9,debug,errors=remount-ro,. Quota mode: writeback.
[  218.511962][  T155] EXT4-fs (loop0): Remounting filesystem read-only
[  218.518759][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1720'.
[  218.533070][  T155] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  218.551845][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1720'.
[  218.561207][  T155] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0
[  218.581997][ T9529] netlink: 'syz.7.1720': attribute type 7 has an invalid length.
[  218.593955][  T155] EXT4-fs (loop0): Remounting filesystem read-only
[  218.602623][ T9529] netlink: 'syz.7.1720': attribute type 18 has an invalid length.
[  218.613173][ T6581] usb 7-1: Service connection timeout for: 256
[  218.619733][ T6581] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services
[  218.646533][ T6581] ath9k_htc: Failed to initialize the device
[  218.655639][ T5802] usb 7-1: ath9k_htc: USB layer deinitialized
[  218.741927][ T9533] netlink: 'syz.7.1724': attribute type 1 has an invalid length.
[  218.758129][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1724'.
[  218.871468][ T9527] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.913910][   T21] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.000A/input/input17
[  218.984749][   T21] hid-generic 0005:FFFD057E:0305.000A: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  219.026494][   T26] audit: type=1400 audit(1792672008.806:35): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=9543 comm="syz.0.1728" name="p" offset=79
[  219.119418][ T9527] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.238283][ T9527] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.243374][ T5802] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  219.418481][ T9527] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.443782][ T9527] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.460420][ T9527] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.476643][ T9527] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.570134][ T4185] attempt to access beyond end of device
[  219.570134][ T4185] loop4: rw=2049, want=45104, limit=40427
[  219.619143][ T9557] device bond0 entered promiscuous mode
[  219.635420][ T5802] usb 7-1: unable to get BOS descriptor or descriptor too short
[  219.670681][ T9557] device bond_slave_0 entered promiscuous mode
[  219.705657][ T9557] device bond_slave_1 entered promiscuous mode
[  219.734530][ T5802] usb 7-1: no configurations
[  219.739215][ T5802] usb 7-1: can't read configurations, error -22
[  219.753089][ T9557] device bridge0 entered promiscuous mode
[  219.774347][ T9557] device bond0 left promiscuous mode
[  219.779743][ T9557] device bond_slave_0 left promiscuous mode
[  219.806822][ T9557] device bond_slave_1 left promiscuous mode
[  219.826188][ T9557] device bridge0 left promiscuous mode
[  219.912430][ T9565] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d)
[  220.173611][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'.
[  220.223825][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1751'.
[  220.232765][ T9574] netlink: 'syz.0.1751': attribute type 7 has an invalid length.
[  220.270571][ T9574] netlink: 'syz.0.1751': attribute type 18 has an invalid length.
[  220.294231][ T9580] program syz.7.1742 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  220.316054][ T9578] netlink: 'syz.5.1741': attribute type 6 has an invalid length.
[  220.459325][ T9586] set_capacity_and_notify: 2 callbacks suppressed
[  220.459342][ T9586] loop6: detected capacity change from 0 to 512
[  220.536859][ T9586] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  220.695353][ T9586] EXT4-fs error (device loop6): ext4_validate_block_bitmap:420: comm syz.6.1749: bg 0: bad block bitmap checksum
[  220.723032][ T4279] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  220.930415][ T9600] rxe_eth0 speed is unknown, defaulting to 1000
[  221.014363][ T9605] loop6: detected capacity change from 0 to 256
[  221.089015][   T26] audit: type=1400 audit(1792672010.866:36): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=9606 comm="syz.7.1756" name="p" offset=79
[  221.234050][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1757'.
[  221.247836][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1757'.
[  221.268265][ T9611] netlink: 'syz.6.1757': attribute type 7 has an invalid length.
[  221.277248][ T9611] netlink: 'syz.6.1757': attribute type 18 has an invalid length.
[  221.353205][ T4279] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  221.369136][ T4279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.395929][ T4279] usb 6-1: Product: syz
[  221.408357][ T4279] usb 6-1: Manufacturer: syz
[  221.421148][ T4279] usb 6-1: SerialNumber: syz
[  221.449798][ T4279] usb 6-1: config 0 descriptor??
[  221.514404][ T4279] ch341 6-1:0.0: ch341-uart converter detected
[  221.544213][ T9600] chnl_net:caif_netlink_parms(): no params data found
[  221.606562][ T9624] device-mapper: table: 248:0: raid: Insufficient number of devices
[  221.624325][ T9624] device-mapper: ioctl: error adding target to table
[  221.667181][ T9600] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.703098][ T9600] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.711104][ T9600] device bridge_slave_0 entered promiscuous mode
[  221.749817][ T9600] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.757253][ T9600] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.773994][ T9600] device bridge_slave_1 entered promiscuous mode
[  221.826052][ T9600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.839334][ T9600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.880936][ T9600] team0: Port device team_slave_0 added
[  221.895711][ T9600] team0: Port device team_slave_1 added
[  221.928853][ T9600] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.936179][ T9600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.963007][ T9600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.978887][ T9600] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.986542][ T9600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.014225][ T9600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.060744][ T9600] device hsr_slave_0 entered promiscuous mode
[  222.068077][ T9600] device hsr_slave_1 entered promiscuous mode
[  222.080049][ T9600] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  222.088992][ T9600] Cannot create hsr debugfs directory
[  222.340697][ T9600] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  222.357652][ T9600] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  222.381772][ T9600] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  222.392903][ T4279] usb 6-1: failed to send control message: -71
[  222.407540][ T4279] ch341-uart: probe of ttyUSB0 failed with error -71
[  222.421116][ T4279] usb 6-1: USB disconnect, device number 10
[  222.433372][ T4279] ch341 6-1:0.0: device disconnected
[  222.459993][ T9600] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  222.505577][ T9600] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.512762][ T9600] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.520223][ T9600] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.527367][ T9600] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.557717][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.583858][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.709814][ T9638] loop7: detected capacity change from 0 to 512
[  222.731294][ T9600] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.788008][ T9638] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  222.794720][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  222.819501][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  222.843593][ T9638] EXT4-fs error (device loop7): ext4_validate_block_bitmap:420: comm syz.7.1765: bg 0: bad block bitmap checksum
[  222.869342][ T9600] 8021q: adding VLAN 0 to HW filter on device team0
[  222.909838][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  222.925909][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  222.943337][ T4279] Bluetooth: hci0: command 0x0409 tx timeout
[  222.951916][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.959136][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.034964][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  223.069864][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  223.095642][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.102849][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.111401][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  223.154323][ T9649] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1769'.
[  223.164682][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  223.186205][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  223.206900][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  223.273916][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  223.297923][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  223.325417][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  223.371349][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  223.390090][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  223.427582][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  223.443571][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  223.462448][ T9600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  223.791980][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  223.807103][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  223.830201][ T9600] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.907457][ T9679] loop7: detected capacity change from 0 to 4096
[  224.076038][ T9679] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512)
[  224.332914][ T5807] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  224.420795][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  224.433623][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  224.462346][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  224.483649][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  224.508447][ T9600] device veth0_vlan entered promiscuous mode
[  224.520419][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  224.529814][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  224.576626][ T9600] device veth1_vlan entered promiscuous mode
[  224.621214][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  224.630567][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  224.703208][ T5807] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  224.718295][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  224.724307][ T5807] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  224.747103][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  224.783031][ T5807] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  224.789712][ T9600] device veth0_macvtap entered promiscuous mode
[  224.811010][ T9600] device veth1_macvtap entered promiscuous mode
[  224.821699][ T5807] usb 1-1: config 0 has no interfaces?
[  224.836366][ T9713] 9pnet: Insufficient options for proto=fd
[  224.843030][ T5807] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  224.852113][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.887193][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.902105][ T5807] usb 1-1: config 0 descriptor??
[  224.911013][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.934281][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.946823][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.962734][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.974679][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.985612][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.999066][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.010729][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.022095][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.023362][ T5489] Bluetooth: hci0: command 0x041b tx timeout
[  225.039724][ T9600] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.065946][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  225.133797][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  225.157146][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  225.185734][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  225.200379][   T21] usb 1-1: USB disconnect, device number 12
[  225.236150][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.247630][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.259477][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.280899][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.302579][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.322596][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.352974][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.366343][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.377538][ T9600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.396693][ T9600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.413049][ T5751] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  225.434323][ T9600] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.449441][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  225.471161][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  225.513757][ T9600] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.535941][ T9600] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.573392][ T9600] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.582733][ T9600] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.673242][ T5807] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  225.756585][ T5751] usb 6-1: not running at top speed; connect to a high speed hub
[  225.843782][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.863120][ T5751] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  225.884592][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.896818][ T5751] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 165, setting to 64
[  225.912090][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  225.943039][ T5807] usb 7-1: Using ep0 maxpacket: 16
[  225.955293][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.981539][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.002321][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  226.076494][ T5807] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  226.090334][ T5751] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  226.109767][ T5751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.119899][ T5807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  226.139957][ T5751] usb 6-1: Product: syz
[  226.144448][ T5807] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  226.162914][ T5751] usb 6-1: Manufacturer: syz
[  226.169468][ T5751] usb 6-1: SerialNumber: syz
[  226.203375][ T9717] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  226.224582][ T5751] oti6858 6-1:1.0: oti6858 converter detected
[  226.244536][ T5751] usb 6-1: oti6858 converter now attached to ttyUSB0
[  226.314004][   T26] audit: type=1400 audit(1792672016.096:37): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=9740 comm="syz.8.1804" name="p" offset=69
[  226.353035][ T5807] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  226.372588][ T5807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.392910][ T5807] usb 7-1: Product: syz
[  226.398025][ T5807] usb 7-1: Manufacturer: syz
[  226.402680][ T5807] usb 7-1: SerialNumber: syz
[  226.461761][ T5807] usb 7-1: config 0 descriptor??
