last executing test programs:

12m51.605091439s ago: executing program 32 (id=9):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)

11m53.372297102s ago: executing program 33 (id=532):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000018})

10m36.460748947s ago: executing program 34 (id=1151):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
bind$netlink(r0, &(0x7f0000000080), 0xc)

10m29.06765863s ago: executing program 35 (id=1096):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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")
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x7fffffff, 0x7ec, 0x100000000, 0x7, 0x3, 0x2, 0x8000})

8m16.047160281s ago: executing program 36 (id=2382):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r1, 0x30d, 0x4, 0xfffffffd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe8c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800)

7m40.906503566s ago: executing program 8 (id=2632):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="f5af25bd7000000000000e000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700)

7m40.563442903s ago: executing program 8 (id=2633):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40882}, 0x60)

7m40.237758241s ago: executing program 8 (id=2636):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000086fc000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

7m39.78983756s ago: executing program 8 (id=2639):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_winnt}, {@fat=@discard}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@fat=@showexec}, {@uni_xlate}, {@rodir}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@shortname_win95}]}, 0x80, 0x29f, &(0x7f0000000840)="$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")
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x0, 0x10}, 0x2f)

7m39.291556512s ago: executing program 8 (id=2643):
r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x94=\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4c\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8p\xa1\xaa\x80I\xa5\xc6\xf3\xf2\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xf1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4b\xe3j%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\xe5\xa8Q\xc9\xe75Q\xea\xd8\xa2=F\x9b\x8f\x8d\xfc\' {e\x949X\xda\xe8H\x1a\x85\xd7%\x93?w}\xfb\xd9t\xea\xbb\xbe\x9b\\\xd7\xd7\xd4\xe2\xd6c(`(r\xd2\xb1G\xe3\xda&\xca\xaa\xba\v\xc5\xa3H\xb1\x11G\xab\xa2\x1f\xa0\xc3\xd9\xcd\xfb\x1a,\x13S\xf1\xfe\xe5F\xf4\xfb\xc8|\x89\x0fNq\x97J\xb9J\x88S\xc5\xb8\x12\x93\xbe\xb9b\xc7\xbc\x03\x03.E\xab\x82\x1c\xbc1\x9d\x14\xfa\x1f\xdd\x1e*\x03`\x91\xe8x\x0f\x05\x1e\xf5\xbfNo\xd4\x0f]S\x85\x89@\xa9f\x05\xfe\x9fkM\xa5\xf6\xc2\x04\xbf\xc7\x00<\x9b\xd5vZ1\xa2j\x9a\xeb6\xa8\xb4\xd9\vv\x94O\xb1\tS\x7f\xf2\xfe\x8dl\xf8\x00\x99\f5\xb7\xee\x95\xf3\xa5\xf1\xf2Z?\xcc\x8d\x9dy\x969\xd8}u\x88\"biYO\xac=j_\xf66{\xf0\xec\xdc1n\x1b\x15\x85N\x1d\x80Z\x1b\x86\xdby4\xcf\x90\b\xf6\x1b\xe6\xf8U\xe9F\x1c+\x14&\x00B\xb0jUS\xaa9\xe5\x1agO\x93\xfe\x98\x00\x00\x00\x00\x00\x04', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000bc0)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x94=\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4c\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8p\xa1\xaa\x80I\xa5\xc6\xf3\xf2\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xf1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4b\xe3j%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\xe5\xa8Q\xc9\xe75Q\xea\xd8\xa2=F\x9b\x8f\x8d\xfc\' {e\x949X\xda\xe8H\x1a\x85\xd7%\x93?w}\xfb\xd9t\xea\xbb\xbe\x9b\\\xd7\xd7\xd4\xe2\xd6c(`(r\xd2\xb1G\xe3\xda&\xca\xaa\xba\v\xc5\xa3H\xb1\x11G\xab\xa2\x1f\xa0\xc3\xd9\xcd\xfb\x1a,\x13S\xf1\xfe\xe5F\xf4\xfb\xc8|\x89\x0fNq\x97J\xb9J\x88S\xc5\xb8\x12\x93\xbe\xb9b\xc7\xbc\x03\x03.E\xab\x82\x1c\xbc1\x9d\x14\xfa\x1f\xdd\x1e*\x03`\x91\xe8x\x0f\x05\x1e\xf5\xbfNo\xd4\x0f]S\x85\x89@\xa9f\x05\xfe\x9fkM\xa5\xf6\xc2\x04\xbf\xc7\x00<\x9b\xd5vZ1\xa2j\x9a\xeb6\xa8\xb4\xd9\vv\x94O\xb1\tS\x7f\xf2\xfe\x8dl\xf8\x00\x99\f5\xb7\xee\x95\xf3\xa5\xf1\xf2Z?\xcc\x8d\x9dy\x969\xd8}u\x88\"biYO\xac=j_\xf66{\xf0\xec\xdc1n\x1b\x15\x85N\x1d\x80Z\x1b\x86\xdby4\xcf\x90\b\xf6\x1b\xe6\xf8U\xe9F\x1c+\x14&\x00B\xb0jUS\xaa9\xe5\x1agO\x93\xfe\x98\x00\x00\x00\x00\x00\x04', 0x0)

