last executing test programs:

2m3.620135862s ago: executing program 1 (id=451):
syz_emit_vhci(&(0x7f000000e840)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x2, 0x8, 0x3, 0xe7}}}, 0xa)

2m3.461255591s ago: executing program 1 (id=452):
setregid(0xee00, 0xee00)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7e, 0x2143844, 0x4004, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004080)="cf6dcad1f5c5c712407a3f1d491539b627c8255f86be020a4f0ff8851dc6d8ab33ec6d10e619ed910e4811af9ee1581a1d0687020937fa7005f26bab6e9591923f5c1086ecd154e9bfbec5afd856afe3429448161089fab21bc7b9ab5158aa219761d845b8307b1fc87605dbaa4cf80fc74737d4d4cfc68fe06c16b87b759a91a368c70b2e05ee4acf0f9111df10f30c4e16b7ee3d1cf380273ab8e6ca382e06022f539c0c4e62b1ad827ff576249375b2231e47038c67b3353242c81baaf90b3645ed12504a4ccf4b0e6419804399f9fe7f60df022a12405093264d225e8003061dd690cd169f922da3507717ade8bfa8ae2c45eccd32e14ffc4e11ae939e90fceb53e0bde3916d9e4e36d1de07fbbdd2dbc24145e1e7bc8f3423f4c3426406fa499a6de404e6827db35840a726a1582be4457f0ce0cde1c414e2f497ff8ff4cb606962f6acac00230b2cbce10b09d2f6b33b9f4efb3839a222c4bc5bb3e552056f8c2b7bc84ab62434bcc61f64b74367a9ec857ec7f5a09ab6b16667bdc846434d22dd95f7b8a47a1246a39d135de1ffc2946cf36034ef8d753b7d692aa00c91fc1636c0be309ef4bf345918a386e76edc3680ee574528bf3369741c9104bd77e61aa72d8b82162bb150d4232e21c8c9453d89467f9e00fd5148bee49da206fbe6357bbc31b111e68f0b95c37063a6c5401a094819e28a2104c37db5624fe075d0b2cc50f7140f4f49396b43d14f93ab9f9649e2dc694cea520cc068a3869a3ea4ec599a995f69d936dd62e2b81499f3ed4879d25b90aff3eae74b28ae35f18f0b457a5af35e2ede43786958b127ef76723d6ffe0e7e3346d5a9f0aabcc0d93fc085316516ef79b3e2400ed2946a0d1b2ace13ea7ed39ac51cb9d98cf70feb30d5bad39f6b5903e8ab654f48bfd7e54dcb502b158f68bd96e6beb4392fa59d3e1048803e4749f3ad522414d3180de3a0da1227bfbb704b66ae6a85b1c2c51e484622eeb169760e9ec50e14c014a0cc05aebbee77f31b62834169cb49bec0c43090506c8f34ca6e108e6328ced7a9f11cb3d57398b0b1d84c9e75d5cdf17766d619dc2658aacb900ca0f93aa248d702039417b558b8ab4a41921154153cdc86d999b2e7932eabb55a4e6c8c03029c851a9e84ef84acd9affdff84ffc063bb1ab6c97e169071edbe524462fef9116edd9fbb5032478cd5ad2b2c5527fdf64223dbc952fb528f7b1d817ca787f8a57992b40202ca124cd27eadd6d70351379a6456b697b317d101514d1d5d61002e4f3bcf7555c6b36c4c1d18cba0fd4fd7b3a246b72d47d7c1908cc9c3a29fbf43019b5179b0975d7680ec15720f7fc8b96b13522d058ef009719580227489ea68062cc735cca0b6a60a10c44f2b75d2895be41a278c50e62f979674c9e507dfa7a0c087c4fd43ccc32357e34c0bcc526fe43bed33e99632c84ea59780f78e7954d8e5430c9acb7d9dd28ac3761515cba6064fe81d3b4541dacfd6fb916735833704a5cb1723f867322fa806a20d5029a608986b5019402035bebf3e099547702409815bd1d3c63072fb0fc216c2186048f1e4ae5288a12a5c9b25f7649899f84c8aedc3721334d7bcdb656f8e3c0f2b7e40b837a15c9d6472b6acb58a39babc65d08e529f2f690ea780f43c35698610351fde4615efafba129b2b619135f8af77c7291483262c5555f4d66173b34c5c7f1c415cd6ab15ae4cef34cf5680e11332c6863d2140f00cc3a337b23afb0080fa54360282086b0c0faaf2bc2a9f7335a96fa8af6a52a1e04eed2e7c337d1e378545ded0d0453b8a16b6d0a90860dfe560528515005ba852a314b4540206a8513e73212c65fb4b35f4ac7050d18bd62a6c720cfda30cb2385d3d5217655db1f344fc34361b83b22d31a040366acbdc28d397254b41c3b1f0d20e0a5db4df6338e78ae09b38f82c71fb0208afbb506461384bf578c607e05ad5a6ddb708b9add5d4d363877659a663827136b4dc1b4012c7035a56bb91e14a3d22b3ac3989f91d78808758d1b5bfdbfc66d3389e3362987e13bf9a9747373c90c0c658b7b832eff19aa2f3667f79bcd073765308fbabf2d612d0445fa1be6280cb9d0ba759d218ae971d3dd5d458c10d14f154109bfb2fd03523ac5748bcd8582dc3be5c28ef4be94cb55fdcb12a6271dbb7f11fd33d61382096588167a2b20b02cc43b88729985073a5b21b8e4bb2c43894d7c88bf111576b3b56f905b1f23f0570c07b475d5f86508c3489f4f2e2d0f3b11bfd6c3c58930483f9345f4f755089848c42361d4b0c0e855935d7f6793f78a68b554358b810cdcdec350376c94486c67fc5d11c0a68873312b40b49bb29aca16e1f3e3ce4da7a9e7aaa6ec1d9932b78d9c12c45e61b5f6faa6ffcb21608fc61bc4180f91d26f9db592c98e532d60c28e9fab794ab8a62c21122397193d8b5b72bf050b07f79df5e14069b56359835e3048f182629328e4a72a1fd0530182c802744611637e93deabc6c3ee30041025026be97ac314eaf7b399b0702cf73848e54f355d766121361398609078057473c2aa46b2fbd7e7a7d6d039615eea23fd223c49a9b5b5fd7b0c6f30c9b0e55fbebced3c90ceb668e6dbd5e6511c19d32c29b5fef7d06cf2ffff7872bd541d0fe70e5991ba3c19e72d5533e6fe9652c21338ced211c7d9e912486b4de29998ef4cca892fe94972b31fa33e781386b75b5d6980a9bfb887d7485d71f6744a6f87bc407ccd03281e10eb1bafd5d9bf279d362e2a49e54187e40abb06e21ed8425135a169ba5b8e1a806951352580ae135dfbbe3395e18ccf67fdb891903934739b56dc0e49e258552dc66d46eadfed9a7ceeabf20d02aee2c8ce4060382474252ccd9bab03d7e8eb77195bb712c19e066153bef5a212f2a450d4a1280d243928f3add450c2544c800b507c8b8ffc5d7f3cd9a4526505d05d04fbfdd0fc1f996ba3f4a797c96b24af37c15859b4bcda9234750fb6acef8dc20893ac5051b3d6aee60f01fc34e3b6753848fdca9b18e461c87f08fb8d67ddce234ca56bbe021f468f964ec1416ba6df0434440140090edd222cb9534830fec026788f43899737771e67552df68fb81d90aa90fcc1149149aaa96c1730829c6856407e5194dd2ec7cfe5fa419c2ea6127039ae188649b2cfccb9faf59f45dc9af76f3cb17c8224e68fb5f81b4556980542a928f9563bebcf3db248cff2183fffff15710432f8691041fa8aceb65b6454e9c375402b599503fb4881a3baa5ba58893cac154575ef0ec8efe35a6eeccb98d081f6d4cf2661b484765ce95bca5bda75fc90e630e355d0dd6d22a5d4c7990931ac160da14f211c33b668edb93cd9c87de3881c47e4b0fab746d0e931600478c9cc2e3cc08eab1ee7cb4e3749ab44e7ab4be15e5b031e58d59b294fbe794fb5760a2ceedd1cfc4343b1c2886b0721945a109384cb00fe6e9bdf09e5e406e757a6f24e659495a11a93382d5425d6fcab1d002303aa1531a120b8f30dd17cac7385bb8455503b2ff0daf8b4dc5353f88f34c894fc0b2fd2920c97432aded8b89fba9a9db4c4f3498043f936a1cb0dee7f5d902b1f6d909b637b8e2f05d31a2640eb1ac556ede22006466014d4a407e3486f94ca676ef39be6399ca24bff48b03ab1da71d1a5e3994d0a8723894bfbbc33969923970df3a9fd0b5084a6cbb41f79a0d3338bb61e7dc2cf795f2fa883aa61d7820c4e2215744dd9cf517cc5921850d1d9aaaaede5fb125e663c830c2414655d6af43a90f9b79eccbc2c009b963b503827c7614ab8824b3289ed8e559ed644a163db18fe66789037eb599be39fb66955a27a4831a59322d39b95b6d571d8fffb5352a0297b449719a5246247ec4c24f40b5ace1c8e76fa1029a47065af4adfc03b2732677f81bf9729ba06380a330cb388c9e4f50a0cf4ceb5ea8b6bdda8df0839de274c0c7a57f7a9173d21832b7f19ee8cfc340eea461ce7956f986f828c91697c5a241cb9efec40a1a0f34a2a63821dbd50a111b368a034823191dbd3b7a9fe8bee53cada1902f2a278efe3f10eecbf8279c2f9b2e7bf542076bf0bb41e9f21e766741f3ecfbd5a38158b1ce884255cc227a7b7196f966b631c228fea918d8dfee020dcf4c40231c0ab6fd7ccf4e7444fb360f2be3c1519a577dae770a14cd90df85490995fa8553fb255ee9807e0c7617c582f82ac56a0d902c8cd58244cddcec23cf2a05a79b474c716d9ea92bc28b0132ec48a3c5257dc7e1d9cc3f760d559b5c12ad75c95497962f9a564b0d9ed29f44f63b2c56169b2151d699e8d2d570d94f5f37898d3d8abde9253354fd146af62ccfd171d9014fd4d142e2e390f3ce2370165a01aff0fe566ec44e3084815cecc85540d84d8a11d0504fbd95f2c2709b87083b3cfffe36f611a4a6b9e4237a350d1ad4b1e0239946d86ce535e9f07def01a5e6d2e65ee59f380e55c9f295478c5589425852fd22eec2d6e555828ffb4212b33ad530c38b76254d2baac6bff5f94d3ba19ff4b35cb1c972c0b538e1adb5da70affc99c99c0613bea6111848054b416d26368c90784d845f0507f89fd058381dc7d6c6bb81dae94d11e3a0de778aca82814fec0b63780fb2b4f480da063411cd66356f87e68780448ed0c1f3836a46e536609d672d7cef1cffa0614a4f6286ab7f3fab0baf595b4c3c2e43f979f4f4a89165c24698f71406b4330a333f6c8ee018420b2b47735295043123459fafeb5886fc044a3805b162714a3436f58264c0713a4be82a7550f37f88cd7f61c0ec27d887285da7ecb4eb32963c8205eff6d5bf532b72976c5f0a24d6d4d2bf4030f04a47a15fb4de2631361fe0895aeacd2028401c5c183223647c1e765e6406542eeac4d979e6a493e389a649af7ddb35fadd32cf1edaeaaf0982ae8131084ae4759e2af1dbd007f7ce00900437be6d8d3559210b3011d1fe52e8485cc5c14ad4aab4c03c7dec4302e7f72abb7fcc799899cec17308151a758b810369c4d53c443cb1278709df6336f84fa39e51d208b4507a31e6f06352dbd99d7dadd86215e47ed645a9b89bdce630cf80fc1fe59dc31eae39010a930965b3b0e01096347158d683de6888f3284c1fd47b3e79e0fcc299cd4f519ce067a007ae7ee906d639789fedc850e60a7b4be9dc525e3e58b01f24b065c4b21b9011e74030aba77931bec74698557b4768ae41eeb4caa2f530578bf1f9379fb623a27561bba03c7623400ef975ca2e2d6881e0f96fe1e7f9ec0e8f6aeac30f70f848399c6dc9c4e58bf50aacbe566965b257943f6c9ffe210af0cb488488d67b09164d98f3254cc313f7cf8dab1f2e1ed3a7e4a86ad85707d4fe0e7fe483c7f311912e92bee9b17819b53a39c374cfbadf8c3641bae4177aafacf3394af12310f222dc0a67eba49c1475da8607c25f3ee7b1e1e0961c7d319b32ab549c002b93852af7146f5e74aab020446d9a446582a2bc19a730bafcca463fbe0cf2664e10746ddbf0966ec1e327e1f8fa6bb67e18cf849fa810c938695de5f8df98d3004065c787181f4bd8324c59b18972ac5ca92f96c51b4a63ea130712d70a51c49def99feb37312fa6a52e188de88f5446fa4688514bf96f195bfdae4b248445ef5a37e5c0169c7ee42a8e613e71793486bfb24e37bd0d9f0cfb3db61b45ed731edd5c4bd7b6b133f5f3f51fb3a12e9e43db5a23a4c6c787c803791341f10aa083760413724031ec83d5d5c03e9d3585e6a6c87f51ad4db6d678cae14936c09e24fba69e90fe4c2ebed615e254b1d2a25c12b07c1226c0e9fa9112a49cffc9238d3303d3a9a293c5bdec80545e76b911aec6f956d2122d0ee2bee424aee05e0a25a7ff72e3e1c10f590380f82f1e693fb45b1466cbc7e8ee741ca97775c2ae15c1ad0f4a8221c55e82b4e4ddbbb3d88516fdc26969707143e3175f56b07ea8a7d40660ee346a511e0985c6cde95b573dab7c53cb9d32eb18bdb67147b562dd99124d744703492a89dc8cf387ad17a992a6850ee683953c70547f2c70ac44ddc4563fb0c0c23ac7b806a0172a3a74db45378568306ab3036b5348f96ddec344a899b6058179c070cb5f3a478a02d94dbd836a0e2223194e406c2296ceb6dd39667ce62b4c191889ea052f382b9c051c272480111fe287b84c10cf7512a6dd0a601a1cb41545915925a63bd09f9d77a1bc156a7d822e204029363b3c713c5cbef590efd01c4ffe00b816745a37d83b27ab05c3a0c2d6ff800276f3fe502bb3bd7b60b38d32376246a3384554072fe63ec409a0182d588b839d319c680f830583db3e4f5071eaa066689e9e19539d9a12fefffe223288b77600dabde9b2bea871cc1ea2b3318a9699d736f02490d76c1e457aaf45ce318445ce10625b43059694e996ace387580589f9f37944b799337fa38ef9292d2276e0f659471134aaef911514212553779be2ba00816187465e278ba2d03e66cd633f9a274ce882ae971f2d07cb4fde38bf88327aea83d5303011b0263f24630916b796d532e5437179882b0470dbf8d693bbae4015ef28b3d57b5e3b643068dc1d1921291f4f1280a8183532298dffc2501cd3ff0bfb6b0e61d2a59c596f21b98db4d730e155936e98c95c96ac6231b1232e4ed89ce65311fe66199e113f9f69084c31444ae9f106e909bc070d83c1cffc514189c1e0b6763c2732a227a6229407af592772c2b843fb944896ff61161449b6df045ba618d117d8361733198f0963850df3e077aa538571efe279f9c7e006e2c882f5301706ee2bbbe769164cf7d9597d0142d0052641eb43a9ffe76d978384ea8c10050a80021d3c9177fcb29652b4906081d926ea23e749c9272731aff7fd0c271ac4859a5829c5b406a1c363752fecb1a76b201a0df467efd6ffe6adc0debe36ec6d1fc84ccebfa07cb136bbea0f1ef74983bdfc087e050430f5aa395cd8786b609941fbce55ab90e00000000000000685cab24847d85f8bc7a5784a4367ba06690cf1a88acfeddcb7cc44c9797f4f0e5daf9d301c6e702652268530c22df26d14da8768a8951f26849fa1e20015878cb6332d033531b8128233e61094cfc5dd71ba9af36ba6aa1c37b24805a45c3dd302bbc1dc8e9348f9a47540e14016bd5357e7978092497b800a97425363a42454eb04c32c9ac959fb37eb00ed6e31f81b2aa67d9f4930eb31dc2260151d845f9865d2b3a301ce3bef54a977492039eb908512a083087961f90ee568c5e5c60d6e726dda2c3f31c072979e09d8fd6f2365f65ef46399a183511904226d8ec72805582107ff5951d2e0d5c028d29e940fa068c0ca1c238420e53297c31d68f70fb543f347d91afb5d66ef1e8460a1431b638a6b0ae259f7fe8eb03aae9ef1ea4cfcfbac7e7b20b5c46ea8b0a2e88527bf54fd866362ab6a99e466bb029259f35711bc376b2f70edd738b48451f20ee404938821419ee5eace0171b3fd73d57bf0a723152933ccb84d567e79737b33e334dab955cdc03298215a2943ee493d815af83d48ee808a5e508903cc574ea4b52de645a18b0f43cd6b81a15a7f089cc7596adde2ea693381c7eaa2e246b9cbec98bb4e8ea3db8b47e57ef8d3a2eace3e2dcc083f6625f4e86bdbe2d6c57fa8ae4902ae9964c847eb292998d485d3326a7076360b85365edd5b733876abb5e26943481a52b10a1c95f34aed88568b873ef481798fbafe036d5d580c7437cb1a651e2a89d98d9002d0bf6418a271f9808df4b2ceaa8508e6c1d7d58e96d87f6db011395a0b74cb39e066411fef6c8ce7942ef8d8bb826be0b06ecada10e46f7ac25eb7ab0e3339752c8d0784659d72a287ea9a5e3a699977456695a6f9fe40eb8f7269b414cda403ba94f512c332fcea82f1927a5695ea2eb2ce7380ae74a0672ffe7fd2c4a19715a984d518b5be67543c31e42962b4c030fbdfedc5977b03d85294db2578d6561fdd9e0f9cfaf7eb1609bfab67105b227ec43189e449c4f2f17b8175b3afb0087f70786673353a3913cd03240761b5ff91a1e6510499c1f4152a759b1ca39ace773a1f27a5a88bb94a4201a91addf5c2c8587547e454d186b562cf89a41a02c36765565c3d753a2d8127d3908853f5ccc1c35346f22284573695c5695a520ace2d0cd13c1138b1fb10f74487b9a2c7a5e01195a1629d3e5d567a77a2aaee24d2936c2618c63eb5cdeb64f5592cb38175d416c05588f03b287c6e16329fee69c8294db5b5bbb81499d7ef18ddb93144c897253e8330cea3be31bab73de42284fce239597ab7cd5b68cfba057b01aaab0f0d4191c31b407fd8f9c7f04eaca31e5d240c7910663bde4ad478f134d09dca902e6acdd292f2745c73cecea2204a56d0098c32da73eeee41b348d5826109ccfd2397bb73a25ebb7e95537df71cce504f14c219ec525795d2fd5027cea9810aadc77e1b874f9fc4e33ed7b90a4007bbc341493302e4e2cbca2a8229fd2c3db7faecec2b8805bde9d92a29f6a7096cfc05ed5b678566e6c079dddfcc0b6c17541047beb477c4493a1588be177490db134d69a225aa6848b27494f17c3882ea2ee436ac1e981256ccaa70ba1f7a621385694b62bda8c4f6b04c61d6798afdc9cec019392d1242a35c3382b09aab4999e1b383714622f2ab80f275ecc8ea67694f020466aef6ed5a4535f32df47f0478e00194b44b9003f6dff232bdecbdf2a06da35246dfbc0d40becfdd5ecf971f0f408913bf094282fa2272cc5683604945e3eba52231f131c81b1035dcbb8a4292059ceaf92f36877aa15049bacc544d2c9bee4eb1bd01d76861557e646082f118454c37bbc7d08a311b4668f2777912cf882439b47e7d3c08bfdefe31e3effcbddf9e5bf175fd7c1ae85f6436cd817580970b3d8303e33ea128d222e8adb1de246fd9583c0385fe89bbf9af2cd82a38083069a997175fc7e96096052d55620554bd723b28de9a177b0aa0a5928d3d991c7da85a3513b1fffb8c75b5bc2874491ac6affc2a71ef1d639a90bb4c53624139ab8764f60e7470592608a520dfa0289c3be27e2a8f6525a31830aaf887213285eeb4286509c4904f2f5c6058e29c9c5c7886e107fc8b6411ea86bef63c88c863c7d7be52424a0126b8642d83946792de32c6150e9ce9be9d20eada4b47bd24fda102ee8cbc3a870743ab1839f979076b79cffac7d2234db5b345de7f994110bbb873a7058e5ad2fe9d9f0527a4a7b3799f81a06c9ee25c1a4a6317c3c454e9b9bb03360775184c37897db2e23dda4fc5cfbbdd477f564ad48416224ab75742d8d2375773c34325b36cead158372821e3db81a2dc99fc4293b39b183f1a71afbd4faa5e66a0d457f15424ca9c39969a85226b03b1ba8a98b0655a4581c7849bad2b1e5eb09236284779235ec2c0f44d547705298a9076bd32cdbb0a1169529a4780629e8cc291bbe25d98eaca72e934b7ef3a26d60dcebb509b8122d9d3de366b1c81c01e1a3f2ec0556d4759917612ba175b48f47534e592293e50e66dfbd0e1d0373cb3f58a43f3c32408ceba4c2614ff35b72a2cc03166f9866904f7ec19650edc06ca73ef63fc759094ae06a8405144dc22a0480155057169e59897eded975544a3e26dc0ba673a803fd35e16f6ef4695fc554e0c92fd97d3287f368b06ebb41e7d9a5956ceac39f27a82dda86f981519e31f544d844109d5ed58c159e7aa1805461149c604f262a1dd0c2f072f8f5b9b9bd4542cff3050c85b981dbf1731805fee07a4f92bb1828842f34395b90b76834a624690bfd431185026fd090c8dce10ac30ea68502dc8d2d85f836eb747c9bb8b6d16da1cb692f33b77f80c05b250496f3a880dca37c6514d5b5e2cf90d0b18bc31fd27a2c96110b9aacbe2afce417c415778e58e0b9ace5f209696980cc45e51bc292b3d5c247e2c8fffecd214d927aab0fecd0f50b359df4971944891fbefd40345e7f14e833486c126df0c1839032e64fa59280d699eed79f03acc206d6a5340cc1c5deb4204cb8780830497f23522b89fc503e6a8a01d11e83de680bbaed65fbd970c71e2087213c3ee64280bcc1f616a274c11d01f0d81f084c3873bc871d50395e05f658a75915118b0da8281a310fc905488ae03aa89726d74d6ed6da76d6dffcdafd7b4d2fa4a867e9b42cdf71db56c542ccf1270974f1efcd80f70fd463d2cfc03c8e111f2d1232bf6e228123c316ecb60eb6d8f650e9281381d540b29b520be3f921bd314eff9ca241b69d95e78256f1bfcbfe37a9f094716d36af6e1ce36184bc6a4dfb88320ee186f52db245dd50d8af51f489f792494c14efffdb88faa1d9ad1d633b327b7ff6523bbfdfe4274b856bbca9e2847499923738207a399dffb514bba855b75d12c9c57aa2e58db0000210f5ad375d3b697f3dda96f5f78c13bfd6d01a5050e01a2e55cc2695a3f2193820286a688cc144fb9043e7c6772bf2cbd7bb5a7a57fee1c18dbdfaadfa5be0d1adfa55dd3a8480807708ee6e11d9f9dfc5bc682e104795928e56af800b42c9c07a25237b092ba1e93a525ed5b5b39ad6e02ac6b41e136c904dd4592370c322f5eb595ed30fa00a277928dfc765930af1c2936f5ad2425c411980b5bb012e0e240c7d50f16ba990540a765cc1fef3809a0344ce6d083ab8705378fabe14a2e63e12eaef453273a78a7d3fabff1fe6a9ba07e208740ab8ed6e50abe2a85b649e1d3ec2f3191e010b50a7ddffdfb25e53e196775655a1ae707daafc4e9709927eb961faaeb1be21ddde0fab9665774086c34af3beac362a5cb712b786a5e1c8811ef574c5b269946939ed530c5bf42306016b69957dd57d83c88cc32a366c0aacc964c693fa7e03c1e89832f2076ec03995f1f9b2cde66acdffa3ca33776b61176369c78e87b2eeb0a14d7cbbaa597c0ae8e1014660baf06e22a6fc4974772975b7d7d003e6bc6a4cdf4cd5f2a95dcfc8194d93b273e59baeb350935aef906bdb94d1fd3c0781aa8fcb17f3f68c9afe090ba059acf599d2934481eae73717c4354c8c2b4d425ef7073968624c5d91e46322cc23091c58643316acff626f160b9cb770e0d9595d33cb6f44915d7efb6747973ffbf34119bba44d074472e661095012ad94af00463520deb45a6b6b7b6a173b23aef637e4cc0363d43c5ddb43c81936143f7db63f7f7771a611930f9f82a12f3c59b0f72de98bbc75ad33f1823fa872be154b19f16f0fba01ac3d64d46cbfc1850d1b4b5790cd86633b1880b86fc34a8b9f31100950ea0bda3abf2b037e21ee348418df67cc1d056d74125f9c73b42b104b6ad322ffebfe658dc3c0a06af44d73324b5ae59e2bd99d4782ec053ea07513a271ecf8651b25bc3e026bc88a4aa1513a2b4d4e173c1e21c77302ce64be8331c4d5b6203bbccd96dfbf9debb29a167753e06c55ca88550ec186bd20b3d94f7c2af719bc638cac3f8cc6c80220fd5f4be03bab9bb975e5effa4c5eac098c531590ec5eeaa90faec3630671d9e1a454577b01b73bfea67456ae187f0e61a9292612f428ab8c5780a3803b7dc2ec8221181db3876f2c00", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x7, {0xfffffffffffffffc, 0x1, 0x0, {0x3, 0x69ec2dea, 0x9, 0x201, 0x6dc6, 0x7651, 0xa442, 0x7, 0xe000, 0x601d824b499141fd, 0xcd36, 0x0, 0xffffffffffffffff, 0x6, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000)