[  226.513948][ T5807] mcba_usb 7-1:0.0: Can't find endpoints
[  226.725993][ T5752] usb 6-1: USB disconnect, device number 11
[  226.744072][ T9753] loop8: detected capacity change from 0 to 256
[  226.751552][ T5752] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  226.776549][ T5752] oti6858 6-1:1.0: device disconnected
[  226.803248][ T9725] udc-core: couldn't find an available UDC or it's busy
[  226.810676][ T9725] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  226.895995][ T5807] usb 7-1: USB disconnect, device number 11
[  227.105030][ T4278] Bluetooth: hci0: command 0x040f tx timeout
[  227.326196][ T9772] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1817'.
[  227.474479][ T9780] loop8: detected capacity change from 0 to 512
[  227.563210][ T5807] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  227.614621][ T9780] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback.
[  227.642685][ T9780] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.682124][ T9780] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  227.705313][ T9780] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 28
[  227.725983][ T9780] EXT4-fs (loop8): This should not happen!! Data will be lost
[  227.725983][ T9780] 
[  227.749836][ T9780] EXT4-fs (loop8): Total free blocks count 0
[  227.768669][ T9780] EXT4-fs (loop8): Free/Dirty block details
[  227.777954][ T9780] EXT4-fs (loop8): free_blocks=65281
[  227.783931][ T9780] EXT4-fs (loop8): dirty_blocks=5
[  227.789035][ T9780] EXT4-fs (loop8): Block reservation details
[  227.796286][ T9780] EXT4-fs (loop8): i_reserved_data_blocks=5
[  228.113214][ T5807] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  228.122346][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.150864][ T9800] loop8: detected capacity change from 0 to 4096
[  228.160251][ T5807] usb 6-1: Product: syz
[  228.164889][ T5807] usb 6-1: Manufacturer: syz
[  228.169710][ T5807] usb 6-1: SerialNumber: syz
[  228.191136][ T9806] loop0: detected capacity change from 0 to 256
[  228.238760][ T9800] ntfs3: loop8: Different NTFS' sector size (2048) and media sector size (512)
[  228.266541][ T9806] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  228.284445][ T9810] loop7: detected capacity change from 0 to 64
[  228.384425][ T9810] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  228.446904][ T9810] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  leaving read-only.
[  228.572702][   T26] audit: type=1807 audit(1792672018.346:38): action=measure func=F res=0
[  228.582017][ T9814] ima: policy update failed
[  228.592897][   T26] audit: type=1802 audit(1792672018.366:39): pid=9816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.8.1837" res=0 errno=0
[  228.655624][   T26] audit: type=1802 audit(1792672018.396:40): pid=9814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.1837" res=0 errno=0
[  228.793145][ T5752] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  228.903188][ T9826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1844'.
[  228.987189][ T9832] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1847'.
[  229.017963][ T9832] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1847'.
[  229.178855][ T9815] loop6: detected capacity change from 0 to 40427
[  229.185429][ T4285] Bluetooth: hci0: command 0x0419 tx timeout
[  229.205031][ T9815] F2FS-fs (loop6): Small segment_count (9 < 1 * 24)
[  229.211932][ T9815] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  229.223326][ T9815] F2FS-fs (loop6): invalid crc value
[  229.231606][ T9815] F2FS-fs (loop6): Found nat_bits in checkpoint
[  229.286642][ T9815] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  229.294102][ T9815] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  229.424837][ T4285] usb 6-1: USB disconnect, device number 12
[  229.717576][ T9853] loop0: detected capacity change from 0 to 256
[  229.887516][ T9863] loop6: detected capacity change from 0 to 1024
[  230.053146][ T5752] usb 6-1: Service connection timeout for: 256
[  230.059387][ T5752] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  230.096792][ T9863] hfsplus: failed to extend attributes file
[  230.110188][ T5752] ath9k_htc: Failed to initialize the device
[  230.125499][ T9863] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  230.139486][ T9869] loop8: detected capacity change from 0 to 4096
[  230.151953][ T4285] usb 6-1: ath9k_htc: USB layer deinitialized
[  230.210331][ T9869] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512)
[  230.306521][ T9879] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  230.355894][ T9869] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  230.549485][ T9600] ntfs3: loop8: ntfs_sync_fs r=1a failed, -22.
[  230.564166][ T9600] ntfs3: loop8: ntfs_evict_inode r=1a failed, -22.
[  230.951529][ T9906] i2c i2c-0: new_device: Missing parameters
[  231.376655][ T9892] loop0: detected capacity change from 0 to 131072
[  231.463568][ T9892] F2FS-fs (loop0): invalid crc value
[  231.483348][ T9892] F2FS-fs (loop0): Found nat_bits in checkpoint
[  231.518539][ T9892] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  231.535952][ T9892] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  231.549843][ T9892] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  231.574424][ T9927] hfsplus: failed to extend attributes file
[  231.619745][ T9921] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  231.810925][ T9933] bond0: (slave bond_slave_0): Slave does not support ipsec offload
[  231.990144][ T9943] tap0: tun_chr_ioctl cmd 2148553947
[  232.103930][ T9947] set_capacity_and_notify: 1 callbacks suppressed
[  232.103947][ T9947] loop8: detected capacity change from 0 to 1024
[  232.301701][ T9947] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  232.356282][ T9947] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.595768][ T9973] loop5: detected capacity change from 0 to 64
[  232.626056][ T9972] block2mtd: parameter too long
[  232.649116][ T9977] loop7: detected capacity change from 0 to 256
[  232.936560][ T9984] loop5: detected capacity change from 0 to 128
[  233.173934][ T9995] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1916'.
[  233.282913][ T4285] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  233.382057][ T9975] loop8: detected capacity change from 0 to 32768
[  233.481426][   T26] audit: type=1800 audit(1792672023.256:41): pid=9975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1906" name="file1" dev="loop8" ino=7 res=0 errno=0
[  233.891437][ T9993] loop5: detected capacity change from 0 to 32768
[  233.898781][ T4285] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  233.913502][ T4285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.932049][ T4285] usb 1-1: Product: syz
[  233.941906][ T4285] usb 1-1: Manufacturer: syz
[  233.952028][ T4285] usb 1-1: SerialNumber: syz
[  234.038693][ T9993] (syz.5.1927,9993,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  234.093135][ T9993] (syz.5.1927,9993,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  234.130164][ T9993] (syz.5.1927,9993,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC.
[  234.188599][ T9993] JBD2: Ignoring recovery information on journal
[  234.283700][ T9993] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  234.377129][T10009] loop7: detected capacity change from 0 to 40427
[  234.404146][ T4285] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  234.435916][ T4936] ocfs2: Unmounting device (7,5) on (node local)
[  234.559780][T10009] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  234.578409][T10009] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  234.617515][T10009] F2FS-fs (loop7): invalid crc value
[  234.643298][ T4278] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  234.675849][T10009] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  234.687613][ T4285] usb 9-1: Using ep0 maxpacket: 32
[  234.797217][T10009] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  234.804391][T10009] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  234.833157][ T4285] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2
[  234.842102][ T4285] usb 9-1: config 0 interface 0 has no altsetting 1
[  234.888999][ T7414] attempt to access beyond end of device
[  234.888999][ T7414] loop7: rw=2049, want=40968, limit=40427
[  234.944027][ T4285] usb 9-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[  234.958162][ T4285] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  234.969612][ T4285] usb 9-1: SerialNumber: syz
[  234.988577][ T4285] usb 9-1: config 0 descriptor??
[  235.028136][ T4285] usb-storage 9-1:0.0: USB Mass Storage device detected
[  235.070166][ T4285] usb-storage 9-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[  235.248126][ T6581] usb 9-1: USB disconnect, device number 2
[  235.276192][ T4285] usb 1-1: USB disconnect, device number 13
[  235.570321][T10045] loop6: detected capacity change from 0 to 32768
[  235.607830][T10047] loop7: detected capacity change from 0 to 32768
[  235.671248][T10047] XFS (loop7): Mounting V5 Filesystem
[  235.772199][T10045] XFS (loop6): Mounting V5 Filesystem
[  235.819405][T10047] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  235.892981][ T4278] usb 1-1: Service connection timeout for: 256
[  235.899222][ T4278] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[  235.939588][T10047] XFS (loop7): Starting recovery (logdev: internal)
[  235.967424][ T4278] ath9k_htc: Failed to initialize the device
[  235.974478][T10045] XFS (loop6): Ending clean mount
[  235.988178][T10047] XFS (loop7): Ending recovery (logdev: internal)
[  235.996091][ T4285] usb 1-1: ath9k_htc: USB layer deinitialized
[  236.100057][T10075] hugetlbfs: Bad value 'g' for mount option 'size'
[  236.100057][T10075] 
[  236.112220][T10047] XFS (loop7): Metadata corruption detected at xfs_btree_lookup_get_block+0x48f/0x6c0, xfs_bnobt block 0x8
[  236.120945][ T7076] XFS (loop6): Unmounting Filesystem
[  236.173167][T10047] XFS (loop7): Unmount and run xfs_repair
[  236.212511][ T5488] XFS (loop7): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 
[  236.237780][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1943'.