7m38.654034576s ago: executing program 8 (id=2648):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000faffffff850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

7m38.134914877s ago: executing program 37 (id=2648):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000faffffff850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

7m34.660605783s ago: executing program 5 (id=2683):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x2)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))

7m34.37294783s ago: executing program 5 (id=2685):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ppoll(&(0x7f0000000340)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0xe, 0x30314142, 0x0, 0x0, 0xbd30, 0x3, 0xfeedcafe, 0x3, 0x0, 0x2, 0x2}})

7m34.049660187s ago: executing program 5 (id=2687):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6})
fcntl$dupfd(r0, 0x0, r0)

7m33.826230282s ago: executing program 5 (id=2689):
r0 = memfd_create(&(0x7f0000000080)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf7[d  \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\x10s\xb9k\xbd\x96b\xf5\x7f+o\xf0\xe7:\xc4\xb1\xa2\x1c\xffC;\x94Q\xa3\xdfyJ\xa2\xf3F\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\x99I\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x10Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xe1\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gE\x95\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\xb0$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xee\x01\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x00_\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82\xe8\xcfOKC\x0f\xef\x0e\xafe\xb5*\x89\x18\xb2w\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xd1\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xd4\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xbf\xe8\xb9\x02\xdaYQ<\xf2\xad\xe7\xd3\x95\xf5-,-Lh\xf7H\xd3\x86\x0e\x90\xe4\x18\xa5\xf0?\x11\f=\rk\xaa\x00\xed\x92\xf9\x98\x8e\xde|\xaa\x9a\xf5\x9d\x99Y\x1c\x15\x88O\xb3\x9a\xe3\xb2\x9f\x80/\xf7\xfe\x964\xd2\xf8W1\xc8\\\x16\x87\xf0w\xb4\x04\x05\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8cz\xd1n\x1cl\xf4\x1ai4\xa1\xe3E\xbd\xcci\xbe\xe4! \xfd\x85\a\xab\x82\t74P`f3\xd3\xc6z\xa8\x05\x98\xfc\xc4\x86\x02\x9a\xeb\x80\xe3I4\xd9T\xe7\x00\xb8]e0\x1f\xd6dA\x11G\r\xe8\xaf\xf9=7\x05s\x9f\xc9\xa9\x1f35 v\xf6LY\xa3-\xd5\x1f\xc6\xca\xd9a\xabv\xb5\x92\x05\x1c\xady\xfd\x0e\xde\x15\xd63\x12T\xde\xaa H@~\x9a\xcaa\xc6\xb6\xfc\x84\xd2e4,Z8\x82\x8e\x8c\x96CU\xf3\xe7z\x03\xba\t\xedX\x03\xec\xd6v\x17;\xb6', 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xcdb7276612ddc41e, 0x12, r0, 0x2000)