2m3.25716726s ago: executing program 1 (id=453):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)
r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}})
io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x30)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

2m2.534062965s ago: executing program 1 (id=456):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup\x00', 0x154)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000340), 0x220000c, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

2m1.145311838s ago: executing program 1 (id=458):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=<r3=>0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x2, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8008001}, 0x85)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='P'], 0x14)

1m58.505322672s ago: executing program 1 (id=468):
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
socket$kcm(0x1e, 0x5, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x2)
getuid()

1m57.59425714s ago: executing program 32 (id=468):
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
socket$kcm(0x1e, 0x5, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x2)
getuid()

5.992684705s ago: executing program 4 (id=977):
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002d306c10ce0aff20010101020301090224000100000000090400"], 0x0)

5.81598354s ago: executing program 5 (id=978):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800040, &(0x7f00000002c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@bsdgroups}, {@nouid32}, {@i_version}, {@delalloc}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x487, &(0x7f0000000340)="$eJzs3MtvG0UcAODfrpO09JVQyqOlQKBCRDySJi3QAxcQSByKQIJDgVNw0qpq2qAmSLSKaECovSChSnAGjkj8Bdy4IOCEhMQJ7qhSBb20cApae7e1XTtPN27j75OczHhmPTOend3ZHdsBdK3B7E8SsS0i/oiI/mq0PsNg9d+1K3Plf6/MlZNYWHjz76SS7+qVuXKRtdhuax4ZSiPST5O8kHozZ86eGJ+amjydx0dmT74/MnPm7DPHT44fmzw2eWrs0KGDB0aff27s2ba0M2vX1T0fTe/d/erbF18rH7n43s/fZfXdlqfXtmNV+m5+ajBr+D8LFY1pj8ddayrudrO9Jpz0dLAirEgpIrLu6q2M//4oxY3O649XPulo5YBbKjs3bWqdPL8AbGBJdLoGQGcUJ/oLfXPl7Bp4zdfBd5jLL1YvgLJ2X8sf1ZSeSPM8vQ3Xt+00GBFH5v/7KntEO+5DAAAs4bPyl4fj6eq8o37+l8Z9Nfl25GsoAxFxd0TsjIh7ImJXRNwbUcl7f0Q8sMLyG5eGbp7/pJdW1bBlyuZ/L+RrW/Xzv2L2FwOlPLa90v7e5Ojxqcn9+XsyFL2bsvjoImX88PJvn7dKq53/ZY+s/GIumNfjUk/DDbqJ8dnxyqS0DS5/HLGnp1n7k+srAUlE7I6IPSt76R1F4PiT3+5tlSlZsv2LaMM608I3EU9U+38+GtpfW8dF1idHNsfU5P6RYq+42S+/nn+jVflL938z7Vs7zPp/S/3+n6d8fSYPDLxbu147s/LSz/95oeU1zWr3/77krcrxqFh2/XB8dvb0aERfcrgSr3t+7Ma2RbzIn7V/aF/z8b8z3ybr/wcjItuJH4qIhyPikbzuj0bEYxGxb5H2//RS67TV9X/7ZO2faHr8u77/DyR1/b/yQOnEj9+3Kn95/X+wEhrKn6kc/5aw3Aqu5b0DAACAO0Va+Qx8kg5fD6fp8HD1M/y7Yks6NT0z+9TR6Q9OTVQ/Kz8QvWlxp6u/5n7oaDKfv2I1PpbfKy7SD+T3jb8oRSU+XJ6emuhw26HbbW0x/jN/lTpdO+CWa7aONtbkC23AxtM4/tP66LnX17MywLryfW3oXkuM/3S96gGsP+d/6F7Nxv+5hri1ANiYVnv+39zmegDrz/wfupfxD92rYfyX4vdO1QRYR2v5Xv8dEdia/1rF7VKfDROItGOl7+qJWNFWy/89iFsdeOf2qMYyAp0+MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALTH/wEAAP//tADp4w==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4142, 0x1f7)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)

5.328218703s ago: executing program 5 (id=979):
mq_open(0x0, 0x42, 0x1f0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f0000000040)=0x312)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4})
openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
close_range(r3, 0xffffffffffffffff, 0x0)

4.353391359s ago: executing program 5 (id=980):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f0000000dc0)=ANY=[@ANYBLOB="73686f776173736f632c0080da3e68c346f09759880adda7fb7a95a2f9a5376cd7c5d2ddfca3e914f85cffd5047acdc68e67c6179a91f4b17bfee47a6f9f901f2685c19d25d93a65403e593e0aea376762d3323a54ea772757b22259d244f61622274d5e8b21d835ceb3afac660819b63431b9fe729c02baeb2313404366fa28fed4"], 0x5, 0x567, &(0x7f0000000740)="$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")
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x845}, 0x4000080)
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)

3.447730938s ago: executing program 4 (id=982):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)}, {&(0x7f0000000540)="b4e007f06d056aa0367c73", 0xb}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {0x0}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8", 0x17}, {&(0x7f0000000ac0)}], 0x6, 0x4d9e, 0x8)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3.35714939s ago: executing program 2 (id=983):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file1\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x3, 0xd99, &(0x7f0000006900)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x18})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048805}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac04}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040)

3.238239036s ago: executing program 4 (id=984):
unshare(0x6a040000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x844)
socket$kcm(0xa, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010110000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a3e9bc0c6844efc7888a0792d459d62d22171c9108da26471af7f477cac60d427a14a600e56e99a20f2506a7735d7a4572f35840d83270c3a57ccf3cd47988defb2c4302ef57623fe45a985c11c5614436593726d246fd6a4ef2690e22a846025adb6ac0ccf72"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

3.105285779s ago: executing program 5 (id=986):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xae5, 0xff}]}}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "160440", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0)

3.020565423s ago: executing program 5 (id=987):
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040))

2.281861095s ago: executing program 2 (id=989):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

2.20824518s ago: executing program 3 (id=990):
r0 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x80c006, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x29e, &(0x7f0000000bc0)="$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")
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='.\x00', 0x19624bc, &(0x7f0000001f80)=ANY=[@ANYRESHEX=r0, @ANYRES16, @ANYRESOCT, @ANYBLOB="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", @ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="67b492c11f8bc8985216c4cb38d9a93a392abd659f72c8ddd8f58c9d9d05d41f1bb4e21e5dbbe0dedcbed6ef4959285fb758eb158538fc238492f1d7f2845ff901fd53796e415c579db2d5cc4e9316589a2f7cdb164d4cbc166904ede9898e0b4e4966456c91c5e7ccb625b13a132380983fe05c119e74e90a1cb51b8b7b085ec526494bd0a67c4b0245110daea7b6b8968469e4c24b962f94bbaf36f5d0b8b61b22cc392bc11dc7844950a09b9538f30786074bb2c23878fc62a080be83c41c367e2d3ee816c769a99093b7517b617ae2c048b3abdeb7b7fdef17b37a6afe05adf138da4098688af7525db73fc082dd6254afc2bf1a00a6e1c583b0cea95c6f97ef23f2e321c182f24a061f7024ef710b90c3807cf15e2407dfba4233aab1d69c3f13949f7cdf92ac459802ae50d724ea690938f56ce56a25e1f72ef23fdc033eece09a2ec288401d977213a128746c17e5da8dc6aa0c7e26a2df8a11de556e4a60eac1b02d1720e236bb44959a2dfa8777f9945c1acee99c7cd3d10f4d1cf7241069c49d1a67830fa6f09a1457c0caa4981e2b8c2148c808fa71", @ANYRESOCT=r0, @ANYRESHEX, @ANYRES8], 0x0, 0x0, &(0x7f0000000000))

2.20786627s ago: executing program 0 (id=991):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000000200)=0xc)
setregid(0xffffffffffffffff, r1)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x21000e, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@resgid={'resgid', 0x3d, r1}}, {@init_itable}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@user_xattr}, {@debug}]}, 0x1, 0x553, &(0x7f0000000d00)="$eJzs3c1vI2cZAPBnnGSbdFOyBQ6lUsuKFu1WsM6moW3Eoe0KxK0CtNyXKPFGUZx4FTvt2qqqVBw4IiFEK3HixAWJPwAJ9U9AlSrROwIEqmALBw7AoBmP98M7zsZaO97Gv58063fe+Xie116P3/nITABT63xEvB4RMxHxQkQsFfWVYojD7pDN9+mttzeyIZty9e9JJEVdRF687Wyx2Hz3pVSz3dlZr9dr+8X4cmv3xnKz3bm0vbu+Vduq7a2urry89sraS2uXyxbfGradWbte/fZffv6TX33n1d99/a0/XvvbxXeypL9VTC/aMXIf5//OZe/FbbMRsT+OYBMwU7RnbtKJAABwLFkf//MR8ZW8/78UM3lvLtffpZs/+ewAAACAUUhfW4z/JBFp2tu9TwEAAIBT5rWIWIykUi2uBViMSqVa7V7D+8V4vFJvNFtfu9442NvMpuVXelaub9drl4tras/FXJKNr+TlO+Mv9o2vRsSTEfGzpYV8vLrRqG9O+NgHAAAATIuzffv//zrs7v8DAAAAp8y5IeevjCkPAAAAYHyK/f+Z/vpkArkAAAAA4zHs+X8AAADgM+V7b7yRDWnv+debb7YPdhpvXtqsNXequwcb1Y3G/o3qVqOxld+zb/dB66s3Gje+EXsHN5dbtWZrudnuXNttHOy1rm17fiAAAABMypNf/uDjJCIOv7mQD5kzUfbHAAXXCsCpMdStPP48vjyAkzfoZx44/WYnnQAwOYfDL3J+HHkAE3PPrT5KOgV3X7xzzzGD348vJwAAYLQufCmJsvP/+ZP+J50cMFYe5QHTy/l/mF5Dnv//cFx5ACdvTg8Apt6DHvVRevOOhQHn/8+UzZymR64LAAAYu8V8SCrV4lzgYlQq1WrEE/mf+s8l17frtcsR8bmI+MPS3GPZ+Eq+ZOLxgAAAAAAAAAAAAAAAAAAAAAAAAABwTGmaRAoAAACcahGVv8Zs9/lfF5aeX+w/PnAm+fdSFI/0eusXV9+7uTTf2l/J6v9xu771/tX3bq63WvsvTuIIBgAAANCvt5+ev65MOhsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATptPb7290RtOMu4nV+K7ca4s/mzM56/zMRcRj/8zidm7lksiYmYE8Q/fjYinyuInWVpxrsiiP34lIhZGH3/uzpTb8Z9J07Q0/tkRxIdp9sGViHi97PtfifPxWL79iZLv/2wxPKxPruRf8tL4ve3fzIDt3xPHjPH0R79ZHhj/3YinZ8u3f734yYD4z5WtsORN+eEPOp37Krsrj/SXERdKf3+Se2Itt3ZvLDfbnUvbu+tbta3a3urqystrr6y9tHZ5+fp2vVb8W9rGnz7z2//1Vf037crbH/fH/3F0P5Yj2/98Vrhrix1pf5gi2Ec3b33h/uq8gVn8i8+Vf/5PHRE/+z/x1eJ3IJt+oVc+7Jbv9uyvP3y2NLEi/uaA9/9Bn//FQSvt88L3f/SnY84KAJyAZruzs16v1/aPVVgYZuZ2ZydNI3o176dpOuTiIysM39LpK/R6d2MLMf+otPQRKGR960cgjUGFURzZAgAAHjV3Ov3HXuSdsSYEAAAAAAAAAAAAAAAAAAAAU6jZjsrR9wNL04iHu51Yf8zDyTQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBI/w8AAP//qXLPzg==")