[  236.266417][ T5488] XFS (loop7): Unmount and run xfs_repair
[  236.272225][ T5488] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  236.286652][ T5488] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  236.299684][ T5488] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  236.316194][ T5488] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  236.329409][ T5488] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  236.346621][ T5488] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  236.359070][ T5488] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  236.377083][T10082] block2mtd: device name too long
[  236.390254][ T5488] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  236.399660][ T5488] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  236.415749][T10047] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117
[  236.523149][ T7414] XFS (loop7): Unmounting Filesystem
[  236.530130][T10061] XFS (loop7): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 
[  236.561234][T10061] XFS (loop7): Unmount and run xfs_repair
[  236.578162][T10061] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  236.588101][T10061] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  236.613518][T10061] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  236.622529][T10061] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  236.671302][T10092] loop8: detected capacity change from 0 to 256
[  236.712861][T10061] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  236.730869][T10061] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  236.757540][T10061] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  236.801373][T10061] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  236.819324][T10061] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  236.829531][T10061] XFS (loop7): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x32c/0x620 (fs/xfs/xfs_buf.c:1515).  Shutting down filesystem.
[  236.892285][T10096] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  236.908680][T10061] XFS (loop7): Please unmount the filesystem and rectify the problem(s)
[  236.937692][ T4278] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  237.293247][ T4278] usb 6-1: not running at top speed; connect to a high speed hub
[  237.384013][ T4278] usb 6-1: config 0 has too many interfaces: 223, using maximum allowed: 32
[  237.402885][ T4278] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  237.422062][ T4278] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 223
[  237.433085][ T4278] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  237.442181][ T4278] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.471549][ T4278] usb 6-1: config 0 descriptor??
[  237.526439][ T4278] usb 6-1: Found UVC 9.00 device <unnamed> (046d:0825)
[  237.914917][T10144] loop6: detected capacity change from 0 to 32768
[  237.936127][ T5752] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  237.953167][ T4278] usb 6-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  237.955013][   T26] audit: type=1800 audit(1792672027.736:42): pid=10144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1973" name="file1" dev="loop6" ino=7 res=0 errno=0
[  238.237062][ T4278] usb 6-1: USB disconnect, device number 13
[  238.353227][ T5752] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.365328][ T5752] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.377694][ T5752] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  238.392745][ T5752] usb 1-1: config 0 interface 0 has no altsetting 0
[  238.412087][ T5752] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  238.432311][ T5752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.466699][ T5752] usb 1-1: config 0 descriptor??
[  238.552943][   T26] audit: type=1400 audit(1792672028.326:43): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="/" pid=10161 comm="syz.7.1946" name="/" offset=33
[  238.951116][T10185] loop5: detected capacity change from 0 to 256
[  238.972938][ T5752] hid-rmi 0003:1532:011D.000B: unbalanced collection at end of report description
[  238.997235][ T5752] hid-rmi 0003:1532:011D.000B: parse failed
[  239.010378][ T5752] hid-rmi: probe of 0003:1532:011D.000B failed with error -22
[  239.201936][ T5488] usb 1-1: USB disconnect, device number 14
[  239.328792][T10195] loop6: detected capacity change from 0 to 128
[  239.416761][T10195] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  239.450329][T10195] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  239.492565][T10195] fscrypt (loop6, inode 12): Direct key flag not allowed with different contents and filenames modes
[  239.709791][T10193] loop5: detected capacity change from 0 to 32768
[  239.858012][   T26] audit: type=1800 audit(1792672029.636:44): pid=10193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1994" name="file1" dev="loop5" ino=7 res=0 errno=0
[  240.000954][T10213] loop0: detected capacity change from 0 to 256
[  240.075846][T10213] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  240.092993][ T4278] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  240.181215][T10213] exFAT-fs (loop0): error, invalid size(size(72) > aligned(9223372036854777344)
[  240.181215][T10213] 
[  240.199224][T10213] exFAT-fs (loop0): Filesystem has been set read-only
[  240.383059][ T4278] usb 7-1: Using ep0 maxpacket: 8
[  240.693169][ T4278] usb 7-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64
[  240.712699][ T4278] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  240.732766][ T4278] usb 7-1: Product: syz
[  240.743023][ T4278] usb 7-1: Manufacturer: syz
[  240.753242][ T4278] usb 7-1: SerialNumber: syz
[  240.782277][ T4278] usb 7-1: config 0 descriptor??
[  240.835377][ T4278] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  240.872361][T10239] bonding: . is being created...
[  240.943083][ T5488] Bluetooth: hci0: command 0x0401 tx timeout
[  241.043143][ T4278] gspca_sn9c2028: read1 error -32
[  241.072189][T10246] loop5: detected capacity change from 0 to 512
[  241.093472][ T4278] gspca_sn9c2028: read1 error -32
[  241.140954][T10246] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  241.166944][T10246] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  241.188178][T10246] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2017: bg 0: block 248: padding at end of block bitmap is not set
[  241.238719][T10246] Quota error (device loop5): write_blk: dquota write failed
[  241.283061][T10246] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  241.297818][T10246] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.2017: Failed to acquire dquot type 1
[  241.324671][T10246] EXT4-fs (loop5): 1 truncate cleaned up
[  241.330525][T10246] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  241.379176][ T4278] usb 7-1: USB disconnect, device number 12
[  241.432247][ T4290] Quota error (device loop5): remove_tree: Getting block too big (0 >= 6)
[  241.443376][ T4290] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 1
[  241.550380][T10248] loop0: detected capacity change from 0 to 32768
[  241.617922][T10252] loop5: detected capacity change from 0 to 512
[  241.671843][T10252] EXT4-fs (loop5): Test dummy encryption mode enabled
[  241.709562][T10248] JBD2: Ignoring recovery information on journal
[  241.741795][T10252] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.2020: inode has both inline data and extents flags
[  241.765686][T10252] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.2020: couldn't read orphan inode 15 (err -117)
[  241.780054][T10252] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  241.881726][T10248] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  242.123673][T10252] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  242.174042][ T4188] ocfs2: Unmounting device (7,0) on (node local)
[  242.206005][   T26] audit: type=1800 audit(1792672031.986:45): pid=10252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2020" name="file1" dev="loop5" ino=18 res=0 errno=0
[  242.484416][T10292] loop7: detected capacity change from 0 to 64
[  242.635543][T10298] rnbd_client L599: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  242.669383][    T9] rtrs_client L2011: <s+>: CM error (CM event: address error, err: -19)
[  242.693963][T10296] pimreg: tun_chr_ioctl cmd 1074025677
[  242.701600][T10296] pimreg: linktype set to 1
[  242.715941][T10298] rtrs_client L2622: <s+>: init_conns() failed: err=-113 path=<invalid address family>@ip:27.0.0.1 [:0]
[  243.014025][T10309] loop8: detected capacity change from 0 to 128
[  243.058422][T10309] EXT4-fs (loop8): Test dummy encryption mode enabled
[  243.134134][T10309] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000001,,errors=continue. Quota mode: none.
[  243.161423][T10309] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  243.185892][T10314] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2042'.
[  243.233463][T10316] loop7: detected capacity change from 0 to 128
[  243.353869][T10316] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none.
[  243.365908][T10316] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  243.403760][T10327] loop8: detected capacity change from 0 to 256
[  243.483343][T10327] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x204323ec, utbl_chksum : 0xe619d30d)
[  243.801430][T10348] loop5: detected capacity change from 0 to 512
[  243.815796][T10346] tap0: tun_chr_ioctl cmd 35111
[  243.906456][T10348] EXT4-fs (loop5): Ignoring removed oldalloc option
[  243.914195][T10350] program syz.7.2058 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  244.002611][T10348] EXT4-fs (loop5): mounted filesystem without journal. Opts: oldalloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback.
[  244.107562][T10348] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.220357][T10375] vhci_hcd vhci_hcd.0: failed to lookup sock
[  244.325427][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2075'.
[  244.368356][   T21] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  244.449771][ T5488] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  244.629494][T10398] netlink: 'syz.7.2080': attribute type 12 has an invalid length.
[  244.726054][ T5488] usb 9-1: Using ep0 maxpacket: 32
[  244.733245][   T21] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.751098][   T21] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  244.781763][   T21] usb 1-1: config 0 interface 0 has no altsetting 0
[  244.814671][   T21] usb 1-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00
[  244.829610][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.871749][   T21] usb 1-1: config 0 descriptor??
[  244.883146][ T5488] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  244.903430][ T5488] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.918621][ T5488] usb 9-1: config 0 descriptor??