7m33.584419908s ago: executing program 5 (id=2692):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00')

7m33.346202183s ago: executing program 5 (id=2693):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0xf, 0xb2, &(0x7f0000000280)="$eJzs1zFKA1EUBdA7U+i0NiJYWE/jGnQpYqmNWCmCOxA34lZcwvQWFtOGkB/ITAgJ6QITCOcUH+6/PHjt+539XH+3SflMSnv18lc2Xt/enx6ehzdJ7sKpqZOcJ2mS3FwM+f9+6Kqx7/qPx67fM3z2NfW6AADAAercbudFGT/m4xW4CpfrvtmZrybYEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCYlgEAAP//jI4oyQ==")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='io.stat\x00', 0x275a, 0x0)

7m18.231779896s ago: executing program 38 (id=2693):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0xf, 0xb2, &(0x7f0000000280)="$eJzs1zFKA1EUBdA7U+i0NiJYWE/jGnQpYqmNWCmCOxA34lZcwvQWFtOGkB/ITAgJ6QITCOcUH+6/PHjt+539XH+3SflMSnv18lc2Xt/enx6ehzdJ7sKpqZOcJ2mS3FwM+f9+6Kqx7/qPx67fM3z2NfW6AADAAercbudFGT/m4xW4CpfrvtmZrybYEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCYlgEAAP//jI4oyQ==")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='io.stat\x00', 0x275a, 0x0)

6m32.6737277s ago: executing program 1 (id=3199):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000001c0)=0xfffffe00, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000000)=0x13)

6m32.378131976s ago: executing program 1 (id=3205):
r0 = syz_io_uring_setup(0x3032, &(0x7f0000000080)={0x0, 0x7011, 0x80, 0x0, 0xfffffffb}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x222081}, &(0x7f0000000280)='./file1\x00', 0x18, 0x0, 0x12345})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

6m31.995383954s ago: executing program 1 (id=3208):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ppoll(&(0x7f0000000740)=[{r0, 0x104}], 0x1, 0x0, 0x0, 0x0)

6m31.727843981s ago: executing program 1 (id=3211):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000002c0), 0x1)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x894b, &(0x7f00000000c0))

6m31.231335561s ago: executing program 1 (id=3215):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00')

6m30.866503839s ago: executing program 1 (id=3219):
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)

6m15.654796375s ago: executing program 39 (id=3219):
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)

4m12.994817818s ago: executing program 0 (id=4399):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000300)=[{0x3, 0x5, 0x10, 0x4}, {0x3, 0x5, 0x2, 0x1}, {0x3, 0x1, 0x8, 0xa}, {0x1, 0x4, 0x1, 0x9}, {0x4, 0x4, 0x5, 0x8}], 0x10, 0x3}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000001000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)

4m12.723353224s ago: executing program 0 (id=4402):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc)

4m12.311680433s ago: executing program 0 (id=4405):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x400, 0xf, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff8850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)

4m11.942643701s ago: executing program 0 (id=4409):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

4m11.07459986s ago: executing program 0 (id=4414):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x2000, 0x0}, 0x10)

4m10.391260495s ago: executing program 0 (id=4419):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000c80)='./file0\x00', 0x810400, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000226,mode=00000000000000000000000,session=00000000000000000000,noadinicb,nostrict,uid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x4, 0xc24, &(0x7f0000000d00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00\x00Q'], 0x94040)

4m9.69471093s ago: executing program 40 (id=4419):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000c80)='./file0\x00', 0x810400, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000226,mode=00000000000000000000000,session=00000000000000000000,noadinicb,nostrict,uid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x4, 0xc24, &(0x7f0000000d00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00\x00Q'], 0x94040)