2.151053149s ago: executing program 3 (id=992):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.114271882s ago: executing program 0 (id=993):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2.057423501s ago: executing program 2 (id=994):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0)

2.031067545s ago: executing program 0 (id=995):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12)

2.028163235s ago: executing program 3 (id=996):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = syz_io_uring_setup(0x3484, &(0x7f0000000500)={0x0, 0xd2a7, 0x10100, 0x1000, 0xdb}, &(0x7f00000002c0)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0)
exit(0x0)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200})

1.921347813s ago: executing program 2 (id=997):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x7, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x68000}, 0x800)

1.835132306s ago: executing program 2 (id=998):
socket$inet6_udp(0xa, 0x2, 0x0)
fchdir(0xffffffffffffffff)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

1.542766098s ago: executing program 2 (id=999):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000080)=0x1)

1.384615776s ago: executing program 4 (id=1000):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
sendmmsg$unix(r0, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80)
sched_setattr(0x0, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x3c)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
lgetxattr(0x0, 0x0, &(0x7f00000002c0)=""/203, 0xcb)
syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00')

1.256252231s ago: executing program 0 (id=1001):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x28, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}}, 0x0)

1.225985505s ago: executing program 4 (id=1002):
openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c)
bind$inet6(r2, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b0000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

713.238392ms ago: executing program 3 (id=1003):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x70, 0x0, 0xffffffffffffff7e)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x80000000004, 0x2, 0x80, 0x25, 0x20000004, 0x7f, 0x44233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xf000, 0x80300})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xdb, 0xd})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

713.012972ms ago: executing program 0 (id=1004):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xde)

361.824552ms ago: executing program 5 (id=1005):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r3 = fsopen(&(0x7f0000000100)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'batadv0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0x0, 0xffffffffffffffff}})
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85)
lseek(r5, 0x2, 0x1)
move_mount(r5, 0x0, r5, &(0x7f0000000040)='./file0\x00', 0x210)

341.548788ms ago: executing program 4 (id=1006):
syz_usb_connect(0x0, 0xb21, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0)

233.260606ms ago: executing program 0 (id=1007):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x4000401, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff8800, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

137.615078ms ago: executing program 3 (id=1008):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x62, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x486, 0x0, 0xfff}]})

0s ago: executing program 3 (id=1009):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