[  244.988628][ T5488] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  245.357822][   T21] input: HID 1b96:0006 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1B96:0006.000C/input/input18
[  245.461514][   T21] ntrig 0003:1B96:0006.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 1b96:0006] on usb-dummy_hcd.0-1/input0
[  245.573168][   T21] ntrig 0003:1B96:0006.000C: Firmware version: 5.3.12.19.6 (8d2a 7e9a)
[  245.711470][T10433] loop7: detected capacity change from 0 to 4096
[  245.777333][T10428] loop6: detected capacity change from 0 to 32768
[  245.777617][ T4285] usb 1-1: USB disconnect, device number 15
[  245.883009][ T5488] gspca_vc032x: reg_w err -71
[  245.891066][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  245.908266][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  245.928472][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  245.933985][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  245.944123][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  245.951966][T10428] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  245.959600][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  245.966757][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  245.972359][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  245.978070][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  245.983499][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  245.988995][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  245.994405][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  245.999976][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  246.005370][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  246.010880][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  246.016463][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  246.021967][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  246.027434][ T5488] gspca_vc032x: I2c Bus Busy Wait 00
[  246.033071][ T5488] gspca_vc032x: Unknown sensor...
[  246.038174][ T5488] vc032x: probe of 9-1:0.0 failed with error -22
[  246.054335][ T5488] usb 9-1: USB disconnect, device number 3
[  246.093066][T10428] (syz.6.2092,10428,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1
[  246.172560][T10428] (syz.6.2092,10428,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  246.200129][T10428] (syz.6.2092,10428,1):ocfs2_mknod:299 ERROR: status = -2
[  246.238980][T10428] (syz.6.2092,10428,1):ocfs2_mknod:504 ERROR: status = -2
[  246.267486][T10428] (syz.6.2092,10428,1):ocfs2_create:678 ERROR: status = -2
[  246.378161][ T7076] ocfs2: Unmounting device (7,6) on (node local)
[  246.424954][T10453] kernel read not supported for file /file0 (pid: 10453 comm: syz.0.2101)
[  246.496052][   T26] audit: type=1800 audit(1792672036.256:46): pid=10453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2101" name="file0" dev="mqueue" ino=55528 res=0 errno=0
[  246.588496][T10459] loop5: detected capacity change from 0 to 1024
[  246.932747][T10465] loop7: detected capacity change from 0 to 8192
[  247.337699][T10491] loop8: detected capacity change from 0 to 8
[  247.449717][T10491] cramfs: bad data blocksize 3959421443
[  247.459274][T10494] loop5: detected capacity change from 0 to 512
[  247.473288][T10491] cramfs: bad data blocksize 4294965915
[  247.499809][T10491] cramfs: bad data blocksize 802397048
[  247.527062][T10494] EXT4-fs (loop5): Ignoring removed bh option
[  247.536386][T10491] cramfs: bad data blocksize 4294742353
[  247.564616][T10491] cramfs: bad data blocksize 3367320904
[  247.582028][T10491] cramfs: bad data blocksize 859179931
[  247.593291][T10491] cramfs: bad data blocksize 3436389781
[  247.604427][T10494] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  247.622041][T10491] cramfs: bad data blocksize 4294365136
[  247.651124][T10491] cramfs: bad data blocksize 4294967040
[  247.683610][T10494] EXT4-fs (loop5): 1 truncate cleaned up
[  247.689541][T10494] EXT4-fs (loop5): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none.
[  247.690568][T10491] cramfs: bad data blocksize 3959421443
[  247.763526][   T26] audit: type=1800 audit(1792672037.546:47): pid=10491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2117" name="file2" dev="loop8" ino=268 res=0 errno=0
[  248.069925][T10471] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  248.079298][T10471] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  248.129930][T10471] F2FS-fs (loop6): invalid crc value
[  248.184679][T10471] F2FS-fs (loop6): Found nat_bits in checkpoint
[  248.348561][T10471] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  248.362751][T10471] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  248.665002][T10550] set_capacity_and_notify: 1 callbacks suppressed
[  248.665020][T10550] loop5: detected capacity change from 0 to 256
[  248.733666][T10550] exfat: Deprecated parameter 'namecase'
[  248.739423][T10550] exfat: Deprecated parameter 'utf8'
[  248.777757][T10550] exfat: Deprecated parameter 'namecase'
[  248.828485][T10550] exfat: Deprecated parameter 'namecase'
[  248.871560][T10550] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d)
[  249.057558][T10557] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  249.192456][T10540] loop7: detected capacity change from 0 to 32768
[  249.351151][T10540] XFS (loop7): Mounting V5 Filesystem
[  249.449672][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2155'.
[  249.457710][T10581] synth uevent: /devices/virtual/cpuid/cpu0: unknown uevent action string
[  249.573093][T10540] XFS (loop7): Ending clean mount
[  249.585852][T10581] cpuid cpu0: uevent: failed to send synthetic uevent
[  249.604833][T10540] XFS (loop7): Quotacheck needed: Please wait.
[  249.788106][T10540] XFS (loop7): Quotacheck: Done.
[  250.017986][ T7414] XFS (loop7): Unmounting Filesystem
[  250.192612][T10609] zswap: compressor -ο���p��|J�J�>���U��j���뤣�S��F�E��]�}I not available
[  250.518652][T10640] bond0: option mode: unable to set because the bond device has slaves
[  250.539887][T10642] sock: sock_timestamping_bind_phc: sock not bind to device
[  250.586369][T10644] loop6: detected capacity change from 0 to 16
[  250.639916][T10644] erofs: (device loop6): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffe
[  250.959081][T10666] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input19
[  251.097581][T10675] loop5: detected capacity change from 0 to 4096
[  251.113154][ T5488] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  251.155170][T10675] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  251.197386][T10675] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  251.394604][T10689] program syz.5.2201 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  251.408309][T10688] loop7: detected capacity change from 0 to 512
[  251.531991][T10688] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  251.543105][ T5488] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.566013][T10698] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  251.713929][T10688] EXT4-fs warning (device loop7): ext4_group_add:1696: No reserved GDT blocks, can't resize
[  251.879931][T10701] bonding: unable to delete non-existent b
[  252.486457][T10697] loop5: detected capacity change from 0 to 131072
[  252.493492][ T5488] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.504219][ T5488] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  252.513630][ T5488] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.523625][ T5488] usb 7-1: config 0 descriptor??
[  252.545954][T10697] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (512, 24)
[  252.553942][T10697] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  252.564494][T10697] F2FS-fs (loop5): Test dummy encryption mode enabled
[  252.576720][T10697] F2FS-fs (loop5): invalid crc value
[  252.624781][T10697] F2FS-fs (loop5): Found nat_bits in checkpoint
[  252.662314][T10697] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  252.675351][T10697] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[  252.688276][T10697] F2FS-fs (loop5): Start checkpoint disabled!
[  252.786564][T10697] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  252.793867][T10697] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  252.866599][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2214'.
[  253.025460][ T5488] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0
[  253.035662][  T155] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  253.048521][ T5488] cm6533_jd 0003:0D8C:0022.000D: item fetching failed at offset 4/5
[  253.056829][T10727] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2218'.
[  253.066967][ T5488] cm6533_jd 0003:0D8C:0022.000D: parse failed
[  253.094197][ T5488] cm6533_jd: probe of 0003:0D8C:0022.000D failed with error -22
[  253.249000][   T21] usb 7-1: USB disconnect, device number 13
[  253.437468][T10738] loop7: detected capacity change from 0 to 256
[  253.500718][T10738] exfat: Deprecated parameter 'namecase'
[  253.538402][T10738] exfat: Deprecated parameter 'utf8'
[  253.544728][T10738] exfat: Deprecated parameter 'namecase'
[  253.569496][T10738] exfat: Deprecated parameter 'namecase'
[  253.581797][T10745] bonding: . is being created...
[  253.671379][T10738] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d)
[  254.086509][T10765] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2235'.
[  254.202385][T10772] loop8: detected capacity change from 0 to 16
[  254.260626][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2239'.
[  254.311917][T10772] erofs: (device loop8): mounted with root inode @ nid 36.
[  254.366642][T10772] erofs: (device loop8): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89
[  254.387091][T10772] erofs: (device loop8): z_erofs_readahead: readahead error at page 0 @ nid 89
[  254.430358][T10772] attempt to access beyond end of device
[  254.430358][T10772] loop8: rw=524288, want=34359738368, limit=16
[  254.462525][T10772] erofs: (device loop8): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89
[  254.480411][T10772] erofs: (device loop8): z_erofs_readpage: failed to read, err [-117]
[  254.495382][   T26] audit: type=1800 audit(1792672044.276:48): pid=10772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2238" name="file2" dev="loop8" ino=89 res=0 errno=0
[  254.765225][T10797] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2250'.
[  254.881476][T10805] block2mtd: parameter too long
[  255.260632][T10792] loop5: detected capacity change from 0 to 32768
[  255.309769][T10794] loop8: detected capacity change from 0 to 32768
[  255.389851][T10794] (syz.8.2246,10794,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  255.412346][T10792]  loop5: p1 p3 < >
[  255.466623][T10794] (syz.8.2246,10794,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  255.505826][T10794] (syz.8.2246,10794,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC.
[  255.574957][T10825] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2260'.
[  255.585066][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.585119][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  255.622941][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2260'.
[  255.670421][T10794] JBD2: Ignoring recovery information on journal
[  255.717510][T10824] loop7: detected capacity change from 0 to 4096
[  255.879852][T10837] loop6: detected capacity change from 0 to 1024
[  255.888385][T10794] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  255.920136][T10839] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  255.971182][T10824] NILFS (loop7): error -22 preparing GC: cannot mark copying blocks dirty
[  256.015519][ T7938] udevd[7938]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  256.016850][ T4187] udevd[4187]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  256.273034][ T9600] ocfs2: Unmounting device (7,8) on (node local)
[  256.484560][T10851] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  256.528626][T10851] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off.