1m4.26666985s ago: executing program 2 (id=5818):
r0 = mq_open(&(0x7f0000000200)='#@\x00', 0x50f7bb45f81a15a, 0x120, 0x0)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
mq_notify(r0, &(0x7f0000000240)={0x0, 0x2c, 0x1})
mq_timedsend(r0, 0x0, 0x0, 0x240, 0x0)

1m3.875235639s ago: executing program 2 (id=5820):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000b00)={0x44, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x27, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x80}, @broadcast, @device_b, @from_mac=@broadcast, {0xe, 0x962}}, @void, @void, @val={0x3, 0x1, 0x74}, @void, @val={0x72, 0x6}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800)

1m3.471360837s ago: executing program 2 (id=5823):
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002)

1m2.700063254s ago: executing program 2 (id=5827):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000b00)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_lower}, {@fat=@sys_immutable}, {@fat=@showexec}, {@shortname_win95}, {@shortname_winnt}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$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")
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901)
mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20)

1m2.190773136s ago: executing program 2 (id=5830):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000100))
recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x68f3}], 0x1, 0x2040, 0x0)

1m1.363025615s ago: executing program 2 (id=5837):
syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0xa7, 0x8, 0x6, 0x20, 0x94}, 0x0, 0x0})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0)

1m0.768664158s ago: executing program 41 (id=5837):
syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0xa7, 0x8, 0x6, 0x20, 0x94}, 0x0, 0x0})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0)

35.225535586s ago: executing program 3 (id=5980):
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000))

34.813769105s ago: executing program 3 (id=5985):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000003e00)={0x0, "abacd21111ab2c7b9ca5fa07558139ede6dc06270ee042000000000040e0ff00", <r1=>0xffffffffffffffff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56"})

34.473764733s ago: executing program 3 (id=5987):
r0 = socket$igmp6(0xa, 0x3, 0x2)
dup(r0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x8, 0x6, 0x2, 0xfffffffffffffffe, 0x7, 0xd97c, 0x2, 0xfffffffffffffff9, 0x4000008000009657, 0x6, 0x7fffffff, 0xffffffffffffffff, 0x7ff, 0xb, 0x80000000000000, 0x2, 0x1, 0x2, 0x2, 0xfffffffffffffffc, 0x2, 0xfffffffffffffffa, 0x0, 0xffffffffffff9d06, 0xff, 0x1})

34.186713619s ago: executing program 3 (id=5990):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000280))

33.619949912s ago: executing program 3 (id=5993):
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x183)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0xfffffff7)

33.357911948s ago: executing program 3 (id=5995):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, 0x0)

18.156748376s ago: executing program 42 (id=5995):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, 0x0)

9.943480549s ago: executing program 7 (id=6129):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x57a8, 0xf, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
shmat(0xffffffffffffffff, &(0x7f0000a9f000/0x4000)=nil, 0x2000)

8.280543566s ago: executing program 7 (id=6137):
unshare(0x8000000)
r0 = semget(0x1, 0x4, 0x3c4)
semtimedop(r0, &(0x7f0000000180)=[{0x3, 0x949, 0x3800}, {0x2, 0x74d}], 0x2, 0x0)
unshare(0x60040000)

7.18402669s ago: executing program 6 (id=6143):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x0, 0x2}}}}}, 0x0)

6.594298483s ago: executing program 9 (id=6145):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f00000000c0)={0x0, 0xe, 0x3, "6b6cfd"}, 0x0, 0x0})

3.995238631s ago: executing program 9 (id=6147):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r0, 0x8b35, &(0x7f0000000000)={'veth1_virt_wifi\x00', @link_local})

3.619292639s ago: executing program 9 (id=6148):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x1)

3.395218224s ago: executing program 9 (id=6151):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64000101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x9}, 0xc)

3.273299627s ago: executing program 6 (id=6152):
syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