6][   T13] usb 5-1: Product: syz
[   64.852690][   T13] usb 5-1: Manufacturer: syz
[   65.031018][   T13] usb 5-1: SerialNumber: syz
[   65.256896][   T13] usb 5-1: config 0 descriptor??
[   65.537082][   T13] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   66.343347][   T13] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32
[   66.770881][ T4392] loop1: detected capacity change from 0 to 32768
[   67.334639][   T23] usb 5-1: USB disconnect, device number 2
[   67.911525][   T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   68.318982][   T13] usb 2-1: Using ep0 maxpacket: 16
[   68.463550][   T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   68.480663][   T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   68.683447][   T13] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   68.694129][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.702142][   T13] usb 2-1: Product: syz
[   68.706786][ T4224] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   68.714327][   T13] usb 2-1: Manufacturer: syz
[   68.719886][   T13] usb 2-1: SerialNumber: syz
[   68.739208][ T4229] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   68.987659][ T4224] usb 1-1: Using ep0 maxpacket: 16
[   69.003407][ T4229] usb 5-1: Using ep0 maxpacket: 32
[   69.083853][   T13] usb 2-1: 0:2 : does not exist
[   69.115523][   T13] usb 2-1: USB disconnect, device number 2
[   69.153442][ T4229] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[   69.161853][ T4224] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   69.174983][ T4229] usb 5-1: config 0 has no interface number 0
[   69.201852][ T4224] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   69.423698][ T4229] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   69.432967][ T4224] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   69.445780][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   69.466278][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.484627][ T4224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.498013][ T4229] usb 5-1: Product: syz
[   69.502201][ T4229] usb 5-1: Manufacturer: syz
[   69.507984][ T4224] usb 1-1: Product: syz
[   69.512163][ T4224] usb 1-1: Manufacturer: syz
[   69.521882][ T4229] usb 5-1: SerialNumber: syz
[   69.526725][ T4224] usb 1-1: SerialNumber: syz
[   69.554124][ T4229] usb 5-1: config 0 descriptor??
[   69.604540][ T4229] smsc95xx v2.0.0
[   69.609233][ T4229] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[   69.624947][ T4229] smsc95xx: probe of 5-1:0.67 failed with error -22
[   69.863657][ T4224] usb 1-1: 0:2 : does not exist
[   69.910639][ T4224] usb 1-1: USB disconnect, device number 2
[   70.178396][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   70.407877][ T4488] Zero length message leads to an empty skb
[   70.745033][ T4496] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   71.016261][   T26] audit: type=1326 audit(1772176731.503:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4503 comm="syz.3.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f5e0d799 code=0x7ffc0000
[   71.227482][ T4269] usb 5-1: USB disconnect, device number 3
[   71.289077][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.295691][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   71.362205][ T4523] loop1: detected capacity change from 0 to 128
[   71.770626][ T4539] 9pnet: p9_fd_create_unix (4539): problem connecting socket: ./file0: -111
[   72.374197][ T4579] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   72.492670][ T4587] loop4: detected capacity change from 0 to 256
[   73.125393][   T26] audit: type=1326 audit(1772176733.623:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4616 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555fafb799 code=0x7ffc0000
[   73.203665][   T26] audit: type=1326 audit(1772176733.663:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4616 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f555fafb799 code=0x7ffc0000
[   73.297961][   T26] audit: type=1326 audit(1772176733.663:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4616 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555fafb799 code=0x7ffc0000
[   73.344496][   T26] audit: type=1326 audit(1772176733.663:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4616 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555fafb799 code=0x7ffc0000
[   73.418373][   T26] audit: type=1326 audit(1772176733.663:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4616 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f555fafb799 code=0x7ffc0000
[   73.492883][   T26] audit: type=1326 audit(1772176733.663:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4616 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555fafb799 code=0x7ffc0000
[   73.533206][   T26] audit: type=1326 audit(1772176733.663:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4616 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555fafb799 code=0x7ffc0000
[   73.560017][   T26] audit: type=1326 audit(1772176733.663:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4616 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f555fafb799 code=0x7ffc0000
[   73.621506][   T26] audit: type=1326 audit(1772176733.663:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4616 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555fafb799 code=0x7ffc0000
[   73.734216][ T4650] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   74.075140][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'.
[   74.438025][ T4695] loop3: detected capacity change from 0 to 736
[   74.494940][ T4701] loop2: detected capacity change from 0 to 256
[   74.520845][ T4695] =======================================================
[   74.520845][ T4695] WARNING: The mand mount option has been deprecated and
[   74.520845][ T4695]          and is ignored by this kernel. Remove the mand
[   74.520845][ T4695]          option from the mount to silence this warning.
[   74.520845][ T4695] =======================================================
[   74.526199][ T4701] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   74.699359][ T4701] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   74.964229][ T4718] capability: warning: `syz.4.158' uses 32-bit capabilities (legacy support in use)
[   74.967224][ T4720] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   75.911940][ T4782] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   76.046657][ T4792] process 'syz.4.188' launched './file0' with NULL argv: empty string added
[   76.404975][ T1111] cfg80211: failed to load regulatory.db
[   76.470403][ T4826] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   76.570757][   T26] kauditd_printk_skb: 5 callbacks suppressed
[   76.570770][   T26] audit: type=1326 audit(1772176737.063:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4831 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3517563799 code=0x7ffc0000
[   76.671534][   T26] audit: type=1326 audit(1772176737.103:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4831 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f3517563799 code=0x7ffc0000
[   76.767593][   T26] audit: type=1326 audit(1772176737.103:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4831 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3517563799 code=0x7ffc0000
[   76.846381][   T26] audit: type=1326 audit(1772176737.103:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4831 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3517563799 code=0x7ffc0000
[   78.050635][ T4874] loop2: detected capacity change from 0 to 16
[   78.148186][ T4874] erofs: (device loop2): mounted with root inode @ nid 36.
[   78.544370][ T4874] erofs: (device loop2): find_target_block_classic: corrupted dir block 0 @ nid 36
[   78.931821][ T4882] loop2: detected capacity change from 0 to 7
[   78.972149][ T4174] Dev loop2: unable to read RDB block 7
[   78.982548][ T4174]  loop2: unable to read partition table
[   79.016437][ T4174] loop2: partition table beyond EOD, truncated
[   79.039070][ T4882] Dev loop2: unable to read RDB block 7
[   79.056140][ T4882]  loop2: unable to read partition table
[   79.078733][ T4882] loop2: partition table beyond EOD, truncated
[   79.108358][ T4882] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[   79.333378][ T4889] loop0: detected capacity change from 0 to 128
[   79.932722][ T4891] loop3: detected capacity change from 0 to 512
[   80.239118][ T4891] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,grpjquota=,lazytime,,errors=continue. Quota mode: writeback.
[   80.240954][ T4866] loop4: detected capacity change from 0 to 40427
[   80.340960][ T4902] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   80.399226][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   80.407438][ T4902] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   80.477467][ T4891] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.491196][ T4884] loop2: detected capacity change from 0 to 32768
[   80.500654][ T4902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.580437][ T4884] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.229 (4884)
[   80.890767][ T4906] loop1: detected capacity change from 0 to 1024
[   80.967033][ T4866] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[   81.031551][ T4906] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[   81.196874][ T4866] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   81.393642][ T4907] 9pnet: Insufficient options for proto=fd
[   81.417384][ T4866] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12)
[   81.459296][ T4884] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   81.553405][ T4884] BTRFS info (device loop2): trying to use backup root at mount time
[   81.576072][ T4884] BTRFS info (device loop2): force zlib compression, level 3
[   81.651979][ T4884] BTRFS info (device loop2): enabling auto defrag
[   81.693716][ T4884] BTRFS info (device loop2): using free space tree
[   81.717658][ T4884] BTRFS info (device loop2): has skinny extents
[   81.734474][ T4884] workqueue: max_active 2097159 requested for btrfs-worker is out of range, clamping between 1 and 512
[   81.884471][ T4884] workqueue: max_active 2097159 requested for btrfs-delalloc is out of range, clamping between 1 and 512
[   82.174282][ T4884] workqueue: max_active 2097159 requested for btrfs-endio is out of range, clamping between 1 and 512
[   82.410650][ T4884] workqueue: max_active 2097159 requested for btrfs-endio-meta is out of range, clamping between 1 and 512
[   82.443457][ T4942] loop4: detected capacity change from 0 to 64
[   82.453706][ T4884] workqueue: max_active 2097159 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512
[   82.558602][ T4884] workqueue: max_active 2097159 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512
[   82.581432][ T4942] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[   82.605339][ T4884] workqueue: max_active 2097159 requested for btrfs-rmw is out of range, clamping between 1 and 512
[   82.780438][ T4884] workqueue: max_active 2097159 requested for btrfs-endio-write is out of range, clamping between 1 and 512
[   83.032712][ T4884] workqueue: max_active 2097159 requested for btrfs-readahead is out of range, clamping between 1 and 512
[   83.585067][ T4957] netlink: 44 bytes leftover after parsing attributes in process `syz.3.248'.
[   83.604170][ T4884] BTRFS error (device loop2): open_ctree failed: -12
[   83.805019][ T4967] device macvlan2 entered promiscuous mode
[   83.873967][ T4967] device bond1 entered promiscuous mode
[   83.928988][ T4967] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   84.183152][    C1] sched: RT throttling activated
[   84.962951][ T4967] device bond1 left promiscuous mode
[   85.596996][ T4965] loop4: detected capacity change from 0 to 32768
[   86.073298][ T4976] loop1: detected capacity change from 0 to 40427
[   86.184210][ T4976] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   86.191987][ T4976] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   86.203276][ T4965] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.247 (4965)
[   86.207771][ T4983] loop2: detected capacity change from 0 to 32768
[   86.236519][ T4976] F2FS-fs (loop1): invalid crc value
[   86.269215][ T4965] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[   86.276129][ T4983] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.255 (4983)
[   86.288655][ T4965] BTRFS info (device loop4): setting nodatacow, compression disabled
[   86.320752][ T4976] F2FS-fs (loop1): Found nat_bits in checkpoint
[   86.327233][ T4965] BTRFS info (device loop4): turning on flush-on-commit
[   86.363313][ T4965] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[   86.374678][ T5005] netlink: 'syz.3.261': attribute type 10 has an invalid length.
[   86.393277][ T4965] BTRFS info (device loop4): use lzo compression, level 0
[   86.401244][ T4965] BTRFS info (device loop4): setting nodatasum
[   86.408440][ T5005] device syz_tun entered promiscuous mode
[   86.417727][ T4983] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   86.453977][ T4965] BTRFS info (device loop4): use no compression
[   86.463600][ T4983] BTRFS info (device loop2): setting nodatacow, compression disabled
[   86.487771][ T5005] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   86.496114][ T4983] BTRFS info (device loop2): force clearing of disk cache
[   86.523440][ T4965] BTRFS info (device loop4): trying to use backup root at mount time
[   86.534425][ T4983] BTRFS info (device loop2): enabling ssd optimizations
[   86.544451][ T4976] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   86.563702][ T4965] BTRFS info (device loop4): max_inline at 0
[   86.570897][ T4976] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   86.583898][ T4983] BTRFS info (device loop2): using spread ssd allocation scheme
[   86.624149][ T4965] BTRFS info (device loop4): using free space tree
[   86.636758][ T4983] BTRFS info (device loop2): disabling free space tree
[   86.666363][ T4983] BTRFS info (device loop2): not using ssd optimizations
[   86.673876][ T4965] BTRFS info (device loop4): has skinny extents
[   86.822248][ T4983] BTRFS info (device loop2): not using spread ssd allocation scheme
[   86.873444][ T4983] BTRFS info (device loop2): has skinny extents
[   87.096419][ T4965] BTRFS error (device loop4): open_ctree failed: -12
[   87.638682][ T5004] loop0: detected capacity change from 0 to 32768
[   87.683323][ T4174] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4174)
[   87.766762][ T5004] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.260 (5004)
[   87.979347][ T4983] BTRFS info (device loop2): clearing free space tree
[   88.014171][ T4983] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   88.059121][ T4983] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   88.066704][ T5007] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (5007)
[   88.283030][ T5077] netlink: 'syz.3.268': attribute type 10 has an invalid length.
[   88.434545][ T5079] loop0: detected capacity change from 0 to 2048
[   88.536387][ T5079] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   88.548374][ T5077] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   88.740633][ T5077] syz.3.268 (5077) used greatest stack depth: 20176 bytes left
[   89.717617][ T5110] loop2: detected capacity change from 0 to 512
[   89.783338][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   89.865388][ T5110] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nodiscard,grpjquota=,,errors=continue. Quota mode: none.
[   90.061572][ T5122] binder: 5121:5122 unknown command 0
[   90.094406][ T5122] binder: 5121:5122 ioctl c0306201 200000000080 returned -22
[   90.108431][ T5102] loop0: detected capacity change from 0 to 32768
[   90.223485][ T1108] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[   90.234752][ T1108] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.245914][ T1108] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[   90.265978][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0
[   90.272764][ T1108] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[   90.282695][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.294243][ T1108] usb 2-1: config 0 descriptor??
[   90.312602][ T5102] XFS (loop0): Mounting V5 Filesystem
[   90.966062][ T5102] XFS (loop0): Ending clean mount
[   91.050377][ T5102] XFS (loop0): Quotacheck needed: Please wait.
[   92.345115][ T5102] XFS (loop0): Quotacheck: Done.
[   92.401758][ T4189] XFS (loop0): Unmounting Filesystem
[   93.349686][ T5160] loop3: detected capacity change from 0 to 32768
[   93.459724][ T5160] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.291 (5160)
[   93.953662][ T5160] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   93.973568][ T5160] BTRFS info (device loop3): setting nodatacow, compression disabled
[   93.985256][ T5160] BTRFS info (device loop3): force clearing of disk cache
[   94.000904][ T5160] BTRFS info (device loop3): enabling ssd optimizations
[   94.008512][ T1108] usbhid 2-1:0.0: can't add hid device: -71
[   94.019820][ T1108] usbhid: probe of 2-1:0.0 failed with error -71
[   94.040053][ T5160] BTRFS info (device loop3): using spread ssd allocation scheme
[   94.072979][ T1108] usb 2-1: USB disconnect, device number 3
[   94.089429][ T5160] BTRFS info (device loop3): disabling free space tree
[   94.110120][ T5160] BTRFS info (device loop3): not using ssd optimizations
[   94.129102][ T5160] BTRFS info (device loop3): not using spread ssd allocation scheme
[   94.173321][ T4230] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   94.246329][ T5160] BTRFS info (device loop3): has skinny extents
[   94.373251][ T4230] usb 1-1: device descriptor read/64, error -71
[   94.713314][ T4230] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   94.943355][ T4230] usb 1-1: device descriptor read/64, error -71
[   95.088396][ T4230] usb usb1-port1: attempt power cycle
[   95.093222][ T5194] binder: 5193:5194 ioctl c0306201 0 returned -14
[   95.118852][ T5160] BTRFS info (device loop3): clearing free space tree
[   95.136071][ T5160] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   95.195072][ T5160] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   95.301961][ T5197] loop1: detected capacity change from 0 to 256
[   95.384301][ T5197] FAT-fs (loop1): Unrecognized mount option "short" or missing value
[   95.427519][ T4194] Bluetooth: unknown link type 130
[   95.513832][ T4230] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   95.609004][ T4230] usb 1-1: device descriptor read/8, error -71
[   95.631586][ T5199] loop1: detected capacity change from 0 to 256
[   95.741860][ T5199] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[   95.883273][ T4230] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   96.003985][ T4230] usb 1-1: device descriptor read/8, error -71
[   96.123395][ T4230] usb usb1-port1: unable to enumerate USB device
[   97.416265][ T5209] loop1: detected capacity change from 0 to 32768
[   97.524927][ T5209] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   97.550844][ T5209] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   97.607956][ T5209] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[   97.736907][ T5205] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   97.737026][ T5205] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   98.373879][ T5232] loop3: detected capacity change from 0 to 128
[   98.537138][ T5205] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 800ms
[   98.566584][ T5205] gfs2: fsid=syz:syz.0: jid=0: Done
[   98.593943][ T5209] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   98.789750][ T5242] device gre1 entered promiscuous mode
[   98.799332][ T5247] loop4: detected capacity change from 0 to 512
[   98.879474][ T5236] loop0: detected capacity change from 0 to 8192
[   98.925046][ T5247] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   98.961836][ T5247] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[   99.142151][ T5247] EXT4-fs (loop4): 1 truncate cleaned up
[   99.165027][ T5247] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback.
[   99.874899][ T5247] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.311: Logical block already allocated
[   99.893962][ T5051] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   99.902637][ T5051] Bluetooth: hci1: Injecting HCI hardware error event
[   99.918344][ T5247] EXT4-fs (loop4): Remounting filesystem read-only
[   99.945658][ T4194] Bluetooth: hci1: hardware error 0x00
[  100.201591][ T5260] loop0: detected capacity change from 0 to 2048
[  100.472315][ T5260] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none.
[  100.487684][ T5260] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.507529][ T5260] fs-verity: sha512 using implementation "sha512-avx2"
[  101.825927][ T5294] loop4: detected capacity change from 0 to 1024
[  101.974307][ T5294] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  102.048098][ T5302] loop0: detected capacity change from 0 to 512
[  102.051517][ T5273] loop2: detected capacity change from 0 to 32768
[  102.107051][ T5294] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000009,jqfmt=vfsold,barrier=0x00000000. Quota mode: none.
[  102.135867][    C1] vkms_vblank_simulate: vblank timer overrun
[  102.173797][ T5302] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  102.198865][ T5294] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.326: missing EA_INODE flag
[  102.218369][ T5302] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  102.250624][ T5294] EXT4-fs (loop4): Remounting filesystem read-only
[  102.269618][ T5302] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.327: bg 0: block 255: padding at end of block bitmap is not set
[  102.292808][ T5294] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.326: error while reading EA inode 11 err=-117
[  102.317519][ T5302] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem
[  102.365559][ T5273] XFS (loop2): Mounting V5 Filesystem
[  102.378261][ T5318] loop1: detected capacity change from 0 to 2048
[  102.379714][ T5294] EXT4-fs (loop4): Remounting filesystem read-only
[  102.396958][ T5302] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.327: invalid indirect mapped block 1 (level 1)
[  102.424804][ T5302] EXT4-fs (loop0): 1 truncate cleaned up
[  102.445465][ T5294] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  102.493304][ T5302] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  102.503527][ T5318] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.591908][ T5273] XFS (loop2): Ending clean mount
[  103.163383][ T5336] usb usb8: usbfs: process 5336 (syz.3.333) did not claim interface 0 before use
[  104.175107][ T4188] XFS (loop2): Unmounting Filesystem
[  104.426593][ T5359] loop0: detected capacity change from 0 to 256
[  104.508542][ T5362] loop3: detected capacity change from 0 to 1764
[  104.846631][ T5375] netlink: 'syz.4.346': attribute type 29 has an invalid length.
[  104.901178][ T5375] netlink: 'syz.4.346': attribute type 29 has an invalid length.
[  104.917546][ T5380] netlink: 'syz.4.346': attribute type 29 has an invalid length.
[  105.185230][ T5389] loop4: detected capacity change from 0 to 128
[  105.234400][ T5392] netlink: 156 bytes leftover after parsing attributes in process `syz.2.352'.
[  105.353353][ T5389] loop_set_status: loop4 () has still dirty pages (nrpages=16)
[  105.361036][ T5400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'.
[  105.574624][   T26] audit: type=1326 audit(1772176766.063:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5404 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7a0df799 code=0x7ffc0000
[  105.588488][ T5405] loop4: detected capacity change from 0 to 512
[  105.596808][    C1] vkms_vblank_simulate: vblank timer overrun
[  105.672971][   T26] audit: type=1326 audit(1772176766.063:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5404 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7a0df799 code=0x7ffc0000
[  105.713251][   T26] audit: type=1326 audit(1772176765.993:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5404 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7a0df799 code=0x7ffc0000
[  105.735561][ T5405] EXT4-fs (loop4): Ignoring removed nobh option
[  105.764533][ T5405] EXT4-fs (loop4): Test dummy encryption mode enabled
[  105.771344][ T5405] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  105.815208][   T26] audit: type=1326 audit(1772176766.063:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5404 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde7a0df799 code=0x7ffc0000
[  105.865414][ T5373] loop0: detected capacity change from 0 to 32768
[  105.899234][   T26] audit: type=1326 audit(1772176766.063:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5404 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fde7a0df799 code=0x7ffc0000
[  105.904929][ T5405] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.357: iget: bad i_size value: -3674898675588399094