[  256.582960][T10851] overlayfs: fs on './cgroup' does not support file handles, falling back to xino=off.
[  257.106254][T10853] loop6: detected capacity change from 0 to 32768
[  257.272065][T10853] XFS (loop6): Mounting V5 Filesystem
[  257.290789][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2290'.
[  257.385941][T10853] XFS (loop6): Ending clean mount
[  257.426916][T10853] XFS (loop6): User initiated shutdown received.
[  257.464275][T10905] loop8: detected capacity change from 0 to 1024
[  257.471612][T10853] XFS (loop6): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  257.578401][T10853] XFS (loop6): Please unmount the filesystem and rectify the problem(s)
[  257.710584][ T7076] XFS (loop6): Unmounting Filesystem
[  258.371268][T10937] tap0: tun_chr_ioctl cmd 1074025694
[  258.861701][T10969] loop5: detected capacity change from 0 to 1024
[  258.891354][T10969] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  258.912966][T10969] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  258.955447][T10969] EXT4-fs error (device loop5): ext4_get_journal_inode:5187: inode #5: comm syz.5.2324: unexpected bad inode w/o EXT4_IGET_BAD
[  259.000960][T10969] EXT4-fs (loop5): no journal found
[  259.026065][T10969] EXT4-fs (loop5): can't get journal size
[  259.046963][T10969] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback.
[  259.291921][T10988] loop5: detected capacity change from 0 to 256
[  259.350746][T10987] user requested TSC rate below hardware speed
[  259.373382][T10991] netlink: 'syz.8.2334': attribute type 2 has an invalid length.
[  259.402600][T10988] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  259.527797][T10988] exFAT-fs (loop5): error, invalid size(size(72) > aligned(9223372036854777344)
[  259.527797][T10988] 
[  259.546868][T10988] exFAT-fs (loop5): Filesystem has been set read-only
[  259.563522][ T4285] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  260.150518][   T26] audit: type=1400 audit(1792672049.926:49): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=11024 comm="syz.0.2349" name="unknown" offset=16
[  260.305003][T11010] loop5: detected capacity change from 0 to 32768
[  260.382763][T11010] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  260.459218][T11016] loop6: detected capacity change from 0 to 32768
[  260.464228][ T4285] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  260.474618][ T4936] ocfs2: Unmounting device (7,5) on (node local)
[  260.533265][ T4285] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  260.564112][T11016] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.2345 (11016)
[  260.623330][   T21] Bluetooth: hci0: command 0x0401 tx timeout
[  260.651762][T11016] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  260.673543][T11016] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  260.729562][T11016] BTRFS info (device loop6): use zstd compression, level 3
[  260.744406][T11016] BTRFS info (device loop6): using free space tree
[  260.757809][T11016] BTRFS info (device loop6): has skinny extents
[  260.866213][T11049] loop8: detected capacity change from 0 to 64
[  260.874854][T11048] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2356'.
[  260.969828][T11048] netlink: zone id is out of range
[  260.987426][T11048] netlink: zone id is out of range
[  261.005979][T11048] netlink: zone id is out of range
[  261.011616][T11048] netlink: zone id is out of range
[  261.017261][T11048] netlink: zone id is out of range
[  261.023857][T11048] netlink: zone id is out of range
[  261.046520][T11048] netlink: zone id is out of range
[  261.051800][T11048] netlink: zone id is out of range
[  261.063551][T11048] netlink: zone id is out of range
[  261.068840][T11016] BTRFS info (device loop6): enabling ssd optimizations
[  261.085496][T11048] netlink: zone id is out of range
[  261.141529][   T26] audit: type=1800 audit(1792672050.916:50): pid=11016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2345" name="file0" dev="loop6" ino=258 res=0 errno=0
[  261.371419][ T4187] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop6 scanned by udevd (4187)
[  261.588804][ T4285] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  261.632220][ T4285] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  261.795214][T11092] loop8: detected capacity change from 0 to 512
[  262.124086][T11092] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  262.183117][ T5488] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  262.205761][T11092] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  262.320704][T11092] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.2370: bg 0: block 248: padding at end of block bitmap is not set
[  262.359893][T11092] Quota error (device loop8): write_blk: dquota write failed
[  262.381345][T11092] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  262.394781][T11092] EXT4-fs error (device loop8): ext4_acquire_dquot:6236: comm syz.8.2370: Failed to acquire dquot type 1
[  262.408162][T11104] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  262.421563][T11092] EXT4-fs (loop8): 1 truncate cleaned up
[  262.435405][T11092] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  262.453310][T11104] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  262.475031][T11108] loop7: detected capacity change from 0 to 256
[  262.610433][  T154] Quota error (device loop8): remove_tree: Getting block too big (0 >= 6)
[  262.628908][  T154] EXT4-fs error (device loop8): ext4_release_dquot:6272: comm kworker/u4:2: Failed to release dquot type 1
[  262.802654][   T21] Bluetooth: hci1: command 0x0406 tx timeout
[  262.871230][T11125] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2380'.
[  262.994009][   T26] audit: type=1326 audit(1792672052.776:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11132 comm="syz.8.2391" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a6a2e2559 code=0x0
[  263.366557][T11136] loop7: detected capacity change from 0 to 32768
[  263.410406][ T4187]  loop7: p1 p3 < >
[  263.456528][T11136]  loop7: p1 p3 < >
[  263.582962][T11157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  263.591199][T11157] IPv6: NLM_F_CREATE should be set when creating new route
[  263.726544][ T4206] udevd[4206]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  263.742311][ T4187] udevd[4187]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  263.785401][T11166] loop6: detected capacity change from 0 to 4096
[  263.835925][ T4192] udevd[4192]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  263.855311][T11166] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  263.869194][ T4187] udevd[4187]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  263.963048][T11166] ntfs: volume version 3.1.
[  264.017258][T11176] loop5: detected capacity change from 0 to 1024
[  264.109982][T11178] loop8: detected capacity change from 0 to 256
[  264.154938][T11176] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 2: comm syz.5.2408: lblock 2 mapped to illegal pblock 2 (length 1)
[  264.175494][T11176] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  264.189812][T11176] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 48: comm syz.5.2408: lblock 0 mapped to illegal pblock 48 (length 1)
[  264.207486][T11176] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  264.218694][T11176] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.2408: Failed to acquire dquot type 0
[  264.232309][T11176] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  264.296274][T11183] bq24190-charger 0-006b: No support for SMBUS_BYTE_DATA
[  264.305404][T11183] i2c i2c-0: new_device: Instantiated device bq24190 at 0x6b
[  264.323210][T11176] EXT4-fs error (device loop5): ext4_evict_inode:284: inode #11: comm syz.5.2408: mark_inode_dirty error
[  264.345842][T11176] EXT4-fs warning (device loop5): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  264.355739][T11178] FAT-fs (loop8): Directory bread(block 64) failed
[  264.382626][T11178] FAT-fs (loop8): Directory bread(block 65) failed
[  264.408196][T11176] EXT4-fs (loop5): 1 orphan inode deleted
[  264.420090][T11176] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[  264.444096][T11178] FAT-fs (loop8): Directory bread(block 66) failed
[  264.450695][T11178] FAT-fs (loop8): Directory bread(block 67) failed
[  264.457951][ T4290] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  264.508583][T11178] FAT-fs (loop8): Directory bread(block 68) failed
[  264.522950][T11178] FAT-fs (loop8): Directory bread(block 69) failed
[  264.533306][ T4290] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  264.581645][ T4290] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0
[  264.599015][T11178] FAT-fs (loop8): Directory bread(block 70) failed
[  264.614206][T11178] FAT-fs (loop8): Directory bread(block 71) failed
[  264.628131][T11178] FAT-fs (loop8): Directory bread(block 72) failed
[  264.649834][ T5190] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  264.685546][T11178] FAT-fs (loop8): Directory bread(block 73) failed
[  264.733041][ T5190] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0
[  264.776228][ T4936] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  264.811910][ T4936] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  264.851694][ T4936] EXT4-fs error (device loop5): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  264.950583][T11207] program syz.7.2422 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  265.017070][T11209] binder: 11208:11209 ioctl c0306201 200000000080 returned -14
[  265.322553][T11228] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2430'.
[  265.362314][T11230] set_capacity_and_notify: 1 callbacks suppressed
[  265.362331][T11230] loop7: detected capacity change from 0 to 1024
[  265.585607][ T7414] hfsplus: bad catalog entry type
[  265.591429][ T7414] hfsplus: bad catalog entry type
[  265.699318][  T155] hfsplus: b-tree write err: -5, ino 25
[  265.738727][  T155] hfsplus: b-tree write err: -5, ino 4
[  265.743431][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  265.744454][  T155] hfsplus: b-tree write err: -5, ino 2
[  265.788467][  T155] hfsplus: b-tree write err: -5, ino 26
[  266.181912][T11267] loop6: detected capacity change from 0 to 1024
[  266.324072][T11275] loop5: detected capacity change from 0 to 16
[  266.367512][  T154] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.444323][T11275] erofs: (device loop5): mounted with root inode @ nid 36.
[  266.550644][T11275] overlayfs: failed to get metacopy (-117)
[  266.563041][  T154] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.662344][  T154] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.771606][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  266.771623][   T26] audit: type=1400 audit(1792672053.545:52): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=11285 comm="syz.5.2456" name="p" offset=58
[  266.854343][  T154] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.909943][T11292] loop5: detected capacity change from 0 to 764
[  267.250482][T11301] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2464'.
[  267.522014][T11305] rxe_eth0 speed is unknown, defaulting to 1000
[  268.320440][T11320] loop6: detected capacity change from 0 to 32768
[  268.433273][T11320] XFS (loop6): Mounting V5 Filesystem
[  268.507875][T11305] chnl_net:caif_netlink_parms(): no params data found
[  268.735027][T11320] XFS (loop6): Ending clean mount
[  268.788572][T11375] MPTCP: kernel_bind error, err=-99
[  268.910289][  T154] device hsr_slave_0 left promiscuous mode
[  268.962088][  T154] device hsr_slave_1 left promiscuous mode
[  268.979935][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.988443][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.998593][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.007534][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  269.024380][  T154] device bridge_slave_1 left promiscuous mode
[  269.031027][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.210143][ T7076] XFS (loop6): Unmounting Filesystem
[  269.240314][  T154] device bridge_slave_0 left promiscuous mode
[  269.289234][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.414075][   T21] Bluetooth: hci3: command 0x0409 tx timeout
[  269.442585][  T154] device veth1_macvtap left promiscuous mode
[  269.472952][  T154] device veth0_macvtap left promiscuous mode
[  269.479198][  T154] device veth1_vlan left promiscuous mode
[  269.528208][  T154] device veth0_vlan left promiscuous mode
[  269.948109][T11424] loop6: detected capacity change from 0 to 64
[  270.175129][  T154] team0 (unregistering): Port device team_slave_1 removed
[  270.240645][  T154] team0 (unregistering): Port device team_slave_0 removed
[  270.261051][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.278919][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.410470][  T154] bond0 (unregistering): Released all slaves
[  270.486731][T11408] netlink: 27 bytes leftover after parsing attributes in process `syz.8.2494'.
[  270.517043][T11305] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.554684][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2508'.
[  270.565536][T11305] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.581627][T11305] device bridge_slave_0 entered promiscuous mode
[  270.611324][T11305] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.639426][T11305] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.654106][T11305] device bridge_slave_1 entered promiscuous mode
[  270.701378][T11451] loop5: detected capacity change from 0 to 1024
[  270.788548][T11305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.828986][T11451] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  270.867192][T11305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.057334][T11305] team0: Port device team_slave_0 added
[  271.128423][T11305] team0: Port device team_slave_1 added
[  271.227275][T11470] loop7: detected capacity change from 0 to 8
[  271.269759][T11305] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.304284][T11470] Dev loop7: unable to read RDB block 8
[  271.327994][T11305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.333109][T11470]  loop7: unable to read partition table
[  271.425912][T11305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  271.428319][T11470] loop7: partition table beyond EOD, truncated
[  271.491057][T11470] loop_reread_partitions: partition scan of loop7 (���������C�j̖4FLQk��5) failed (rc=-5)
[  271.501735][ T4285] Bluetooth: hci3: command 0x041b tx timeout
[  271.507873][T11305] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.507889][T11305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.507916][T11305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  271.829374][T11482] MPTCP: kernel_bind error, err=-99
[  271.895952][T11305] device hsr_slave_0 entered promiscuous mode
[  271.999890][T11305] device hsr_slave_1 entered promiscuous mode
[  272.140194][T11499] ieee802154 phy0 wpan0: encryption failed: -22
[  272.143095][T11305] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  272.160532][T11305] Cannot create hsr debugfs directory
[  272.167183][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2522'.
[  272.732020][T11526] netlink: 774 bytes leftover after parsing attributes in process `syz.5.2536'.
[  272.768991][T11526] netlink: 'syz.5.2536': attribute type 1 has an invalid length.
[  272.872485][T11305] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  272.928535][T11536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2540'.
[  272.960233][T11305] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  273.014027][T11305] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  273.023431][ T4278] Bluetooth: hci4: command 0x0406 tx timeout
[  273.056613][T11305] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  273.310548][T11558] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string
[  273.421088][T11305] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.495138][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  273.506481][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  273.515909][T11566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2551'.
[  273.537646][T11305] 8021q: adding VLAN 0 to HW filter on device team0
[  273.570754][T11574] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2551'.
[  273.586729][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  273.633258][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  273.664347][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.671522][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.723764][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  273.733421][ T4284] Bluetooth: hci3: command 0x040f tx timeout
[  273.742756][T11573] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2554'.
[  273.836043][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  273.860466][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  273.886910][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.894113][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.942621][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  274.021988][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  274.053448][T11589] page:ffffea0005200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x148000
[  274.054449][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  274.111143][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  274.113700][T11589] flags: 0x57ff00000000200(slab|node=1|zone=2|lastcpupid=0x7ff)
[  274.142961][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  274.153208][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  274.166023][T11589] raw: 057ff00000000200 0000000000000000 dead000000000122 ffff8880179ddb40
[  274.190210][T11589] raw: 0000000000000000 0000000000110011 00000001ffffffff 0000000000000000
[  274.214482][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  274.237858][T11589] page dumped because: unmovable page
[  274.245535][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  274.295183][T11589] page_owner tracks the page as allocated
[  274.301662][T11305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  274.330363][T11589] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 9977019340, free_ts 0
[  274.353038][T11305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  274.376553][T11589]  get_page_from_freelist+0x24f6/0x2670
[  274.391147][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  274.407455][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  274.415920][T11589]  __alloc_pages+0x1ee/0x480
[  274.435944][T11589]  alloc_page_interleave+0x24/0x1e0
[  274.446911][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  274.455710][T11589]  new_slab+0xc0/0x4b0
[  274.470191][T11589]  ___slab_alloc+0x807/0xdd0
[  274.476381][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  274.484755][T11589]  kmem_cache_alloc+0xf0/0x280
[  274.494582][T11589]  __kernfs_new_node+0xe3/0x6b0
[  274.511409][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  274.533466][T11589]  kernfs_new_node+0x148/0x250
[  274.544063][T11589]  __kernfs_create_file+0x47/0x2e0
[  274.570337][T11589]  sysfs_add_file_mode_ns+0x2d2/0x390
[  274.609684][T11589]  internal_create_group+0x492/0xd00
[  274.661981][T11589]  sysfs_create_groups+0x55/0x120
[  274.723336][T11589]  device_add_attrs+0x82/0x690
[  274.731664][T11607] loop6: detected capacity change from 0 to 4096
[  274.742979][T11589]  device_add+0x677/0x1050
[  274.748132][T11589]  netdev_register_kobject+0x184/0x320
[  274.759857][T11589]  register_netdevice+0x10e8/0x1720
[  274.782008][T11589] page_owner free stack trace missing
[  274.910640][T11607] ntfs3: loop6: Failed to load $Extend.
[  275.071365][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  275.123100][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  275.135951][T11305] 8021q: adding VLAN 0 to HW filter on device batadv0
[  275.324033][T11640] program syz.6.2575 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  275.509245][T11648] netlink: 806 bytes leftover after parsing attributes in process `syz.6.2578'.
[  275.738152][T11659] loop6: detected capacity change from 0 to 1024
[  275.813792][T11663] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  275.825211][ T5488] Bluetooth: hci3: command 0x0419 tx timeout
[  275.870325][T11666] loop5: detected capacity change from 0 to 512
[  275.928420][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  275.981537][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  276.030559][T11659] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  276.101831][T11666] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  276.155524][T11305] device veth0_vlan entered promiscuous mode
[  276.172883][T11666] FAT-fs (loop5): Filesystem has been set read-only
[  276.214662][T11666] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548)
[  276.233005][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  276.241680][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  276.288555][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  276.309968][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  276.381891][T11305] device veth1_vlan entered promiscuous mode
[  276.507538][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  276.563876][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  276.584922][T11305] device veth0_macvtap entered promiscuous mode
[  276.625588][T11305] device veth1_macvtap entered promiscuous mode
[  276.736178][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  276.766496][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.792865][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  276.826297][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.862926][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  276.862948][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.862970][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  276.862982][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.863003][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  276.863016][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.885159][T11305] batman_adv: batadv0: Interface activated: batadv_slave_0
[  276.886369][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  276.887152][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  276.887805][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  276.888480][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  276.889289][T11708] netlink: 'syz.8.2599': attribute type 2 has an invalid length.
[  276.889308][T11708] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2599'.
[  276.911715][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  277.175410][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.218599][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  277.249752][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.282106][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  277.314553][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.340946][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  277.361935][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.390553][T11305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  277.406978][T11305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.426240][T11305] batman_adv: batadv0: Interface activated: batadv_slave_1
[  277.438940][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  277.469649][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  277.504217][T11728] netlink: 3604 bytes leftover after parsing attributes in process `syz.8.2604'.
[  277.525460][T11305] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.547793][T11305] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.578446][T11305] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.600321][T11305] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.686734][T11739] loop5: detected capacity change from 0 to 512
[  277.770561][T11739] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  277.854177][T11739] EXT4-fs (loop5): 1 truncate cleaned up
[  277.863429][T11739] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodioread_nolock,nolazytime,,errors=continue. Quota mode: none.