[  105.921835][   T26] audit: type=1326 audit(1772176766.063:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5404 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde7a0df502 code=0x7ffc0000
[  105.957549][   T26] audit: type=1326 audit(1772176766.073:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5404 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fde7a09ffce code=0x7ffc0000
[  105.979533][    C1] vkms_vblank_simulate: vblank timer overrun
[  105.987187][   T26] audit: type=1326 audit(1772176766.073:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5404 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fde7a0df5c7 code=0x7ffc0000
[  106.009383][   T26] audit: type=1326 audit(1772176766.073:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5404 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde7a09ffce code=0x7ffc0000
[  106.031446][    C1] vkms_vblank_simulate: vblank timer overrun
[  106.045269][ T5405] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.357: couldn't read orphan inode 15 (err -117)
[  106.069872][ T5405] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,debug_want_extra_isize=0x0000000000000004,data_err=ignore,nojournal_checksum,dioread_nolock,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback.
[  106.091821][   T26] audit: type=1326 audit(1772176766.073:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5404 comm="syz.4.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde7a0df42b code=0x7ffc0000
[  106.113859][    C1] vkms_vblank_simulate: vblank timer overrun
[  106.123313][ T5373] XFS (loop0): Mounting V5 Filesystem
[  106.229775][ T5373] XFS (loop0): Ending clean mount
[  106.257385][ T5399] loop3: detected capacity change from 0 to 32768
[  106.394337][ T5408] loop2: detected capacity change from 0 to 32768
[  106.441606][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  106.472756][ T5399] XFS (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  106.498601][ T5399] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  106.498941][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  106.506443][ T5399] XFS (loop3): DAX and reflink cannot be used together!
[  106.572362][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  106.650387][ T4189] XFS (loop0): Unmounting Filesystem
[  106.770831][ T5434] loop4: detected capacity change from 0 to 128
[  106.866219][ T5436] loop1: detected capacity change from 0 to 512
[  106.951258][ T5434] attempt to access beyond end of device
[  106.951258][ T5434] loop4: rw=2049, want=250, limit=128
[  106.963361][ T5436] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  107.018115][ T5436] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.362: bg 0: block 255: padding at end of block bitmap is not set
[  107.082254][ T5434] attempt to access beyond end of device
[  107.082254][ T5434] loop4: rw=2049, want=146, limit=128
[  107.207612][ T5436] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem
[  107.224268][ T5436] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.362: invalid indirect mapped block 1 (level 1)
[  107.273927][ T5436] EXT4-fs (loop1): 1 truncate cleaned up
[  107.279615][ T5436] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  107.430758][ T5445] loop2: detected capacity change from 0 to 64
[  109.188560][ T5443] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.360 (5443)
[  109.753695][ T5443] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  109.778173][ T5443] BTRFS info (device loop0): setting nodatacow, compression disabled
[  109.803350][ T5443] BTRFS info (device loop0): setting datasum, datacow enabled
[  109.877153][ T5443] BTRFS info (device loop0): force clearing of disk cache
[  109.884644][ T5443] BTRFS info (device loop0): enabling ssd optimizations
[  109.973306][ T5443] BTRFS info (device loop0): using spread ssd allocation scheme
[  109.980998][ T5443] BTRFS info (device loop0): turning on sync discard
[  110.066967][ T5443] BTRFS info (device loop0): turning off barriers
[  110.114073][ T5443] BTRFS info (device loop0): enabling auto defrag
[  110.222561][ T5443] BTRFS info (device loop0): not using ssd optimizations
[  110.423431][ T4230] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  110.611242][ T5443] BTRFS info (device loop0): not using spread ssd allocation scheme
[  110.695250][ T5443] BTRFS info (device loop0): using free space tree
[  110.719132][ T5460] set_capacity_and_notify: 1 callbacks suppressed
[  110.719145][ T5460] loop4: detected capacity change from 0 to 32768
[  110.743344][ T4230] usb 4-1: Using ep0 maxpacket: 16
[  110.791979][ T5443] BTRFS info (device loop0): has skinny extents
[  110.800606][ T5480] loop2: detected capacity change from 0 to 64
[  110.825320][ T5460] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.369 (5460)
[  110.863405][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.893787][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.935675][ T4230] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  110.965744][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.010993][ T4230] usb 4-1: config 0 descriptor??
[  111.108670][ T5460] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  111.120845][ T5443] BTRFS error (device loop0): open_ctree failed: -12
[  111.127476][ T5460] BTRFS warning (device loop4): excessive commit interval 65536
[  111.143491][ T5007] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (5007)
[  111.164987][ T5460] BTRFS info (device loop4): using free space tree
[  111.171544][ T5460] BTRFS info (device loop4): has skinny extents
[  111.672583][ T4230] sony 0003:054C:05C4.0001: hidraw0: USB HID v80.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0
[  111.684057][ T4230] sony 0003:054C:05C4.0001: failed to claim input
[  111.693597][ T5460] BTRFS info (device loop4): enabling ssd optimizations
[  112.928181][ T5205] usb 4-1: USB disconnect, device number 2
[  113.719601][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!!
[  113.733174][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[  113.742884][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!!
[  113.752267][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!!
[  114.003398][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[  114.012409][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[  114.021681][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  114.030815][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  114.039885][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[  114.048882][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  114.873764][ T5509] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.882586][ T5509] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.029402][ T5564] loop1: detected capacity change from 0 to 40427
[  116.090470][ T5564] F2FS-fs (loop1): invalid crc value
[  116.108313][ T5553] loop3: detected capacity change from 0 to 32768
[  116.118134][ T5564] F2FS-fs (loop1): Found nat_bits in checkpoint
[  116.158514][ T5564] F2FS-fs (loop1): Start checkpoint disabled!
[  116.204253][ T5564] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  116.361062][ T5553] XFS (loop3): Mounting V5 Filesystem
[  116.836952][ T5553] XFS (loop3): Ending clean mount
[  116.857272][ T5553] XFS (loop3): Quotacheck needed: Please wait.
[  116.934341][ T5553] XFS (loop3): Quotacheck: Done.
[  117.024177][ T5509] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.067641][ T5509] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.107730][  T144] attempt to access beyond end of device
[  117.107730][  T144] loop1: rw=2049, want=40984, limit=40427
[  117.121360][ T4191] XFS (loop3): Unmounting Filesystem
[  117.597099][ T5509] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.609023][ T5509] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.618883][ T5509] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.628045][ T5509] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.655179][ T5588] loop3: detected capacity change from 0 to 4096
[  117.762976][ T5567] netlink: 'syz.0.392': attribute type 27 has an invalid length.
[  118.027113][ T5588] ntfs3: loop3: failed to convert "0000" to iso8859-6
[  118.077753][ T5588] ntfs3: loop3: failed to convert "0030" to iso8859-6
[  118.098463][ T5588] ntfs3: loop3: failed to convert name for inode 1e.
[  118.106939][ T5588] ntfs3: loop3: failed to convert "0032" to iso8859-6
[  118.117733][ T5588] ntfs3: loop3: failed to convert "0033" to iso8859-6
[  118.190039][ T5567] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.197461][ T5567] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.489556][ T5567] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.522663][ T5567] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.789312][ T5567] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.799030][ T5567] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.808163][ T5567] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.817143][ T5567] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.041479][ T5604] loop0: detected capacity change from 0 to 1024
[  119.392891][ T5606] loop1: detected capacity change from 0 to 4096
[  120.316569][ T5624] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  120.609757][ T5634] loop4: detected capacity change from 0 to 64
[  120.610776][ T5631] syz.1.402 (5631) used greatest stack depth: 19216 bytes left
[  120.650298][ T5637] loop2: detected capacity change from 0 to 256
[  121.812473][ T5650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'.
[  121.903862][ T5654] loop4: detected capacity change from 0 to 32768
[  121.917730][ T5662] loop1: detected capacity change from 0 to 16
[  121.967045][ T5662] erofs: (device loop1): mounted with root inode @ nid 36.
[  122.010874][ T5665] loop2: detected capacity change from 0 to 1024
[  122.192479][ T5654] XFS (loop4): Mounting V5 Filesystem
[  122.217131][ T5659] loop0: detected capacity change from 0 to 32768
[  122.228172][ T5671] capability: warning: `syz.3.424' uses deprecated v2 capabilities in a way that may be insecure
[  122.245183][ T4375] hfsplus: b-tree write err: -5, ino 4
[  122.335855][ T5659] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  122.374725][ T5659] BTRFS info (device loop0): enabling auto defrag
[  122.381408][ T5659] BTRFS info (device loop0): use no compression
[  122.387925][ T5659] BTRFS info (device loop0): force clearing of disk cache
[  122.395294][ T5659] BTRFS info (device loop0): max_inline at 4096
[  122.401693][ T5659] BTRFS info (device loop0): disabling free space tree
[  122.408815][ T5659] BTRFS info (device loop0): has skinny extents
[  122.451553][ T5654] XFS (loop4): Ending clean mount
[  123.372337][   T26] kauditd_printk_skb: 79 callbacks suppressed
[  123.372353][   T26] audit: type=1800 audit(1772176783.793:110): pid=5684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.416" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  123.427004][ T4184] XFS (loop4): Unmounting Filesystem
[  123.671607][ T5698] loop3: detected capacity change from 0 to 512
[  123.789118][ T5659] BTRFS info (device loop0): enabling ssd optimizations
[  123.818687][ T5698] EXT4-fs (loop3): Ignoring removed nobh option
[  123.882394][ T5659] BTRFS info (device loop0): clearing free space tree
[  123.918321][ T5659] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  123.963322][ T5659] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  123.973682][ T5698] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  123.984754][ T5692] loop2: detected capacity change from 0 to 32768
[  123.991858][ T5698] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data
[  124.078417][ T5692] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.428 (5692)
[  124.310428][ T4174] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4174)
[  124.312815][ T5716] loop1: detected capacity change from 0 to 256
[  124.757538][ T5716] FAT-fs (loop1): Directory bread(block 64) failed
[  124.778622][ T5716] FAT-fs (loop1): Directory bread(block 65) failed
[  126.073317][ T5716] FAT-fs (loop1): Directory bread(block 66) failed
[  126.079913][ T5716] FAT-fs (loop1): Directory bread(block 67) failed
[  126.103355][ T5716] FAT-fs (loop1): Directory bread(block 68) failed
[  126.362692][ T5716] FAT-fs (loop1): Directory bread(block 69) failed
[  126.550881][ T5716] FAT-fs (loop1): Directory bread(block 70) failed
[  126.601605][ T5716] FAT-fs (loop1): Directory bread(block 71) failed
[  126.632650][ T5716] FAT-fs (loop1): Directory bread(block 72) failed
[  126.652138][ T5716] FAT-fs (loop1): Directory bread(block 73) failed
[  127.762478][ T5755] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  127.907018][ T5755] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.409898][ T5755] bond0: (slave rose0): Enslaving as an active interface with an up link
[  128.526934][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  128.621341][ T5768] loop0: detected capacity change from 0 to 2048
[  128.862908][ T5768] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none.
[  128.951051][ T5768] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.469015][ T5773] loop4: detected capacity change from 0 to 32768
[  129.539681][ T5773] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.450 (5773)
[  129.625452][ T5798] loop0: detected capacity change from 0 to 32768
[  129.678485][ T5798] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.455 (5798)
[  129.711014][ T5798] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  129.720374][ T5798] BTRFS info (device loop0): enabling disk space caching
[  129.727499][ T5798] BTRFS info (device loop0): force clearing of disk cache
[  129.734758][ T5798] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  129.744202][ T5798] BTRFS info (device loop0): use zstd compression, level 3
[  129.751411][ T5798] BTRFS info (device loop0): disk space caching is enabled
[  129.758720][ T5798] BTRFS info (device loop0): has skinny extents
[  129.767183][ T5773] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  129.853108][ T5773] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  129.929176][ T5818] loop1: detected capacity change from 0 to 512
[  129.946733][ T5773] BTRFS info (device loop4): trying to use backup root at mount time
[  130.009883][ T5818] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  130.075727][ T5798] BTRFS info (device loop0): enabling ssd optimizations
[  130.088292][ T5798] BTRFS info (device loop0): clearing free space tree
[  130.091060][ T5773] BTRFS info (device loop4): setting nodatasum
[  130.095269][ T5798] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  130.111099][ T5798] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  130.124231][ T5818] ext4 filesystem being mounted at /77/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.349469][ T5831] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  130.361859][ T5773] BTRFS info (device loop4): force zlib compression, level 3
[  130.372152][ T5773] BTRFS info (device loop4): setting nodatacow
[  130.378500][ T5773] BTRFS info (device loop4): turning on flush-on-commit
[  130.386087][ T5773] BTRFS info (device loop4): disabling tree log
[  130.392365][ T5773] BTRFS info (device loop4): using free space tree
[  130.399032][ T5773] BTRFS info (device loop4): has skinny extents
[  131.228000][ T5773] BTRFS info (device loop4): enabling ssd optimizations
[  131.427065][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  131.464154][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  131.579168][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  131.640624][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  131.709531][ T5007] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (5007)
[  131.729490][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  131.797720][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  131.857627][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  131.943704][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  131.994959][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  132.063822][ T4185] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  132.757068][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.764210][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  133.272683][ T5884] device syzkaller0 entered promiscuous mode
[  133.422968][ T5746] ODEBUG: Out of memory. ODEBUG disabled
[  133.608347][ T5874] loop4: detected capacity change from 0 to 40427
[  133.653297][ T5874] F2FS-fs (loop4): Unrecognized mount option "Jctive_logs=6" or missing value
[  134.369727][ T5894] loop4: detected capacity change from 0 to 1764
[  135.027037][ T5900] loop0: detected capacity change from 0 to 32768
[  135.056692][ T5905] loop3: detected capacity change from 0 to 16
[  135.261870][ T5905] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  135.547560][ T5900] XFS (loop0): Mounting V5 Filesystem
[  135.741578][ T5900] XFS (loop0): Ending clean mount
[  136.847275][ T4189] XFS (loop0): Unmounting Filesystem
[  137.150632][ T5746] Set syz1 is full, maxelem 65536 reached
[  137.303325][ T5931] loop4: detected capacity change from 0 to 32768
[  137.373102][ T5925] chnl_net:caif_netlink_parms(): no params data found
[  137.413752][ T5052] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  137.430095][ T5931] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.479 (5931)
[  137.643207][ T5941] loop0: detected capacity change from 0 to 40427
[  137.663273][ T5931] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  137.682651][ T5931] BTRFS info (device loop4): using free space tree
[  137.691566][ T5931] BTRFS info (device loop4): has skinny extents
[  137.704752][ T5941] F2FS-fs (loop0): invalid crc value
[  137.714302][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.721933][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.730292][ T5941] F2FS-fs (loop0): Found nat_bits in checkpoint
[  137.764231][ T5925] device bridge_slave_0 entered promiscuous mode
[  137.774548][ T5941] F2FS-fs (loop0): Start checkpoint disabled!
[  137.779843][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.803660][ T5941] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  137.812084][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.823668][ T5925] device bridge_slave_1 entered promiscuous mode
[  137.823735][ T5052] usb 4-1: config index 0 descriptor too short (expected 31012, got 36)
[  137.845438][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.879333][ T5052] usb 4-1: config 48 has too many interfaces: 122, using maximum allowed: 32
[  137.895320][ T5052] usb 4-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config
[  137.911311][ T5052] usb 4-1: config 48 has 0 interfaces, different from the descriptor's value: 122
[  137.928142][ T5052] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  137.943307][ T5052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.978864][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.019121][ T5925] team0: Port device team_slave_0 added
[  138.028111][ T5925] team0: Port device team_slave_1 added
[  138.048366][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.068783][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.094926][    C1] vkms_vblank_simulate: vblank timer overrun
[  138.534803][ T5087] usb 4-1: USB disconnect, device number 3
[  138.583455][ T5931] BTRFS info (device loop4): enabling ssd optimizations
[  138.715774][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.778354][ T5975] loop2: detected capacity change from 0 to 1024
[  138.809435][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.825587][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.849706][ T4291] attempt to access beyond end of device
[  138.849706][ T4291] loop0: rw=2049, want=40992, limit=40427
[  138.851721][    C1] vkms_vblank_simulate: vblank timer overrun
[  138.901655][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.974719][ T1268] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  139.010393][ T5975] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,journal_dev=0x00000000000000ff,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none.
[  139.027654][    C1] vkms_vblank_simulate: vblank timer overrun
[  139.043296][ T5204] Bluetooth: hci1: command 0x0409 tx timeout
[  139.211247][ T5925] device hsr_slave_0 entered promiscuous mode
[  139.453354][ T5204] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  139.579337][ T5990] loop2: detected capacity change from 0 to 256
[  139.609498][ T5990] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  139.655721][ T5925] device hsr_slave_1 entered promiscuous mode
[  139.692586][ T5925] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.713185][ T5925] Cannot create hsr debugfs directory
[  139.913305][ T5204] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  139.943336][ T5204] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.268299][ T5204] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  140.547634][ T5204] usb 4-1: config 0 interface 0 has no altsetting 0
[  140.604430][ T5998] loop0: detected capacity change from 0 to 4096
[  140.640975][ T5204] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[  140.656697][ T5204] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.668048][ T5204] usb 4-1: config 0 descriptor??
[  140.685740][ T6002] loop2: detected capacity change from 0 to 4096
[  140.740921][ T5998] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  140.745639][ T6004] device macsec1 entered promiscuous mode
[  140.778879][ T6005] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  140.795144][ T6004] device vlan1 entered promiscuous mode
[  140.830491][ T5925] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  140.894623][ T5925] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  140.930969][ T5925] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  140.940015][ T6008] loop4: detected capacity change from 0 to 512
[  141.026491][ T5925] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  141.038008][ T6008] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  141.089902][ T6008] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.497: bg 0: block 255: padding at end of block bitmap is not set
[  141.120109][ T6008] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem
[  141.123336][ T5087] Bluetooth: hci1: command 0x041b tx timeout
[  141.154461][ T6008] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.497: invalid indirect mapped block 1 (level 1)
[  141.188380][ T6017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.498'.
[  141.244440][ T6008] EXT4-fs (loop4): 1 truncate cleaned up
[  141.250140][ T6008] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  141.980608][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.985871][ T6024] loop2: detected capacity change from 0 to 4096
[  142.015093][ T6020] loop0: detected capacity change from 0 to 4096
[  142.042072][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  142.066736][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  142.093347][ T6024] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  142.105961][ T5925] 8021q: adding VLAN 0 to HW filter on device team0
[  142.117372][ T6024] ntfs3: loop2: Failed to load $Extend.
[  142.132356][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  142.146724][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  142.196067][ T6029] loop4: detected capacity change from 0 to 128
[  142.210673][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.217864][ T4291] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.294156][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  142.357364][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  142.396066][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  142.410989][ T4291] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.418186][ T4291] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.428213][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  142.437511][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  142.562744][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  142.804050][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  143.309676][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  143.338201][ T5087] Bluetooth: hci1: command 0x040f tx timeout
[  143.376501][ T5204] usbhid 4-1:0.0: can't add hid device: -71
[  143.382808][ T5204] usbhid: probe of 4-1:0.0 failed with error -71
[  143.401829][ T5925] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  143.494673][ T5925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  143.526492][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  143.544089][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  143.564652][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  143.599052][ T5204] usb 4-1: USB disconnect, device number 4
[  143.606601][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  143.663204][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  143.753004][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  143.833369][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  144.228953][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.263348][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.292380][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.309585][ T6031] loop2: detected capacity change from 0 to 40427