[  277.903245][ T5488] Bluetooth: hci3: command 0x0405 tx timeout
[  277.962127][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.985940][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.016952][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  278.033408][   T26] audit: type=1800 audit(1792672064.805:53): pid=11739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2609" name="file1" dev="loop5" ino=15 res=0 errno=0
[  278.094529][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.108223][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.164576][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  278.205369][T11754] netlink: 'syz.0.2622': attribute type 29 has an invalid length.
[  278.269335][T11756] loop5: detected capacity change from 0 to 512
[  278.283336][T11754] netlink: 'syz.0.2622': attribute type 29 has an invalid length.
[  278.369837][T11756] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: writeback.
[  278.390726][T11756] ext4 filesystem being mounted at /459/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  278.423278][T11758] netlink: 'syz.0.2622': attribute type 29 has an invalid length.
[  278.449840][T11760] netlink: 'syz.0.2622': attribute type 29 has an invalid length.
[  278.490381][T11771] loop6: detected capacity change from 0 to 256
[  278.503605][T11771] exfat: Deprecated parameter 'utf8'
[  278.509786][T11771] exfat: Deprecated parameter 'utf8'
[  278.562364][T11756] EXT4-fs (loop5): re-mounted. Opts: . Quota mode: writeback.
[  278.589489][T11771] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  279.684767][T11786] loop5: detected capacity change from 0 to 131072
[  279.763197][T11786] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (512, 24)
[  279.771101][T11786] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  279.780514][T11786] F2FS-fs (loop5): Test dummy encryption mode enabled
[  279.789269][T11786] F2FS-fs (loop5): invalid crc value
[  279.859822][T11786] F2FS-fs (loop5): Found nat_bits in checkpoint
[  279.895836][T11786] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  279.909016][T11786] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[  279.923819][T11786] F2FS-fs (loop5): Start checkpoint disabled!
[  279.983549][T11786] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  279.991164][T11786] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  280.269172][ T5191] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  280.399423][T11846] loop6: detected capacity change from 0 to 1024
[  280.582487][T11846] hfsplus: invalid length 1280 has been corrected to 255
[  280.892291][T11862] kvm [11861]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010004 data 0x8001786
[  281.382365][T11886] cougar: G6 mapped to F18
[  281.422523][T11889] input: syz0 as /devices/virtual/input/input20
[  281.666675][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2667'.
[  281.758070][T11906] net_ratelimit: 110 callbacks suppressed
[  281.758086][T11906] ip_tables: iptables: counters copy to user failed while replacing table
[  281.974003][T11923] netem: change failed
[  282.159724][ T6581] kernel read not supported for file /video9 (pid: 6581 comm: kworker/0:20)
[  282.474071][T11958] scsi_strcpy_devinfo: vendor string '��M��ꇋ8KH,P�}�/(a��&�WCa�8(���Au��������6c�1�كX��Pwe���$XP���K���5�����'R�X7R.�]O\��k�ek���өo�p��ґ0�[�{��q6��?U�q9�mߣ�7`�`�0I3��ŵ�' is too long
[  282.639896][T11975] device-mapper: table: 248:0: flakey: Unrecognised flakey feature requested
[  282.651957][T11975] device-mapper: ioctl: error adding target to table
[  282.662281][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2697'.
[  282.700224][T11973] n: the hash_elasticity option has been deprecated and is always 16
[  282.708517][T11973] n: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.739131][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2697'.
[  282.753490][T11979] n: the hash_elasticity option has been deprecated and is always 16
[  282.762875][ T6581] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  282.774685][T11979] n: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  282.817730][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2700'.
[  283.026124][ T6581] usb 6-1: Using ep0 maxpacket: 16
[  283.156474][ T6581] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  283.175781][ T6581] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  283.200803][T12006] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2710'.
[  283.377720][ T6581] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  283.391551][ T6581] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.408335][ T6581] usb 6-1: Product: syz
[  283.422467][ T6581] usb 6-1: Manufacturer: syz
[  283.429722][ T6581] usb 6-1: SerialNumber: syz
[  283.803356][ T6581] usb 6-1: 0:2 : does not exist
[  283.893022][ T6581] usb 6-1: USB disconnect, device number 14
[  283.997346][T12027] ip_tables: iptables: counters copy to user failed while replacing table
[  284.098221][T12033] kAFS: bad VL server IP address
[  284.343803][T12045] loop9: detected capacity change from 0 to 512
[  284.462121][T12045] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  284.487894][T12055] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2732'.
[  284.541393][T12045] fs-verity: sha256 using implementation "sha256-avx2"
[  284.584504][T12045] EXT4-fs error (device loop9): ext4_validate_block_bitmap:420: comm syz.9.2729: bg 0: bad block bitmap checksum
[  284.764308][T12065] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2735'.
[  285.079139][   T26] audit: type=1807 audit(1792672071.855:54): action=measure uid>+L'f&vd�Ku�\|�R�>(/:}�Ɣ���~A\po�%k���E�CgI��d�1��w�@�GGy�P0E�e��G9C]4�ֲM\A�l�pG����b��� res=0
[  285.101686][T12086] ima: policy update failed
[  285.122281][   T26] audit: type=1802 audit(1792672071.875:55): pid=12087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.2747" res=0 errno=0
[  285.185957][   T26] audit: type=1802 audit(1792672071.895:56): pid=12086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2747" res=0 errno=0
[  285.250965][T12093] loop9: detected capacity change from 0 to 512
[  285.321407][T12093] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback.
[  285.339948][T12093] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  285.366493][T12093] EXT4-fs error (device loop9): ext4_ext_check_inode:501: inode #2: comm syz.9.2750: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  285.393414][T12093] EXT4-fs (loop9): Remounting filesystem read-only
[  285.422039][T12093] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #2: comm syz.9.2750: corrupted inode contents
[  285.455618][T12093] EXT4-fs (loop9): Remounting filesystem read-only
[  285.473007][T12093] EXT4-fs error (device loop9): ext4_dirty_inode:6087: inode #2: comm syz.9.2750: mark_inode_dirty error
[  285.511741][T12093] EXT4-fs (loop9): Remounting filesystem read-only
[  285.520243][T12093] EXT4-fs error (device loop9): ext4_do_update_inode:5229: inode #2: comm syz.9.2750: corrupted inode contents
[  285.533190][T12093] EXT4-fs (loop9): Remounting filesystem read-only
[  285.539923][T12093] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #2: comm syz.9.2750: mark_inode_dirty error
[  285.559386][T12093] EXT4-fs (loop9): Remounting filesystem read-only
[  285.769152][T12107] program syz.9.2755 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  285.863562][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2760'.
[  285.911978][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2762'.
[  286.251001][T12142] phram: illegal start address
[  286.468659][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2779'.
[  286.518884][T12157] netlink: 'syz.8.2779': attribute type 19 has an invalid length.
[  286.547471][T12157] netlink: 'syz.8.2779': attribute type 20 has an invalid length.
[  286.581567][T12157] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  286.591531][T12157] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  286.600473][T12157] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  286.609272][T12157] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  286.709483][T12130] loop9: detected capacity change from 0 to 32768
[  286.780051][T12130] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.2767 (12130)
[  286.875625][T12130] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm
[  286.907749][T12130] BTRFS info (device loop9): setting nodatacow, compression disabled
[  286.955761][T12130] BTRFS info (device loop9): enabling auto defrag
[  286.990231][T12130] BTRFS info (device loop9): max_inline at 0
[  287.005449][T12176] netlink: 'syz.5.2786': attribute type 10 has an invalid length.
[  287.020146][T12130] BTRFS info (device loop9): using free space tree
[  287.027871][T12176] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.035239][T12130] BTRFS info (device loop9): has skinny extents
[  287.035241][T12176] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.129851][T12183] __nla_validate_parse: 2 callbacks suppressed
[  287.129871][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2786'.
[  287.205294][T12183] device bridge_slave_1 left promiscuous mode
[  287.237750][T12183] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.289297][T12183] device bridge_slave_0 left promiscuous mode
[  287.358211][T12183] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.482268][T12183] bond0: (slave bridge0): Releasing backup interface
[  287.750422][T12212] kvm [12211]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010005 data 0x39
[  288.101531][T12238] loop6: detected capacity change from 0 to 64
[  288.483743][T12238] Trying to free block not in datazone
[  288.490167][T12238] Trying to free block not in datazone
[  288.532490][T12238] Trying to free block not in datazone
[  288.780716][T12269] loop6: detected capacity change from 0 to 512
[  288.822043][T12269] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  288.904212][T12269] EXT4-fs (loop6): 1 truncate cleaned up
[  288.909927][T12269] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000101,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  288.934921][T12275] MTRR 1 not used
[  289.002144][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2820'.
[  289.025377][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2820'.
[  289.062242][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2820'.
[  289.072427][T12283] A link change request failed with some changes committed already. Interface eql may have been left with an inconsistent configuration, please check.
[  289.417455][T12305] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  289.493423][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  289.911197][T12325] loop9: detected capacity change from 0 to 256
[  289.929404][T12333] bond0: invalid ARP target specified
[  290.029668][T12341] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  290.029668][T12341] The task syz.0.2841 (12341) triggered the difference, watch for misbehavior.
[  290.842246][T12398] netlink: 'syz.0.2871': attribute type 1 has an invalid length.
[  290.858978][T12398] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2871'.