[  144.316296][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.333085][ T6031] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  144.341524][ T6031] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  144.369083][ T6031] F2FS-fs (loop2): invalid crc value
[  144.481197][ T6031] F2FS-fs (loop2): Found nat_bits in checkpoint
[  144.518672][ T6042] loop0: detected capacity change from 0 to 32768
[  144.578189][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.588442][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  144.617396][ T6042] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  144.621892][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  144.634718][ T6042] BTRFS info (device loop0): setting nodatacow, compression disabled
[  144.642858][ T6042] BTRFS info (device loop0): force clearing of disk cache
[  144.686333][ T6031] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  144.697761][ T6042] BTRFS info (device loop0): enabling ssd optimizations
[  144.708456][ T6031] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  144.722961][ T6042] BTRFS info (device loop0): using spread ssd allocation scheme
[  144.745261][ T6042] BTRFS info (device loop0): turning off barriers
[  144.770492][ T6042] BTRFS info (device loop0): use no compression
[  144.796394][ T6042] BTRFS info (device loop0): disabling free space tree
[  144.823336][ T6042] BTRFS info (device loop0): not using ssd optimizations
[  144.843223][ T6042] BTRFS info (device loop0): not using spread ssd allocation scheme
[  144.869831][ T6042] BTRFS info (device loop0): has skinny extents
[  145.064780][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  145.075094][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  145.177118][ T6042] BTRFS info (device loop0): clearing free space tree
[  145.184584][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  145.218344][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  145.233387][ T6042] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  145.289317][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  145.301365][ T6042] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  145.322665][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  145.363393][ T5087] Bluetooth: hci1: command 0x0419 tx timeout
[  145.387433][ T5925] device veth0_vlan entered promiscuous mode
[  145.419993][ T5925] device veth1_vlan entered promiscuous mode
[  145.499179][ T6042] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  145.531446][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  145.553743][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  145.596374][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  145.636784][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  145.702861][ T5925] device veth0_macvtap entered promiscuous mode
[  145.711726][ T6063] loop3: detected capacity change from 0 to 32768
[  145.735398][ T5925] device veth1_macvtap entered promiscuous mode
[  145.902523][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.978224][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.018329][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.028932][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.040182][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.051709][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.062269][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.072215][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.083172][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.094729][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.102411][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  146.121789][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  146.166996][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  146.183930][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  146.279264][ T6063] XFS (loop3): Mounting V5 Filesystem
[  146.296475][ T5925] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.347377][ T5925] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.409358][ T5925] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.511088][ T5925] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.550371][ T6063] XFS (loop3): Ending clean mount
[  146.562008][ T6063] XFS (loop3): Quotacheck needed: Please wait.
[  146.839378][ T6063] XFS (loop3): Quotacheck: Done.
[  146.909073][ T1268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.937834][ T1268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.963105][ T6063] XFS (loop3): Unmounting Filesystem
[  147.018250][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  147.067498][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.139964][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.219879][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  147.269179][ T6113] loop2: detected capacity change from 0 to 32768
[  147.621498][ T6113] XFS (loop2): Mounting V5 Filesystem
[  147.781027][ T6113] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  147.819943][ T6147] overlayfs: failed to clone upperpath
[  147.886317][ T6113] XFS (loop2): Starting recovery (logdev: internal)
[  147.951933][ T6113] XFS (loop2): Ending recovery (logdev: internal)
[  148.060356][ T6113] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x444/0x660, xfs_bnobt block 0x8
[  148.123304][ T6113] XFS (loop2): Unmount and run xfs_repair
[  148.153824][ T6133] loop0: detected capacity change from 0 to 32768
[  148.161468][ T6136] loop5: detected capacity change from 0 to 32768
[  148.179435][ T6133] XFS (loop0): sunit and swidth options incompatible with the noalign option
[  148.207198][ T4188] XFS (loop2): Unmounting Filesystem
[  148.244530][ T6136] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.470 (6136)
[  148.358392][ T6142] loop4: detected capacity change from 0 to 40427
[  148.387525][ T6136] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  148.410632][ T6136] BTRFS info (device loop5): setting nodatacow, compression disabled
[  148.430421][ T6136] BTRFS info (device loop5): force clearing of disk cache
[  148.506766][ T6136] BTRFS info (device loop5): enabling ssd optimizations
[  148.540471][ T6136] BTRFS info (device loop5): using spread ssd allocation scheme
[  148.558194][ T6142] F2FS-fs (loop4): Found nat_bits in checkpoint
[  148.561896][ T6136] BTRFS info (device loop5): disabling free space tree
[  148.593413][ T6136] BTRFS info (device loop5): not using ssd optimizations
[  148.603920][ T6136] BTRFS info (device loop5): not using spread ssd allocation scheme
[  148.664930][ T6136] BTRFS info (device loop5): has skinny extents
[  148.729088][ T6142] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  148.786195][ T6142] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  148.994798][ T4184] attempt to access beyond end of device
[  148.994798][ T4184] loop4: rw=2049, want=45104, limit=40427
[  149.058528][ T6136] BTRFS info (device loop5): clearing free space tree
[  149.070978][ T6136] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  149.081406][ T6136] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  149.738605][ T6205] loop2: detected capacity change from 0 to 8
[  150.542161][ T6214] syz.4.540 (6214): attempted to duplicate a private mapping with mremap.  This is not supported.
[  150.568637][ T6214] loop4: detected capacity change from 0 to 256
[  151.306107][ T6220] loop0: detected capacity change from 0 to 64
[  151.340649][ T6214] FAT-fs (loop4): Directory bread(block 64) failed
[  151.514529][ T6214] FAT-fs (loop4): Directory bread(block 65) failed
[  151.521226][ T6214] FAT-fs (loop4): Directory bread(block 66) failed
[  152.290969][ T6226] loop2: detected capacity change from 0 to 256
[  152.359191][ T6226] exfat: Deprecated parameter 'namecase'
[  152.365083][ T6226] exfat: Deprecated parameter 'namecase'
[  152.370876][ T6226] exfat: Unknown parameter 'keep_last_dots'
[  152.383601][ T6214] FAT-fs (loop4): Directory bread(block 67) failed
[  152.390714][ T6214] FAT-fs (loop4): Directory bread(block 68) failed
[  152.438577][ T6214] FAT-fs (loop4): Directory bread(block 69) failed
[  152.617014][ T6220] hfs: filesystem is marked locked, mounting read-only.
[  152.670578][ T6214] FAT-fs (loop4): Directory bread(block 70) failed
[  152.677320][ T6214] FAT-fs (loop4): Directory bread(block 71) failed
[  152.713384][ T6214] FAT-fs (loop4): Directory bread(block 72) failed
[  152.755717][ T6214] FAT-fs (loop4): Directory bread(block 73) failed
[  153.658653][ T6231] loop5: detected capacity change from 0 to 32768
[  153.711470][ T6231] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.544 (6231)
[  153.754676][ T6231] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  153.787943][ T6231] BTRFS info (device loop5): enabling auto defrag
[  153.809151][ T6231] BTRFS info (device loop5): use no compression
[  153.817014][ T6231] BTRFS info (device loop5): setting nodatacow, compression disabled
[  153.839362][ T6231] BTRFS info (device loop5): turning off barriers
[  153.992104][ T6254] sctp: [Deprecated]: syz.0.551 (pid 6254) Use of int in max_burst socket option.
[  153.992104][ T6254] Use struct sctp_assoc_value instead
[  154.010457][ T6231] BTRFS info (device loop5): turning on barriers
[  154.078538][ T4291] attempt to access beyond end of device
[  154.078538][ T4291] loop4: rw=1, want=1384, limit=256
[  154.102608][ T6231] BTRFS error (device loop5): unrecognized mount option 'obj_user=autodefrag'
[  154.160931][ T4291] attempt to access beyond end of device
[  154.160931][ T4291] loop4: rw=1, want=1768, limit=256
[  154.226620][ T6231] BTRFS error (device loop5): open_ctree failed: -22
[  154.234022][ T5007] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by udevd (5007)
[  154.274068][ T4291] attempt to access beyond end of device
[  154.274068][ T4291] loop4: rw=1, want=1928, limit=256
[  154.572147][ T4291] attempt to access beyond end of device
[  154.572147][ T4291] loop4: rw=1, want=4352, limit=256
[  154.786233][ T4291] attempt to access beyond end of device
[  154.786233][ T4291] loop4: rw=1, want=5264, limit=256
[  155.160970][ T6270] loop0: detected capacity change from 0 to 4096
[  155.219952][ T6245] loop2: detected capacity change from 0 to 40427
[  155.223890][ T6270] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  155.280045][ T6245] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff
[  155.310552][ T6245] F2FS-fs (loop2): invalid crc value
[  155.355267][ T6245] F2FS-fs (loop2): Found nat_bits in checkpoint
[  155.484927][ T6245] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  155.548115][ T6245] F2FS-fs (loop2): access invalid blkaddr:2816
[  155.571762][ T6245] CPU: 0 PID: 6245 Comm: syz.2.549 Not tainted syzkaller #0
[  155.579098][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  155.589180][ T6245] Call Trace:
[  155.592471][ T6245]  <TASK>
[  155.595400][ T6245]  dump_stack_lvl+0x188/0x250
[  155.600091][ T6245]  ? show_regs_print_info+0x20/0x20
[  155.605305][ T6245]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  155.611433][ T6245]  f2fs_is_valid_blkaddr+0xc7e/0x1250
[  155.616832][ T6245]  f2fs_map_blocks+0xbcd/0x3300
[  155.621731][ T6245]  ? f2fs_force_buffered_io+0x680/0x680
[  155.627310][ T6245]  ? xa_load+0x276/0x2a0
[  155.631579][ T6245]  f2fs_mpage_readpages+0xc95/0x2260
[  155.637000][ T6245]  ? dquot_release_reservation_block+0xa0/0xa0
[  155.643184][ T6245]  ? f2fs_is_compress_backend_ready+0x99/0x120
[  155.649360][ T6245]  ? f2fs_readahead+0x163/0x2f0
[  155.654227][ T6245]  ? f2fs_set_data_page_dirty+0xad0/0xad0
[  155.659966][ T6245]  read_pages+0x175/0x930
[  155.664327][ T6245]  ? page_cache_ra_unbounded+0x940/0x940
[  155.669986][ T6245]  ? add_to_page_cache_lru+0x2a8/0x4a0
[  155.675468][ T6245]  page_cache_ra_unbounded+0x838/0x940
[  155.680967][ T6245]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[  155.687546][ T6245]  f2fs_readdir+0x496/0xda0
[  155.692096][ T6245]  ? f2fs_fill_dentries+0xd10/0xd10
[  155.697404][ T6245]  ? end_current_label_crit_section+0x14b/0x170
[  155.703665][ T6245]  ? iterate_dir+0x10d/0x560
[  155.708280][ T6245]  ? down_read_killable+0x1ce/0x340
[  155.713518][ T6245]  ? fsnotify_perm+0x254/0x560
[  155.718314][ T6245]  iterate_dir+0x218/0x560
[  155.722753][ T6245]  ? f2fs_fill_dentries+0xd10/0xd10
[  155.727981][ T6245]  __se_sys_getdents64+0xf2/0x270
[  155.733113][ T6245]  ? __x64_sys_getdents64+0x80/0x80
[  155.738317][ T6245]  ? filldir+0x720/0x720
[  155.742577][ T6245]  ? vtime_user_exit+0x2c8/0x3e0
[  155.747539][ T6245]  ? lockdep_hardirqs_on+0x94/0x140
[  155.752877][ T6245]  do_syscall_64+0x4c/0xa0
[  155.757316][ T6245]  ? clear_bhb_loop+0x30/0x80
[  155.762001][ T6245]  ? clear_bhb_loop+0x30/0x80
[  155.766704][ T6245]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  155.772719][ T6245] RIP: 0033:0x7f3517563799
[  155.777155][ T6245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.797038][ T6245] RSP: 002b:00007f35157bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  155.805502][ T6245] RAX: ffffffffffffffda RBX: 00007f35177dcfa0 RCX: 00007f3517563799
[  155.813491][ T6245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  155.821513][ T6245] RBP: 00007f35175f9bd9 R08: 0000000000000000 R09: 0000000000000000
[  155.829523][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.837511][ T6245] R13: 00007f35177dd038 R14: 00007f35177dcfa0 R15: 00007fff5bc95968
[  155.845510][ T6245]  </TASK>
[  155.874129][ T6245] F2FS-fs (loop2): access invalid blkaddr:2816
[  155.890654][ T6245] CPU: 1 PID: 6245 Comm: syz.2.549 Not tainted syzkaller #0
[  155.897984][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  155.908049][ T6245] Call Trace:
[  155.911332][ T6245]  <TASK>
[  155.914267][ T6245]  dump_stack_lvl+0x188/0x250
[  155.918965][ T6245]  ? show_regs_print_info+0x20/0x20
[  155.924268][ T6245]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  155.930100][ T6245]  f2fs_is_valid_blkaddr+0xc7e/0x1250
[  155.935493][ T6245]  f2fs_map_blocks+0xbcd/0x3300
[  155.940404][ T6245]  ? f2fs_force_buffered_io+0x680/0x680
[  155.946157][ T6245]  ? xa_load+0x276/0x2a0
[  155.950625][ T6245]  f2fs_mpage_readpages+0xc95/0x2260
[  155.955947][ T6245]  ? dquot_release_reservation_block+0xa0/0xa0
[  155.962291][ T6245]  ? f2fs_is_compress_backend_ready+0x99/0x120
[  155.968565][ T6245]  ? f2fs_readahead+0x163/0x2f0
[  155.973432][ T6245]  ? f2fs_set_data_page_dirty+0xad0/0xad0
[  155.979160][ T6245]  read_pages+0x175/0x930
[  155.983508][ T6245]  ? page_cache_ra_unbounded+0x940/0x940
[  155.989159][ T6245]  ? add_to_page_cache_lru+0x2a8/0x4a0
[  155.994632][ T6245]  page_cache_ra_unbounded+0x838/0x940
[  156.000115][ T6245]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[  156.006642][ T6245]  f2fs_readdir+0x496/0xda0
[  156.011171][ T6245]  ? f2fs_fill_dentries+0xd10/0xd10
[  156.016387][ T6245]  ? end_current_label_crit_section+0x14b/0x170
[  156.022642][ T6245]  ? iterate_dir+0x10d/0x560
[  156.027247][ T6245]  ? down_read_killable+0x1ce/0x340
[  156.032454][ T6245]  ? fsnotify_perm+0x254/0x560
[  156.037236][ T6245]  iterate_dir+0x218/0x560
[  156.041665][ T6245]  ? f2fs_fill_dentries+0xd10/0xd10
[  156.046892][ T6245]  __se_sys_getdents64+0xf2/0x270
[  156.051934][ T6245]  ? __x64_sys_getdents64+0x80/0x80
[  156.052238][ T6269] loop4: detected capacity change from 0 to 32768
[  156.057131][ T6245]  ? filldir+0x720/0x720
[  156.057181][ T6245]  ? vtime_user_exit+0x2c8/0x3e0
[  156.072860][ T6245]  ? lockdep_hardirqs_on+0x94/0x140
[  156.078089][ T6245]  do_syscall_64+0x4c/0xa0
[  156.082524][ T6245]  ? clear_bhb_loop+0x30/0x80
[  156.087207][ T6245]  ? clear_bhb_loop+0x30/0x80
[  156.091893][ T6245]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  156.097884][ T6245] RIP: 0033:0x7f3517563799
[  156.102296][ T6245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.121973][ T6245] RSP: 002b:00007f35157bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  156.130378][ T6245] RAX: ffffffffffffffda RBX: 00007f35177dcfa0 RCX: 00007f3517563799
[  156.138337][ T6245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  156.146307][ T6245] RBP: 00007f35175f9bd9 R08: 0000000000000000 R09: 0000000000000000
[  156.154278][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.162328][ T6245] R13: 00007f35177dd038 R14: 00007f35177dcfa0 R15: 00007fff5bc95968
[  156.170317][ T6245]  </TASK>
[  156.293627][ T6245] attempt to access beyond end of device
[  156.293627][ T6245] loop2: rw=0, want=45072, limit=40427
[  156.318694][ T6283] attempt to access beyond end of device
[  156.318694][ T6283] loop2: rw=0, want=45072, limit=40427
[  156.347673][ T6269] JBD2: Ignoring recovery information on journal
[  157.067220][ T4188] attempt to access beyond end of device
[  157.067220][ T4188] loop2: rw=2049, want=45104, limit=40427
[  157.136543][ T6269] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  157.164905][ T6298] loop5: detected capacity change from 0 to 256
[  157.236884][ T6282] loop0: detected capacity change from 0 to 32768
[  157.310972][ T6298] FAT-fs (loop5): Directory bread(block 64) failed
[  157.325881][ T6298] FAT-fs (loop5): Directory bread(block 65) failed
[  157.332511][ T6298] FAT-fs (loop5): Directory bread(block 66) failed
[  157.381807][ T6298] FAT-fs (loop5): Directory bread(block 67) failed
[  157.439097][ T6282] XFS (loop0): Mounting V5 Filesystem
[  157.445222][ T6298] FAT-fs (loop5): Directory bread(block 68) failed
[  157.461842][ T6298] FAT-fs (loop5): Directory bread(block 69) failed
[  157.474956][ T6298] FAT-fs (loop5): Directory bread(block 70) failed
[  157.490985][ T6298] FAT-fs (loop5): Directory bread(block 71) failed
[  157.500686][ T6298] FAT-fs (loop5): Directory bread(block 72) failed
[  157.510202][ T4184] ocfs2: Unmounting device (7,4) on (node local)
[  157.534265][ T6282] XFS (loop0): Ending clean mount
[  157.560163][ T6298] FAT-fs (loop5): Directory bread(block 73) failed
[  157.690986][ T6312] loop2: detected capacity change from 0 to 512
[  157.701473][ T4189] XFS (loop0): Unmounting Filesystem
[  157.838911][ T6312] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.566: inode has both inline data and extents flags
[  157.929343][ T6312] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.566: couldn't read orphan inode 15 (err -117)
[  157.965174][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.571'.
[  158.012848][ T6312] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  158.743377][ T5201] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  160.288272][ T6330] fuse: Bad value for 'fd'
[  160.831997][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.578'.
[  160.952412][ T6334] loop0: detected capacity change from 0 to 4096
[  160.963304][ T5201] usb 3-1: unable to read config index 0 descriptor/start: -71
[  160.970981][ T5201] usb 3-1: can't read configurations, error -71
[  160.996733][ T6344] loop2: detected capacity change from 0 to 256
[  161.027914][ T6346] overlayfs: failed to clone upperpath
[  161.061477][ T6334] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  161.105066][ T6334] ntfs3: loop0: Failed to load $UpCase.
[  161.169800][ T6344] FAT-fs (loop2): Directory bread(block 64) failed
[  161.173981][ T6350] device syzkaller0 entered promiscuous mode
[  161.218372][ T6344] FAT-fs (loop2): Directory bread(block 65) failed
[  161.263580][ T6344] FAT-fs (loop2): Directory bread(block 66) failed
[  161.270166][ T6344] FAT-fs (loop2): Directory bread(block 67) failed
[  161.320255][ T6344] FAT-fs (loop2): Directory bread(block 68) failed
[  161.351417][ T6344] FAT-fs (loop2): Directory bread(block 69) failed
[  161.367823][ T6344] FAT-fs (loop2): Directory bread(block 70) failed
[  161.377775][ T6344] FAT-fs (loop2): Directory bread(block 71) failed
[  161.401848][ T6344] FAT-fs (loop2): Directory bread(block 72) failed
[  161.447385][ T6344] FAT-fs (loop2): Directory bread(block 73) failed
[  161.475591][ T6360] device syzkaller0 entered promiscuous mode
[  161.593556][ T6362] loop0: detected capacity change from 0 to 4096
[  162.963358][ T6362] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  163.314750][ T6378] loop4: detected capacity change from 0 to 1024
[  164.142310][ T6378] hfsplus: bad catalog entry type
[  164.294728][  T631] hfsplus: b-tree write err: -5, ino 4
[  165.544220][ T6402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.600'.
[  165.902607][ T6387] loop0: detected capacity change from 0 to 32768
[  165.920724][ T6417] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  166.083341][ T5201] Bluetooth: hci1: command 0x0405 tx timeout
[  166.140429][ T6387] XFS (loop0): Mounting V5 Filesystem
[  166.287115][ T6387] XFS (loop0): Ending clean mount
[  166.434058][ T4189] XFS (loop0): Unmounting Filesystem
[  167.199147][ T6437] loop4: detected capacity change from 0 to 512
[  168.381825][ T6446] loop2: detected capacity change from 0 to 736
[  168.686381][ T6453] overlayfs: failed to clone upperpath
[  168.960603][ T6457] loop5: detected capacity change from 0 to 128
[  172.059469][   T26] audit: type=1326 audit(2000000021.280:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.3.626" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36f5e0d799 code=0x0
[  172.151741][ T6471] loop2: detected capacity change from 0 to 32768
[  172.212904][ T6471] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.621 (6471)
[  172.256428][ T6471] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  172.298683][ T6471] BTRFS info (device loop2): allowing degraded mounts
[  172.332053][ T6471] BTRFS info (device loop2): enabling ssd optimizations
[  172.360074][ T6471] BTRFS info (device loop2): turning on async discard
[  172.380280][ T6471] BTRFS info (device loop2): allowing degraded mounts
[  172.411483][ T6471] BTRFS info (device loop2): turning off async discard
[  172.451166][ T6471] BTRFS info (device loop2): using free space tree
[  172.566411][ T6471] BTRFS info (device loop2): has skinny extents
[  172.596873][ T6485] loop4: detected capacity change from 0 to 32768
[  172.695810][ T6485] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  172.704891][ T6485] BTRFS info (device loop4): setting nodatacow, compression disabled
[  172.713971][ T6485] BTRFS info (device loop4): force clearing of disk cache
[  172.722207][ T6485] BTRFS info (device loop4): enabling ssd optimizations
[  172.731190][ T6485] BTRFS info (device loop4): using spread ssd allocation scheme
[  172.742386][ T6485] BTRFS info (device loop4): disabling free space tree
[  172.812784][ T6514] netlink: 'syz.0.631': attribute type 10 has an invalid length.
[  172.826044][ T6514] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.837944][ T6514] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  172.855724][ T6514] netlink: 'syz.0.631': attribute type 10 has an invalid length.
[  172.863570][ T6514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.631'.
[  172.874463][ T6514] device batadv0 entered promiscuous mode
[  172.894341][ T6514] bond0: (slave batadv0): Releasing backup interface
[  172.923613][ T6514] bridge0: port 3(batadv0) entered blocking state
[  172.931194][ T6514] bridge0: port 3(batadv0) entered disabled state
[  172.964879][ T6485] BTRFS info (device loop4): not using ssd optimizations
[  173.071739][ T6485] BTRFS info (device loop4): not using spread ssd allocation scheme
[  173.262238][ T6485] BTRFS info (device loop4): has skinny extents
[  173.564006][ T4249] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  173.573906][ T4249] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  173.795882][ T6471] BTRFS error (device loop2): open_ctree failed: -12
[  173.804601][ T5007] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (5007)
[  174.036622][ T6485] BTRFS info (device loop4): clearing free space tree
[  174.081168][ T6485] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  174.091823][ T6485] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  174.837298][ T6485] BTRFS warning (device loop4): failed to trim 1 device(s), last error -512
[  175.955030][ T6563] loop5: detected capacity change from 0 to 4096
[  175.962586][ T5200] Bluetooth: hci2: command 0x0406 tx timeout
[  176.124093][ T5200] Bluetooth: hci0: command 0x0406 tx timeout
[  176.155058][ T5200] Bluetooth: hci4: command 0x0406 tx timeout
[  176.419049][ T6563] NILFS (loop5): unrecognized mount option ""
[  176.791232][ T6580] loop5: detected capacity change from 0 to 1024
[  176.896554][ T6582] loop4: detected capacity change from 0 to 1024
[  176.925840][ T6580] hfsplus: failed to load catalog file
[  176.949704][ T6585] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  176.982560][ T6582] EXT4-fs (loop4): Ignoring removed bh option
[  176.998974][ T6582] EXT4-fs (loop4): Ignoring removed nobh option
[  177.015187][ T6582] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  177.323023][ T6582] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: none.
[  177.911418][ T6571] loop2: detected capacity change from 0 to 40427
[  177.962352][ T6582] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3887: comm syz.4.640: Allocating blocks 497-513 which overlap fs metadata
[  177.988016][ T6582] EXT4-fs (loop4): pa ffff88807459ea80: logic 128, phys. 385, len 8
[  177.996604][ T6582] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1
[  178.023702][ T6601] EXT4-fs error (device loop4): mb_free_blocks:1876: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt.
[  178.302001][ T6571] F2FS-fs (loop2): Unrecognized mount option "memory=low" or missing value
[  178.881080][ T6609] loop4: detected capacity change from 0 to 16
[  178.964025][ T6609] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  179.150240][ T6621] loop2: detected capacity change from 0 to 64
[  179.603890][ T6613] loop5: detected capacity change from 0 to 32768
[  179.611137][ T6633] loop4: detected capacity change from 0 to 256
[  181.383242][ T6613] 
[  181.383242][ T6613]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  181.383242][ T6613] 
[  181.450810][ T6643] loop2: detected capacity change from 0 to 512
[  181.506837][ T6613] ERROR: (device loop5): diWrite: ixpxd invalid
[  181.506837][ T6613] 
[  181.640850][ T6613] ERROR: (device loop5): txCommit: 
[  181.640850][ T6613] 
[  181.810764][ T5925] 
[  181.810764][ T5925]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  181.810764][ T5925] 
[  181.923371][ T5925] 
[  181.923371][ T5925]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  181.923371][ T5925] 
[  181.986148][ T6649] loop0: detected capacity change from 0 to 256
[  182.103488][ T6649] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  182.165195][ T6649] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  182.204784][ T6649] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  182.230264][   T26] audit: type=1800 audit(2000000031.450:112): pid=6649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.671" name="file1" dev="loop0" ino=1048608 res=0 errno=0
[  182.434415][ T6656] loop5: detected capacity change from 0 to 16
[  182.475522][ T6657] loop2: detected capacity change from 0 to 1024
[  182.514019][ T6656] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  182.553977][ T6645] loop4: detected capacity change from 0 to 32768
[  182.589441][ T6657] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  182.690109][ T6645] XFS (loop4): Mounting V5 Filesystem
[  182.755597][ T6657] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,journal_dev=0x0000000000000007,journal_ioprio=0x0000000000000006,noinit_itable,nogrpid,nodiscard,jqfmt=vfsv0,noinit_itable,mb_optimize_scan=0x0000000000000000,usrquota,dioread_nolock,,errors=continue. Quota mode: writeback.
[  182.784833][ T6657] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.901135][ T4291] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:8: bg 0: block 112: padding at end of block bitmap is not set
[  182.914332][ T6645] XFS (loop4): Ending clean mount
[  182.983876][ T4184] XFS (loop4): Unmounting Filesystem
[  183.028111][ T4291] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[  183.113179][ T4291] EXT4-fs (loop2): This should not happen!! Data will be lost
[  183.113179][ T4291] 
[  183.130751][ T4291] EXT4-fs (loop2): Total free blocks count 0
[  183.163191][ T4291] EXT4-fs (loop2): Free/Dirty block details
[  183.169412][ T4291] EXT4-fs (loop2): free_blocks=0
[  183.213512][ T4291] EXT4-fs (loop2): dirty_blocks=80
[  183.218674][ T4291] EXT4-fs (loop2): Block reservation details
[  183.253389][ T4291] EXT4-fs (loop2): i_reserved_data_blocks=5
[  183.331311][ T6663] loop0: detected capacity change from 0 to 32768
[  183.562232][ T6663] XFS (loop0): Mounting V5 Filesystem
[  183.739856][ T6683] loop5: detected capacity change from 0 to 32768
[  183.742495][ T6663] XFS (loop0): Ending clean mount
[  183.854047][ T6683] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  183.862790][ T6683] BTRFS info (device loop5): setting nodatacow, compression disabled
[  183.912022][ T6683] BTRFS info (device loop5): turning on flush-on-commit
[  183.929639][ T4189] XFS (loop0): Unmounting Filesystem
[  183.946660][ T6683] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  183.964109][ T6698] loop4: detected capacity change from 0 to 8192
[  183.969332][ T6683] BTRFS info (device loop5): use lzo compression, level 0
[  184.023618][ T6683] BTRFS info (device loop5): setting nodatasum
[  184.029838][ T6683] BTRFS info (device loop5): use no compression
[  184.081565][ T6683] BTRFS info (device loop5): trying to use backup root at mount time
[  184.161692][ T6698] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  184.171569][ T6683] BTRFS info (device loop5): max_inline at 0
[  184.178231][ T6683] BTRFS info (device loop5): using free space tree
[  184.185233][ T6698] REISERFS (device loop4): using ordered data mode
[  184.191994][ T6683] BTRFS info (device loop5): has skinny extents
[  184.206500][ T6698] reiserfs: using flush barriers
[  184.250454][ T6698] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  184.267789][ T4291] BTRFS warning (device loop5): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xcee3a718 level 0
[  184.287192][ T6683] BTRFS warning (device loop5): couldn't read tree root
[  184.508000][ T4377] BTRFS warning (device loop5): checksum verify failed on 5324800 wanted 0x9f73850b found 0xe06dfc66 level 0
[  184.555799][ T6698] REISERFS (device loop4): checking transaction log (loop4)
[  184.695779][ T6683] BTRFS warning (device loop5): couldn't read tree root
[  184.830234][ T6683] BTRFS error (device loop5): parent transid verify failed on 5255168 wanted 5 found 7
[  184.882743][ T6683] BTRFS warning (device loop5): couldn't read tree root
[  184.918662][ T6698] REISERFS (device loop4): Using r5 hash to sort names
[  184.981530][ T6698] REISERFS (device loop4): using 3.5.x disk format
[  184.989436][ T6683] BTRFS info (device loop5): enabling ssd optimizations
[  185.011041][ T6698] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  185.028856][ T6683] BTRFS info (device loop5): clearing free space tree
[  185.049024][ T6683] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  185.094649][ T6683] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  185.192964][ T6683] BTRFS info (device loop5): creating free space tree
[  185.266864][ T6683] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  185.327886][ T6733] loop0: detected capacity change from 0 to 32768
[  185.338331][ T6683] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  185.419126][ T6733] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.686 (6733)
[  186.632555][ T6733] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  186.641500][ T6733] BTRFS info (device loop0): enabling disk space caching
[  186.648762][ T6733] BTRFS info (device loop0): force clearing of disk cache
[  186.655963][ T6733] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  186.665403][ T6733] BTRFS info (device loop0): use zstd compression, level 3
[  186.672625][ T6733] BTRFS info (device loop0): disk space caching is enabled
[  186.679882][ T6733] BTRFS info (device loop0): has skinny extents
[  187.370512][ T6733] BTRFS info (device loop0): enabling ssd optimizations
[  187.380237][ T6733] BTRFS info (device loop0): clearing free space tree
[  187.387307][ T6733] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  187.397053][ T6733] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  188.142503][ T6784] loop4: detected capacity change from 0 to 512
[  188.201746][ T6784] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  188.386280][ T6784] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.701: bg 0: block 255: padding at end of block bitmap is not set
[  188.438883][ T6792] loop5: detected capacity change from 0 to 4096
[  188.487410][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  188.508179][ T6784] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem
[  188.528153][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  188.537123][ T6792] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512)
[  188.557785][ T4196] Bluetooth: Wrong link type (-22)
[  188.572424][ T6784] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.701: invalid indirect mapped block 1 (level 1)
[  188.572952][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  188.611780][ T5007] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop0 scanned by udevd (5007)
[  188.635641][ T6784] EXT4-fs (loop4): 1 truncate cleaned up
[  188.641337][ T6784] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  188.744274][ T6802] loop2: detected capacity change from 0 to 8
[  188.923271][ T6802] SQUASHFS error: Unable to read inode 0xa7
[  190.557325][ T6837] loop2: detected capacity change from 0 to 16
[  190.660556][ T6837] erofs: (device loop2): mounted with root inode @ nid 36.
[  190.664896][ T6843] loop5: detected capacity change from 0 to 64
[  191.176827][ T6860] loop2: detected capacity change from 0 to 512
[  191.241708][ T6861] xt_CONNSECMARK: invalid mode: 0
[  191.945284][ T6860] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  191.953000][ T6861] loop5: detected capacity change from 0 to 32768
[  191.965303][ T5086] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  191.970630][ T6860] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  191.986863][ T6860] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e028, mo2=0002]
[  192.003446][ T5086] Bluetooth: hci4: Injecting HCI hardware error event
[  192.010441][ T6861] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.728 (6861)
[  192.025551][ T6839] loop4: detected capacity change from 0 to 32768
[  192.032686][ T4196] Bluetooth: hci4: hardware error 0x00
[  192.045680][ T6860] EXT4-fs (loop2): orphan cleanup on readonly fs
[  192.052135][ T6861] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  192.060961][ T6861] BTRFS info (device loop5): using free space tree
[  192.067692][ T6861] BTRFS info (device loop5): has skinny extents
[  192.080656][ T6839] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.713 (6839)
[  192.098631][ T6839] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  192.124996][ T6860] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.729: bg 0: block 361: padding at end of block bitmap is not set
[  192.149301][ T6860] EXT4-fs (loop2): Remounting filesystem read-only
[  192.156490][ T6860] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem
[  192.166685][ T6860] EXT4-fs (loop2): Remounting filesystem read-only
[  192.179125][ T6839] BTRFS info (device loop4): allowing degraded mounts
[  192.179482][ T6860] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.729: attempt to clear invalid blocks 33619980 len 1
[  192.198241][ T6833] loop0: detected capacity change from 0 to 32768
[  192.205193][ T6860] EXT4-fs (loop2): Remounting filesystem read-only
[  192.206815][ T6839] BTRFS info (device loop4): enabling ssd optimizations
[  192.220430][ T6860] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.729: invalid indirect mapped block 1811939328 (level 0)
[  192.235255][ T6860] EXT4-fs (loop2): Remounting filesystem read-only
[  192.241814][ T6860] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.729: invalid indirect mapped block 2185560079 (level 1)
[  192.256468][ T6860] EXT4-fs (loop2): Remounting filesystem read-only
[  192.263649][ T6860] EXT4-fs (loop2): 1 truncate cleaned up
[  192.269565][ T6860] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,noblock_validity,discard,errors=remount-ro,mblk_io_submit. Quota mode: none.
[  192.300957][ T6839] BTRFS info (device loop4): turning on async discard
[  192.328848][ T6839] BTRFS info (device loop4): allowing degraded mounts
[  192.354708][ T6833] (syz.0.717,6833,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  192.417626][ T6839] BTRFS info (device loop4): turning off async discard
[  192.430647][ T6833] (syz.0.717,6833,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  192.452181][ T6839] BTRFS info (device loop4): using free space tree
[  192.493494][ T6839] BTRFS info (device loop4): has skinny extents
[  192.516681][ T6861] BTRFS info (device loop5): enabling ssd optimizations
[  192.614808][ T6894] bridge0: port 3(wlan1) entered blocking state
[  192.621575][ T6894] bridge0: port 3(wlan1) entered disabled state
[  192.639950][ T6894] device wlan1 entered promiscuous mode
[  192.777446][ T6833] JBD2: Ignoring recovery information on journal
[  193.161904][ T6833] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  194.167235][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.173677][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.231256][ T4375] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared)
[  194.365773][ T4189] ocfs2: Unmounting device (7,0) on (node local)
[  194.452149][ T4174] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (4174)
[  196.720679][ T6940] loop0: detected capacity change from 0 to 128
[  196.970604][ T6921] loop2: detected capacity change from 0 to 32768
[  197.164295][ T6921] XFS (loop2): Mounting V5 Filesystem
[  197.286402][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.744'.
[  197.295963][ T6951] loop4: detected capacity change from 0 to 32768
[  197.326144][ T6921] XFS (loop2): Ending clean mount
[  197.377412][ T4188] XFS (loop2): Unmounting Filesystem
[  197.440070][ T6951] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  197.600158][ T6977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.749'.
[  197.763445][ T4184] ocfs2: Unmounting device (7,4) on (node local)
[  198.755082][ T6974] loop0: detected capacity change from 0 to 32768
[  199.096180][ T7005] loop5: detected capacity change from 0 to 32768
[  199.265933][ T6974] JBD2: Ignoring recovery information on journal
[  199.771163][ T6974] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  200.006447][ T4189] ocfs2: Unmounting device (7,0) on (node local)
[  200.748361][ T7027] befs: (nbd0): No write support. Marking filesystem read-only
[  200.808271][  T150] block nbd0: Attempted send on invalid socket
[  200.815157][  T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  200.910683][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.768'.
[  201.230144][ T7042] device syzkaller0 entered promiscuous mode
[  201.239316][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  201.330949][ T7043] xt_CONNSECMARK: invalid mode: 0
[  202.065376][ T7051] loop0: detected capacity change from 0 to 1024
[  202.120740][ T7051] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  202.254087][ T7051] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,journal_dev=0x0000000000000007,journal_ioprio=0x0000000000000006,noinit_itable,nogrpid,nodiscard,jqfmt=vfsv0,noinit_itable,mb_optimize_scan=0x0000000000000000,usrquota,dioread_nolock,,errors=continue. Quota mode: writeback.
[  202.298758][ T7051] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.409950][ T7051] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.774: bg 0: block 112: padding at end of block bitmap is not set
[  202.451872][ T7067] loop4: detected capacity change from 0 to 1024
[  202.497571][ T7051] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 124 with max blocks 8 with error 117
[  202.525399][ T7051] EXT4-fs (loop0): This should not happen!! Data will be lost
[  202.525399][ T7051] 
[  202.591993][ T1268] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 61 with error 117
[  202.616512][  T631] hfsplus: b-tree write err: -5, ino 4
[  202.638212][ T1268] EXT4-fs (loop0): This should not happen!! Data will be lost
[  202.638212][ T1268] 
[  202.641853][ T7063] loop5: detected capacity change from 0 to 32768
[  202.672509][ T7063] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.776 (7063)
[  202.771963][ T7063] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  202.823466][ T7063] BTRFS warning (device loop5): excessive commit interval 65536
[  202.831246][ T7063] BTRFS info (device loop5): using free space tree
[  202.871346][ T7063] BTRFS info (device loop5): has skinny extents
[  203.111833][ T7063] BTRFS info (device loop5): enabling ssd optimizations
[  203.298341][ T7103] loop0: detected capacity change from 0 to 256
[  203.419316][ T7103] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  203.506312][ T7103] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  204.606949][ T7109] loop0: detected capacity change from 0 to 1024
[  205.253390][ T1268] hfsplus: b-tree write err: -5, ino 4
[  206.121603][ T7126] loop5: detected capacity change from 0 to 256
[  206.246245][ T7126] exfat: Deprecated parameter 'namecase'
[  206.252045][ T7126] exfat: Deprecated parameter 'namecase'
[  206.258053][ T7126] exfat: Unknown parameter 'keep_last_dots'
[  207.051741][ T7147] loop5: detected capacity change from 0 to 512
[  209.943489][ T7147] EXT4-fs (loop5): Ignoring removed bh option
[  210.126143][ T7147] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5.
[  210.172024][ T7153] loop0: detected capacity change from 0 to 128
[  210.830449][ T7155] loop4: detected capacity change from 0 to 32768
[  210.973063][ T7155] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.798 (7155)
[  212.204613][ T7155] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  212.270300][ T7175] netlink: 'syz.5.805': attribute type 10 has an invalid length.
[  212.283798][ T7155] BTRFS info (device loop4): using free space tree
[  212.324013][ T7155] BTRFS info (device loop4): has skinny extents
[  212.349681][ T7175] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  212.718524][ T4376] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x30
[  213.418721][ T7201] loop5: detected capacity change from 0 to 8192
[  213.716115][ T7201] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  213.730540][ T7201] REISERFS (device loop5): using ordered data mode
[  213.753518][ T7201] reiserfs: using flush barriers
[  214.876241][ T7155] BTRFS error (device loop4): open_ctree failed: -12
[  215.053661][ T7201] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  215.138632][ T7201] REISERFS (device loop5): checking transaction log (loop5)
[  215.160860][ T4174] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4174)
[  215.184923][ T7201] REISERFS (device loop5): Using r5 hash to sort names
[  215.192850][ T7201] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  216.790177][ T7227] loop2: detected capacity change from 0 to 4096
[  216.925934][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'.
[  217.112022][ T7248] loop4: detected capacity change from 0 to 2048
[  217.146959][ T4188] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  217.178205][ T4188] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  218.236164][ T7276] loop4: detected capacity change from 0 to 64
[  218.299609][ T7276] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  219.313895][ T7315] hub 8-0:1.0: USB hub found
[  219.326742][ T7315] hub 8-0:1.0: 1 port detected
[  219.993650][ T7326] netlink: 68 bytes leftover after parsing attributes in process `syz.5.844'.
[  220.752542][ T7316] loop2: detected capacity change from 0 to 8192
[  221.306132][ T7349] loop4: detected capacity change from 0 to 512
[  222.055050][ T7349] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.850: inode has both inline data and extents flags
[  222.084278][ T7349] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.850: couldn't read orphan inode 15 (err -117)
[  222.209300][ T7336] loop5: detected capacity change from 0 to 32768
[  222.218841][ T7354] loop2: detected capacity change from 0 to 2048
[  222.221836][ T7349] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  222.349660][ T7364] syz.3.855 uses obsolete (PF_INET,SOCK_PACKET)
[  222.397291][ T7362] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  222.869857][ T7336] XFS (loop5): Mounting V5 Filesystem
[  223.380779][ T7336] XFS (loop5): Ending clean mount
[  223.566431][ T7336] XFS (loop5): Quotacheck needed: Please wait.
[  223.747114][ T7336] XFS (loop5): Quotacheck: Done.
[  223.783308][ T6941] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  225.199537][ T5925] XFS (loop5): Unmounting Filesystem
[  225.258191][ T7416] loop2: detected capacity change from 0 to 512
[  225.393399][ T7416] EXT4-fs (loop2): Test dummy encryption mode enabled
[  225.400241][ T7416] EXT4-fs (loop2): Unrecognized mount option "=" or missing value
[  226.276795][ T7428] netlink: 'syz.3.875': attribute type 10 has an invalid length.
[  226.338072][ T7431] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  226.351681][ T6941] usb 5-1: unable to read config index 0 descriptor/start: -71
[  226.435384][ T6941] usb 5-1: can't read configurations, error -71
[  226.964980][ T7428] device syz_tun left promiscuous mode
[  226.970352][ T7434] loop0: detected capacity change from 0 to 512
[  227.053808][ T7430] 8021q: adding VLAN 0 to HW filter on device bond1
[  227.132933][ T7434] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.874: inode has both inline data and extents flags
[  227.133680][ T7432] device bond_slave_0 entered promiscuous mode
[  227.153242][ T7432] device bond_slave_1 entered promiscuous mode
[  227.159454][ T7432] device wlan1 entered promiscuous mode
[  227.177487][ T7434] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.874: couldn't read orphan inode 15 (err -117)
[  227.192946][ T7432] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  227.200664][ T7434] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  227.215989][ T7432] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  227.303627][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  227.311623][ T7450] netlink: 'syz.3.880': attribute type 1 has an invalid length.
[  228.632389][ T7487] xt_CT: You must specify a L4 protocol and not use inversions on it
[  229.096710][ T7494] loop2: detected capacity change from 0 to 16
[  229.237557][ T7494] erofs: (device loop2): mounted with root inode @ nid 36.
[  229.577212][ T7504] attempt to access beyond end of device
[  229.577212][ T7504] loop2: rw=0, want=40, limit=16
[  230.623236][ T5052] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  230.835642][ T7500] loop5: detected capacity change from 0 to 32768
[  230.893543][ T5052] usb 3-1: Using ep0 maxpacket: 8
[  230.923191][ T7500] XFS (loop5): Mounting V5 Filesystem
[  231.013404][ T5052] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  231.043254][ T5052] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  231.052284][ T5052] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  231.063951][ T5052] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  231.075699][ T5052] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  231.085862][ T5052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.095066][ T7500] XFS (loop5): Ending clean mount
[  231.144340][ T5052] hub 3-1:1.0: bad descriptor, ignoring hub
[  231.150325][ T5052] hub: probe of 3-1:1.0 failed with error -5
[  231.163784][ T5052] cdc_wdm 3-1:1.0: skipping garbage
[  231.169023][ T5052] cdc_wdm 3-1:1.0: skipping garbage
[  231.217802][ T5052] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  231.237354][ T5052] cdc_wdm 3-1:1.0: Unknown control protocol
[  231.425344][ T5925] XFS (loop5): Unmounting Filesystem
[  231.482628][ T5052] usb 3-1: USB disconnect, device number 5
[  231.823276][ T5052] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  232.393666][ T5052] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  232.607427][ T5052] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  233.076407][ T5052] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64
[  233.170800][ T5052] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  233.194356][ T5052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.233660][ T7511] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  233.254237][ T5052] hub 3-1:1.0: bad descriptor, ignoring hub
[  233.260186][ T5052] hub: probe of 3-1:1.0 failed with error -5
[  233.284604][ T5052] cdc_wdm 3-1:1.0: skipping garbage
[  233.303319][ T5052] cdc_wdm 3-1:1.0: skipping garbage
[  233.315418][ T7561] loop5: detected capacity change from 0 to 256
[  233.323496][ T5052] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  233.329437][ T5052] cdc_wdm 3-1:1.0: Unknown control protocol
[  233.388691][ T5052] usb 3-1: USB disconnect, device number 6
[  233.513695][ T7561] FAT-fs (loop5): Directory bread(block 64) failed
[  233.520276][ T7561] FAT-fs (loop5): Directory bread(block 65) failed
[  233.604156][ T7561] FAT-fs (loop5): Directory bread(block 66) failed
[  233.610737][ T7561] FAT-fs (loop5): Directory bread(block 67) failed
[  233.633557][ T7561] FAT-fs (loop5): Directory bread(block 68) failed
[  233.643323][ T7561] FAT-fs (loop5): Directory bread(block 69) failed
[  233.676113][ T7561] FAT-fs (loop5): Directory bread(block 70) failed
[  233.713347][ T7561] FAT-fs (loop5): Directory bread(block 71) failed
[  233.732656][ T7561] FAT-fs (loop5): Directory bread(block 72) failed
[  233.759702][ T7561] FAT-fs (loop5): Directory bread(block 73) failed
[  234.013808][ T7564] loop2: detected capacity change from 0 to 32768
[  234.094913][ T7557] loop4: detected capacity change from 0 to 40427