[  290.878025][T12401] pimreg: tun_chr_ioctl cmd 1074812117
[  291.052706][T12411] MTRR 1 not used
[  291.186033][T12421] overlayfs: upper fs does not support file handles, falling back to index=off.
[  291.218713][T12421] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  291.382150][T12432] netlink: 'syz.0.2888': attribute type 2 has an invalid length.
[  291.552210][T12441] loop6: detected capacity change from 0 to 4096
[  291.617875][T12445] loop9: detected capacity change from 0 to 2048
[  291.642020][T12449] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  291.819461][T12455] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  291.999436][T12426] 
[  292.001972][T12426] ======================================================
[  292.009018][T12426] WARNING: possible circular locking dependency detected
[  292.016113][T12426] syzkaller #0 Not tainted
[  292.020566][T12426] ------------------------------------------------------
[  292.027775][T12426] syz.5.2885/12426 is trying to acquire lock:
[  292.033893][T12426] ffff8880622e60f0 (kn->active#787){++++}-{0:0}, at: kernfs_remove_by_name_ns+0x91/0x100
[  292.043816][T12426] 
[  292.043816][T12426] but task is already holding lock:
[  292.051295][T12426] ffffffff8dd51188 (serio_mutex){+.+.}-{3:3}, at: serio_unregister_port+0x2b/0x150
[  292.061001][T12426] 
[  292.061001][T12426] which lock already depends on the new lock.
[  292.061001][T12426] 
[  292.071726][T12426] 
[  292.071726][T12426] the existing dependency chain (in reverse order) is:
[  292.081207][T12426] 
[  292.081207][T12426] -> #1 (serio_mutex){+.+.}-{3:3}:
[  292.088627][T12426]        __mutex_lock_common+0x1e5/0x2400
[  292.094559][T12426]        mutex_lock_interruptible_nested+0x17/0x20
[  292.101100][T12426]        drvctl_store+0x2a/0xae0
[  292.106079][T12426]        kernfs_fop_write_iter+0x3a8/0x500
[  292.111982][T12426]        vfs_write+0x748/0xd70
[  292.116778][T12426]        ksys_write+0x153/0x260
[  292.121686][T12426]        do_syscall_64+0x4c/0xa0
[  292.126666][T12426]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  292.133474][T12426] 
[  292.133474][T12426] -> #0 (kn->active#787){++++}-{0:0}:
[  292.141256][T12426]        __lock_acquire+0x38f7/0x7d40
[  292.146769][T12426]        lock_acquire+0x19f/0x400
[  292.151849][T12426]        __kernfs_remove+0x5da/0xcb0
[  292.157398][T12426]        kernfs_remove_by_name_ns+0x91/0x100
[  292.163437][T12426]        sysfs_remove_group+0xfd/0x290
[  292.169120][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2902'.
[  292.169558][T12426]        sysfs_remove_groups+0x50/0xa0
[  292.184070][T12426]        device_remove_attrs+0xc2/0x140
[  292.189767][T12426]        device_del+0x637/0xa80
[  292.194667][T12426]        serio_destroy_port+0x34a/0x470
[  292.200251][T12426]        serio_unregister_port+0x12c/0x150
[  292.206265][T12426]        userio_char_release+0x7f/0xb0
[  292.211786][T12426]        __fput+0x212/0x8c0
[  292.216328][T12426]        task_work_run+0x125/0x1a0
[  292.221507][T12426]        exit_to_user_mode_loop+0x10f/0x130
[  292.227707][T12426]        exit_to_user_mode_prepare+0xee/0x180
[  292.234075][T12426]        syscall_exit_to_user_mode+0x16/0x40
[  292.240096][T12426]        do_syscall_64+0x58/0xa0
[  292.245200][T12426]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  292.251671][T12426] 
[  292.251671][T12426] other info that might help us debug this:
[  292.251671][T12426] 
[  292.261932][T12426]  Possible unsafe locking scenario:
[  292.261932][T12426] 
[  292.269505][T12426]        CPU0                    CPU1
[  292.274909][T12426]        ----                    ----
[  292.280317][T12426]   lock(serio_mutex);
[  292.284426][T12426]                                lock(kn->active#787);
[  292.291319][T12426]                                lock(serio_mutex);
[  292.297944][T12426]   lock(kn->active#787);
[  292.302450][T12426] 
[  292.302450][T12426]  *** DEADLOCK ***
[  292.302450][T12426] 
[  292.310607][T12426] 1 lock held by syz.5.2885/12426:
[  292.315733][T12426]  #0: ffffffff8dd51188 (serio_mutex){+.+.}-{3:3}, at: serio_unregister_port+0x2b/0x150
[  292.325530][T12426] 
[  292.325530][T12426] stack backtrace:
[  292.331459][T12426] CPU: 0 PID: 12426 Comm: syz.5.2885 Not tainted syzkaller #0
[  292.338931][T12426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  292.349026][T12426] Call Trace:
[  292.352324][T12426]  <TASK>
[  292.355267][T12426]  dump_stack_lvl+0x188/0x250
[  292.359997][T12426]  ? load_image+0x410/0x410
[  292.364549][T12426]  ? show_regs_print_info+0x20/0x20
[  292.369893][T12426]  ? print_circular_bug+0x12b/0x1a0
[  292.375118][T12426]  check_noncircular+0x2f8/0x400
[  292.380085][T12426]  ? print_deadlock_bug+0x5d0/0x5d0
[  292.385330][T12426]  ? lockdep_lock+0xf1/0x1f0
[  292.390147][T12426]  ? mark_lock+0x286/0x320
[  292.394633][T12426]  ? _find_first_zero_bit+0xd1/0xf0
[  292.400479][T12426]  __lock_acquire+0x38f7/0x7d40
[  292.405370][T12426]  ? __lock_acquire+0x13b3/0x7d40
[  292.410629][T12426]  ? kmem_cache_free+0x8f/0x210
[  292.415513][T12426]  ? verify_lock_unused+0x140/0x140
[  292.420751][T12426]  ? kasan_set_free_info+0x1f/0x40
[  292.425886][T12426]  ? ____kasan_slab_free+0xd5/0x110
[  292.431129][T12426]  ? kernfs_put+0x311/0x480
[  292.435698][T12426]  ? sysfs_remove_groups+0x50/0xa0
[  292.440865][T12426]  ? serio_destroy_port+0x34a/0x470
[  292.446109][T12426]  ? exit_to_user_mode_loop+0x10f/0x130
[  292.451682][T12426]  ? exit_to_user_mode_prepare+0xee/0x180
[  292.457453][T12426]  lock_acquire+0x19f/0x400
[  292.461999][T12426]  ? kernfs_remove_by_name_ns+0x91/0x100
[  292.467683][T12426]  ? lock_chain_count+0x20/0x20
[  292.473209][T12426]  ? read_lock_is_recursive+0x10/0x10
[  292.478626][T12426]  ? up_write+0x1b6/0x410
[  292.482997][T12426]  __kernfs_remove+0x5da/0xcb0
[  292.487797][T12426]  ? kernfs_remove_by_name_ns+0x91/0x100
[  292.493500][T12426]  ? kernfs_next_descendant_post+0x200/0x200
[  292.499554][T12426]  kernfs_remove_by_name_ns+0x91/0x100
[  292.505054][T12426]  sysfs_remove_group+0xfd/0x290
[  292.510034][T12426]  sysfs_remove_groups+0x50/0xa0
[  292.515010][T12426]  device_remove_attrs+0xc2/0x140
[  292.520072][T12426]  device_del+0x637/0xa80
[  292.524447][T12426]  ? kill_device+0x160/0x160
[  292.529067][T12426]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  292.534996][T12426]  ? _raw_spin_unlock+0x40/0x40
[  292.539890][T12426]  serio_destroy_port+0x34a/0x470
[  292.544954][T12426]  serio_unregister_port+0x12c/0x150
[  292.550274][T12426]  userio_char_release+0x7f/0xb0
[  292.555275][T12426]  ? userio_char_open+0x190/0x190
[  292.560339][T12426]  __fput+0x212/0x8c0
[  292.564405][T12426]  task_work_run+0x125/0x1a0
[  292.569034][T12426]  exit_to_user_mode_loop+0x10f/0x130
[  292.574436][T12426]  exit_to_user_mode_prepare+0xee/0x180
[  292.580019][T12426]  syscall_exit_to_user_mode+0x16/0x40
[  292.585513][T12426]  do_syscall_64+0x58/0xa0
[  292.589964][T12426]  ? clear_bhb_loop+0x30/0x80
[  292.594658][T12426]  ? clear_bhb_loop+0x30/0x80
[  292.599375][T12426]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  292.605406][T12426] RIP: 0033:0x7f215c56e559
[  292.609874][T12426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  292.629511][T12426] RSP: 002b:00007ffce81fc6b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  292.638668][T12426] RAX: 0000000000000000 RBX: 00007ffce81fc7a0 RCX: 00007f215c56e559
[  292.646695][T12426] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  292.654846][T12426] RBP: 00000000000471b7 R08: 0000000000000001 R09: 0000000000000000
[  292.662875][T12426] R10: 0000001b2fa20000 R11: 0000000000000246 R12: 00007ffce81fc7e0
[  292.670917][T12426] R13: 00007f215c7f4fac R14: 0000000000047215 R15: 00007f215c7f4fa0
[  292.678952][T12426]  </TASK>