[  234.122642][   T26] audit: type=1326 audit(2000000083.340:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f452a799 code=0x7ffc0000
[  234.170737][ T7557] F2FS-fs (loop4): invalid crc value
[  234.189497][   T26] audit: type=1326 audit(2000000083.340:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7575 comm="syz.5.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f452a799 code=0x7ffc0000
[  234.223477][ T7557] F2FS-fs (loop4): Found nat_bits in checkpoint
[  234.294440][ T7564] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  234.323584][ T7564] BTRFS info (device loop2): force clearing of disk cache
[  234.374513][ T7564] BTRFS info (device loop2): max_inline at 0
[  234.380789][ T7557] F2FS-fs (loop4): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  234.401568][ T7564] BTRFS info (device loop2): enabling auto defrag
[  234.427227][ T7564] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  234.462395][ T7583] device syzkaller0 entered promiscuous mode
[  234.469971][ T7564] BTRFS info (device loop2): force zstd compression, level 3
[  234.514681][ T7564] BTRFS info (device loop2): enabling disk space caching
[  234.603315][ T7564] BTRFS info (device loop2): disk space caching is enabled
[  234.638040][ T7564] BTRFS info (device loop2): has skinny extents
[  235.199414][ T7564] BTRFS info (device loop2): enabling ssd optimizations
[  235.214474][ T7564] BTRFS info (device loop2): clearing free space tree
[  235.221355][ T7564] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  235.236762][ T7564] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  235.345604][ T7612] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  235.360900][ T7612] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  235.381388][ T7612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  235.517235][ T7612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  235.531719][ T7612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  235.550441][ T7612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  236.010419][ T7624] netlink: 'syz.3.927': attribute type 16 has an invalid length.
[  236.091360][ T7624] netlink: 'syz.3.927': attribute type 17 has an invalid length.
[  236.192599][ T7624] netlink: 'syz.3.927': attribute type 27 has an invalid length.
[  236.826820][ T7638] loop5: detected capacity change from 0 to 2048
[  236.855316][ T7569] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  236.952026][ T7638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  238.186330][ T7645] loop0: detected capacity change from 0 to 512
[  238.936460][ T7641] loop2: detected capacity change from 0 to 32768
[  238.953645][ T7645] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback.
[  238.966557][ T7645] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  239.274105][ T7665] device syzkaller0 entered promiscuous mode
[  239.300414][ T7641] XFS (loop2): Mounting V5 Filesystem
[  239.373175][ T7672] overlayfs: failed to clone upperpath
[  239.452606][ T7641] XFS (loop2): Ending clean mount
[  239.565240][ T4229] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  239.687033][ T4188] XFS (loop2): Unmounting Filesystem
[  239.953926][ T4229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.981978][ T4229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.993715][ T4229] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  240.007792][ T4229] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  240.017474][ T4229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.030765][ T7684] fuse: Invalid rootmode
[  240.033373][ T4229] usb 6-1: config 0 descriptor??
[  240.576514][ T4229] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  241.267005][ T4229] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  241.434382][ T7705] loop0: detected capacity change from 0 to 512
[  241.533693][ T7705] EXT4-fs (loop0): Ignoring removed orlov option
[  241.571048][ T7705] EXT4-fs (loop0): 1 truncate cleaned up
[  241.588384][ T7705] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,,errors=continue. Quota mode: none.
[  241.649957][   T26] audit: type=1800 audit(2000000090.870:115): pid=7705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.953" name="file1" dev="loop0" ino=15 res=0 errno=0
[  241.673315][    T7] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  241.697795][ T7705] EXT4-fs (loop0): Online resizing not supported with sparse_super2
[  242.053438][    T7] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  242.066143][    T7] usb 3-1: config 0 has no interface number 0
[  242.221387][   T21] usb 6-1: USB disconnect, device number 2
[  242.263996][    T7] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  242.288185][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.313220][ T5052] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  242.329955][ T5206] Bluetooth: hci3: command 0x0406 tx timeout
[  242.353861][    T7] usb 3-1: Product: syz
[  242.379054][    T7] usb 3-1: Manufacturer: syz
[  242.400775][    T7] usb 3-1: SerialNumber: syz
[  242.440314][    T7] usb 3-1: config 0 descriptor??
[  242.573278][ T5052] usb 5-1: Using ep0 maxpacket: 16
[  242.703491][ T5052] usb 5-1: config index 0 descriptor too short (expected 65, got 36)
[  242.718320][ T5052] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  242.740872][ T5052] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  242.743789][   T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  242.763208][ T5052] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  242.772362][ T5052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.782276][ T5052] usb 5-1: config 0 descriptor??
[  242.824903][ T5052] pxrc 5-1:0.0: Could not find endpoint
[  242.832807][ T5052] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  242.993645][    T7] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  243.012169][    T7] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  243.028281][    T7] asix: probe of 3-1:0.251 failed with error -5
[  243.031507][ T6941] usb 5-1: USB disconnect, device number 6
[  243.049311][    T7] usb 3-1: USB disconnect, device number 7
[  243.693499][   T21] usb 6-1: Using ep0 maxpacket: 8
[  244.563478][   T21] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  244.621308][   T21] usb 6-1: config 179 has no interface number 0
[  244.628114][   T21] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  244.639775][   T21] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  244.651400][   T21] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  244.663084][   T21] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  244.674860][   T21] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  244.688518][   T21] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  244.698106][   T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.724331][ T7722] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  245.039653][ T7755] netlink: 52 bytes leftover after parsing attributes in process `syz.0.969'.
[  245.167863][   T21] usb 6-1: USB disconnect, device number 3
[  245.193182][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  245.202156][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  246.431179][ T7764] 
[  246.538581][ T7769] loop5: detected capacity change from 0 to 512
[  246.584215][ T7769] EXT4-fs (loop5): Ignoring removed oldalloc option
[  246.593237][    T7] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  246.651045][ T7769] EXT4-fs (loop5): 1 truncate cleaned up
[  246.657328][ T7769] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,bsdgroups,nouid32,i_version,delalloc,oldalloc,stripe=0x0000000000000005,,errors=continue. Quota mode: none.
[  246.724039][   T26] audit: type=1800 audit(2000000095.950:116): pid=7769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.978" name="file1" dev="loop5" ino=15 res=0 errno=0
[  246.973397][    T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  247.934377][    T7] usb 5-1: New USB device found, idVendor=0ace, idProduct=20ff, bcdDevice= 1.01
[  247.952421][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.986659][    T7] usb 5-1: Product: syz
[  247.990866][    T7] usb 5-1: Manufacturer: syz
[  248.011635][    T7] usb 5-1: SerialNumber: syz
[  248.032553][    T7] usb 5-1: config 0 descriptor??
[  248.094300][    T7] usb-storage 5-1:0.0: USB Mass Storage device detected
[  248.165939][    T7] usb-storage 5-1:0.0: device ignored
[  248.307927][ T5035] usb 5-1: USB disconnect, device number 7
[  248.356093][ T7785] loop0: detected capacity change from 0 to 8
[  248.467617][ T7785] SQUASHFS error: Failed to read block 0xe000000000001ea: -5
[  248.493195][ T7785] unable to read xattr id index table
[  248.911941][ T7787] loop5: detected capacity change from 0 to 164
[  249.023908][ T7789] loop2: detected capacity change from 0 to 4096
[  249.200620][ T7785] loop0: detected capacity change from 0 to 32768
[  249.236770][ T7801] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  249.383177][ T7785] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.981 (7785)
[  249.517133][ T7785] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  249.591332][ T7785] BTRFS info (device loop0): setting nodatasum
[  249.740439][ T7785] BTRFS info (device loop0): force zlib compression, level 3
[  249.812527][ T7785] BTRFS info (device loop0): ignoring bad roots
[  249.888562][ T7785] BTRFS info (device loop0): unrecognized rescue option 'ignoremetacsums'
[  249.941318][ T7785] BTRFS error (device loop0): unrecognized rescue value ignoremetacsums
[  249.993490][ T7785] BTRFS error (device loop0): open_ctree failed: -22
[  250.133235][ T5035] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  250.413506][ T5035] usb 6-1: Using ep0 maxpacket: 8
[  250.565829][ T5035] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  250.593203][ T5035] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  250.623385][ T5035] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  250.646950][ T5035] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  250.696360][ T5035] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  250.725393][ T5035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.922798][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  250.936160][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  250.953459][ T7836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  251.028974][ T5035] usb 6-1: GET_CAPABILITIES returned 0
[  251.043991][ T5035] usbtmc 6-1:16.0: can't read capabilities
[  251.113302][ T5052] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  251.159055][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1002'.
[  251.256612][ T4229] usb 6-1: USB disconnect, device number 4
[  251.543708][ T5052] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.648173][ T5052] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.831449][ T5052] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  251.993908][ T5052] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  252.168285][ T7853] input: syz0 as /devices/virtual/input/input5
[  252.172016][ T5052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.216107][ T5052] usb 3-1: config 0 descriptor??
[  252.370808][    T7] 
[  252.373305][    T7] ======================================================
[  252.380332][    T7] WARNING: possible circular locking dependency detected
[  252.387364][    T7] syzkaller #0 Not tainted
[  252.391778][    T7] ------------------------------------------------------
[  252.398800][    T7] kworker/0:0/7 is trying to acquire lock:
[  252.404710][    T7] ffff888074278c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210
[  252.415771][    T7] 
[  252.415771][    T7] but task is already holding lock:
[  252.423133][    T7] ffffffff8d6c4b48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[  252.423206][   T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  252.432200][    T7] 
[  252.432200][    T7] which lock already depends on the new lock.
[  252.432200][    T7] 
[  252.432210][    T7] 
[  252.432210][    T7] the existing dependency chain (in reverse order) is:
[  252.432214][    T7] 
[  252.432214][    T7] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  252.432239][    T7]        __mutex_lock_common+0x1e3/0x2400
[  252.432261][    T7]        mutex_lock_nested+0x17/0x20
[  252.432274][    T7]        rfkill_register+0x33/0x8a0
[  252.483794][    T7]        hci_register_dev+0x452/0x970
[  252.489198][    T7]        vhci_create_device+0x32c/0x5c0
[  252.494794][    T7]        vhci_write+0x391/0x450
[  252.499639][    T7]        vfs_write+0x745/0xd60
[  252.504381][    T7]        ksys_write+0x152/0x260
[  252.509215][    T7]        do_syscall_64+0x4c/0xa0
[  252.514127][    T7]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  252.520520][    T7] 
[  252.520520][    T7] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  252.528313][    T7]        __mutex_lock_common+0x1e3/0x2400
[  252.534014][    T7]        mutex_lock_nested+0x17/0x20
[  252.539275][    T7]        vhci_send_frame+0x88/0x100
[  252.544451][    T7]        hci_send_frame+0x1a9/0x2e0
[  252.549779][    T7]        hci_tx_work+0x9f9/0x1710
[  252.554787][    T7]        process_one_work+0x85f/0x1010
[  252.560243][    T7]        worker_thread+0xaa6/0x1290
[  252.565418][    T7]        kthread+0x436/0x520
[  252.569999][    T7]        ret_from_fork+0x1f/0x30
[  252.575018][    T7] 
[  252.575018][    T7] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  252.584204][    T7]        __flush_work+0x116/0x210
[  252.589374][    T7]        hci_dev_do_close+0x1e7/0x1030
[  252.594827][    T7]        hci_error_reset+0x101/0x2c0
[  252.600117][    T7]        process_one_work+0x85f/0x1010
[  252.605576][    T7]        worker_thread+0xaa6/0x1290
[  252.610761][    T7]        kthread+0x436/0x520
[  252.615337][    T7]        ret_from_fork+0x1f/0x30
[  252.620256][    T7] 
[  252.620256][    T7] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  252.627876][    T7]        __mutex_lock_common+0x1e3/0x2400
[  252.633608][    T7]        mutex_lock_nested+0x17/0x20
[  252.638877][    T7]        bg_scan_update+0x44/0x3b0
[  252.643970][    T7]        process_one_work+0x85f/0x1010
[  252.649407][    T7]        worker_thread+0xaa6/0x1290
[  252.654584][    T7]        kthread+0x436/0x520
[  252.659170][    T7]        ret_from_fork+0x1f/0x30
[  252.664085][    T7] 
[  252.664085][    T7] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  252.673874][    T7]        __lock_acquire+0x2c42/0x7d10
[  252.679228][    T7]        lock_acquire+0x19e/0x400
[  252.684228][    T7]        __flush_work+0x116/0x210
[  252.689231][    T7]        __cancel_work_timer+0x3f4/0x560
[  252.694869][    T7]        hci_request_cancel_all+0xcc/0x300
[  252.700671][    T7]        hci_dev_do_close+0x4e/0x1030
[  252.706047][    T7]        hci_rfkill_set_block+0x10a/0x190
[  252.711751][    T7]        rfkill_set_block+0x1c6/0x420
[  252.717111][    T7]        rfkill_epo+0x75/0x170
[  252.722054][    T7]        rfkill_op_handler+0x76/0x220
[  252.727406][    T7]        process_one_work+0x85f/0x1010
[  252.732852][    T7]        worker_thread+0xaa6/0x1290
[  252.738030][    T7]        kthread+0x436/0x520
[  252.742600][    T7]        ret_from_fork+0x1f/0x30
[  252.747689][    T7] 
[  252.747689][    T7] other info that might help us debug this:
[  252.747689][    T7] 
[  252.757893][    T7] Chain exists of:
[  252.757893][    T7]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  252.757893][    T7] 
[  252.773589][    T7]  Possible unsafe locking scenario:
[  252.773589][    T7] 
[  252.781018][    T7]        CPU0                    CPU1
[  252.786360][    T7]        ----                    ----
[  252.791707][    T7]   lock(rfkill_global_mutex);
[  252.796457][    T7]                                lock(&data->open_mutex);
[  252.803556][    T7]                                lock(rfkill_global_mutex);
[  252.810831][    T7]   lock((work_completion)(&hdev->bg_scan_update));
[  252.817404][    T7] 
[  252.817404][    T7]  *** DEADLOCK ***
[  252.817404][    T7] 
[  252.825534][    T7] 3 locks held by kworker/0:0/7:
[  252.830444][    T7]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  252.840773][    T7]  #1: ffffc90000cc7d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  252.851091][    T7]  #2: ffffffff8d6c4b48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[  252.860546][    T7] 
[  252.860546][    T7] stack backtrace:
[  252.866412][    T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted syzkaller #0
[  252.873592][    T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  252.883667][    T7] Workqueue: events rfkill_op_handler
[  252.889192][    T7] Call Trace:
[  252.892463][    T7]  <TASK>
[  252.895394][    T7]  dump_stack_lvl+0x188/0x250
[  252.900076][    T7]  ? load_image+0x400/0x400
[  252.904618][    T7]  ? show_regs_print_info+0x20/0x20
[  252.909802][    T7]  ? print_circular_bug+0x12b/0x1a0
[  252.914979][    T7]  check_noncircular+0x296/0x330
[  252.919986][    T7]  ? look_up_lock_class+0x71/0x110
[  252.925078][    T7]  ? add_chain_block+0x940/0x940
[  252.929992][    T7]  ? lockdep_lock+0xf1/0x1f0
[  252.934563][    T7]  ? __lock_acquire+0x12e8/0x7d10
[  252.939608][    T7]  ? mark_lock+0x94/0x320
[  252.943935][    T7]  __lock_acquire+0x2c42/0x7d10
[  252.948771][    T7]  ? verify_lock_unused+0x140/0x140
[  252.953954][    T7]  lock_acquire+0x19e/0x400
[  252.958527][    T7]  ? __flush_work+0xfa/0x210
[  252.963108][    T7]  ? __lock_acquire+0x7d10/0x7d10
[  252.968124][    T7]  ? read_lock_is_recursive+0x10/0x10
[  252.973478][    T7]  ? start_flush_work+0x776/0x820
[  252.978485][    T7]  __flush_work+0x116/0x210
[  252.982968][    T7]  ? __flush_work+0xfa/0x210
[  252.987537][    T7]  ? flush_work+0x20/0x20
[  252.991953][    T7]  ? try_to_grab_pending+0xfa/0x7f0
[  252.997132][    T7]  ? mark_lock+0x94/0x320
[  253.001448][    T7]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  253.007409][    T7]  ? lock_chain_count+0x20/0x20
[  253.012236][    T7]  ? mark_lock+0x94/0x320
[  253.016559][    T7]  ? __cancel_work_timer+0x36a/0x560
[  253.021832][    T7]  __cancel_work_timer+0x3f4/0x560
[  253.026926][    T7]  ? cancel_work_sync+0x20/0x20
[  253.031752][    T7]  ? __cancel_work+0x1f9/0x2e0
[  253.036494][    T7]  ? lockdep_hardirqs_on+0x94/0x140
[  253.041670][    T7]  ? __cancel_work+0x27b/0x2e0
[  253.046413][    T7]  ? cancel_work+0x20/0x20
[  253.050810][    T7]  hci_request_cancel_all+0xcc/0x300
[  253.056076][    T7]  hci_dev_do_close+0x4e/0x1030
[  253.060910][    T7]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  253.066778][    T7]  ? _raw_spin_unlock+0x40/0x40
[  253.071606][    T7]  ? kobject_uevent_env+0x371/0x890
[  253.076784][    T7]  hci_rfkill_set_block+0x10a/0x190
[  253.082093][    T7]  ? rcu_lock_release+0x20/0x20
[  253.086938][    T7]  rfkill_set_block+0x1c6/0x420
[  253.091783][    T7]  rfkill_epo+0x75/0x170
[  253.096014][    T7]  rfkill_op_handler+0x76/0x220
[  253.100852][    T7]  process_one_work+0x85f/0x1010
[  253.105785][    T7]  ? worker_detach_from_pool+0x240/0x240
[  253.111406][    T7]  ? lockdep_hardirqs_off+0x70/0x100
[  253.116673][    T7]  ? _raw_spin_lock_irq+0xb7/0xf0
[  253.121679][    T7]  ? _raw_spin_lock_irqsave+0x100/0x100
[  253.127202][    T7]  ? wq_worker_running+0x97/0x170
[  253.132211][    T7]  worker_thread+0xaa6/0x1290
[  253.136891][    T7]  kthread+0x436/0x520
[  253.140991][    T7]  ? rcu_lock_release+0x20/0x20
[  253.145938][    T7]  ? kthread_blkcg+0xd0/0xd0
[  253.150536][    T7]  ret_from_fork+0x1f/0x30
[  253.154948][    T7]  </TASK>
[  253.353429][ T4194] Bluetooth: hci1: link tx timeout
[  253.359300][ T4194] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  253.526257][ T5052] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  253.542437][ T5052] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  253.567117][ T5052] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  253.606706][ T5052] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  253.616003][ T5052] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  253.625337][ T5052] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  253.632850][ T5052] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  253.640494][ T5052] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  253.648182][ T5052] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  253.655624][ T5052] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  253.663005][ T5052] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  253.670408][ T5052] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  253.677817][ T5052] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  253.685318][ T5052] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  253.692717][ T5052] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  253.700383][ T5052] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  253.719415][ T5052] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  253.800495][ T5206] usb 3-1: USB disconnect, device number 8
[  253.825016][   T21] usb 5-1: config 0 has an invalid interface number: 190 but max is 3
[  253.839969][   T21] usb 5-1: config 0 has an invalid interface number: 84 but max is 3
[  253.857382][ T7880] fido_id[7880]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  253.877241][   T21] usb 5-1: config 0 has an invalid interface number: 101 but max is 3
[  253.887466][   T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  253.916642][   T21] usb 5-1: config 0 has 3 interfaces, different from the descriptor's value: 4
[  253.927471][   T21] usb 5-1: config 0 has no interface number 0
[  253.934558][   T21] usb 5-1: config 0 has no interface number 1
[  253.940809][   T21] usb 5-1: config 0 has no interface number 2
[  253.949220][   T21] usb 5-1: config 0 interface 190 altsetting 128 bulk endpoint 0x4 has invalid maxpacket 1023
[  253.960513][   T21] usb 5-1: config 0 interface 190 altsetting 128 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  253.973869][   T21] usb 5-1: config 0 interface 190 altsetting 128 has a duplicate endpoint with address 0x4, skipping
[  253.986095][   T21] usb 5-1: config 0 interface 190 altsetting 128 has an invalid endpoint with address 0xF4, skipping
[  253.998118][   T21] usb 5-1: config 0 interface 190 altsetting 128 has a duplicate endpoint with address 0x7, skipping
[  254.010534][   T21] usb 5-1: config 0 interface 190 altsetting 128 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  254.022756][   T21] usb 5-1: config 0 interface 190 altsetting 128 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  254.036161][   T21] usb 5-1: config 0 interface 190 altsetting 128 has a duplicate endpoint with address 0x4, skipping
[  254.047471][   T21] usb 5-1: config 0 interface 190 altsetting 128 has a duplicate endpoint with address 0x7, skipping
[  254.060281][   T21] usb 5-1: config 0 interface 190 altsetting 128 has an invalid endpoint with address 0x80, skipping
[  254.071791][   T21] usb 5-1: config 0 interface 190 altsetting 128 has a duplicate endpoint with address 0x3, skipping
[  254.084591][   T21] usb 5-1: config 0 interface 190 altsetting 128 has a duplicate endpoint with address 0x6, skipping
[  254.096022][   T21] usb 5-1: config 0 interface 190 altsetting 128 has a duplicate endpoint with address 0x3, skipping
[  254.108793][   T21] usb 5-1: config 0 interface 190 altsetting 128 has 16 endpoint descriptors, different from the interface descriptor's value: 15
[  254.125268][   T21] usb 5-1: too many endpoints for config 0 interface 84 altsetting 247: 50, using maximum allowed: 30
[  254.136696][   T21] usb 5-1: config 0 interface 84 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 50
[  254.151848][   T21] usb 5-1: config 0 interface 101 altsetting 91 has 0 endpoint descriptors, different from the interface descriptor's value: 7
[  254.167077][   T21] usb 5-1: config 0 interface 190 has no altsetting 0
[  254.174141][   T21] usb 5-1: config 0 interface 84 has no altsetting 0
[  254.180984][   T21] usb 5-1: config 0 interface 101 has no altsetting 0
[  254.344866][   T21] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0084, bcdDevice=f7.93
[  254.356843][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.366093][   T21] usb 5-1: Product: syz
[  254.370271][   T21] usb 5-1: Manufacturer: syz
[  254.375471][   T21] usb 5-1: SerialNumber: syz
[  254.388120][   T21] usb 5-1: config 0 descriptor??
[  254.413412][ T7852] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  254.420706][ T7852] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  254.430165][ T7852] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  254.437939][ T7852] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  254.446980][ T7852] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  254.757016][   T21] em28xx 5-1:0.101: audio device (0ccd:0084): interface 101, class 1
[  254.767812][   T21] usb 5-1: USB disconnect, device number 8
[  255.604537][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.610923][ T1422] ieee802154 phy1 wpan1: encryption failed: -22