3.258764137s ago: executing program 7 (id=6153):
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000540)='./bus\x00', 0x181001a, &(0x7f0000002080)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYRES8, @ANYBLOB="5a19495b7df91b324f913bb6183557", @ANYRES32, @ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x1e1, &(0x7f0000000340)="$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")
truncate(&(0x7f0000000940)='./file1\x00', 0x8da6)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0xfffffffc, 0x14)

3.15514455s ago: executing program 9 (id=6154):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5535, &(0x7f0000000800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x375a439, 0xfffffff8, 0x7, 0x3ff, 0x2})

2.966483634s ago: executing program 6 (id=6155):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000009, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='clear_refs\x00')
writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)='2', 0x1}], 0x1)

2.728439879s ago: executing program 7 (id=6156):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xfffc, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/27, 0x1b}, 0x2c3}], 0x1, 0x10102, 0x0)

2.372967677s ago: executing program 7 (id=6158):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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")
symlinkat(&(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00')
creat(&(0x7f0000000080)='./file2\x00', 0x0)
rename(&(0x7f0000000840)='./file2\x00', &(0x7f0000000800)='./file1\x00')

2.345368348s ago: executing program 6 (id=6159):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a0004e16000008009f000d000000080026000816"], 0x40}}, 0x200040b4)

1.930689197s ago: executing program 6 (id=6161):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000840)=0x473e, 0x4)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800)

1.867458199s ago: executing program 4 (id=6162):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x4e24, 0x200000001, 'wrr\x00', 0x9, 0x821}, 0x2c)

1.637081493s ago: executing program 4 (id=6163):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x48800, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x9, 0xb}, 0x8)

1.622440064s ago: executing program 6 (id=6164):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)

1.248303412s ago: executing program 4 (id=6165):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.133862345s ago: executing program 9 (id=6166):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x851}, 0x0)

867.930011ms ago: executing program 4 (id=6167):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x9}}]}, 0x4c}}, 0x0)

487.631159ms ago: executing program 4 (id=6168):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="880000006c00010027bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0400030000380000540034801400350f00000000000000000000000000000000140035006d616376746170300000000000000000140035006873723000000000000000000000000014003500626174616476300000000000000000001400350062726964676530"], 0x88}, 0x1, 0x0, 0x0, 0x4000011}, 0x40000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

150.765886ms ago: executing program 4 (id=6169):
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x302002, 0x0, 0x1, 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540), 0x4, 0x0)

0s ago: executing program 7 (id=6170):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xd0)

kernel console output (not intermixed with test programs):

8] loop9: detected capacity change from 0 to 40427
[  720.396606][T20018] F2FS-fs (loop9): Invalid SB checksum offset: 0
[  720.416002][T20018] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[  720.484378][T20018] F2FS-fs (loop9): invalid crc value
[  720.610881][T20018] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  720.937415][T20018] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0
[  720.971985][T20018] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  721.345713][T11288] syz-executor: attempt to access beyond end of device
[  721.345713][T11288] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  721.549891][T20081] loop2: detected capacity change from 0 to 256
[  721.627434][T20081] exfat: Deprecated parameter 'utf8'
[  721.670619][T20083] loop4: detected capacity change from 0 to 256
[  721.717633][T20081] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  722.515388][T20099] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5249'.
[  722.614608][T20095] can0: slcan on ptm0.
[  722.732526][T20094] can0 (unregistered): slcan off ptm0.
[  723.165838][T20113] loop3: detected capacity change from 0 to 1024
[  723.262441][   T26] audit: type=1800 audit(1783054529.125:541): pid=20113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5261" name="file1" dev="loop3" ino=20 res=0 errno=0
[  723.298059][T20111] loop2: detected capacity change from 0 to 8192
[  723.373553][T20111] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  723.396086][T20090] loop4: detected capacity change from 0 to 32768
[  723.413323][T20111] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  723.423829][T20111] REISERFS (device loop2): using ordered data mode
[  723.430490][T20111] reiserfs: using flush barriers
[  723.456758][T20090] 
[  723.456758][T20090]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  723.456758][T20090] 
[  723.524125][T20111] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  723.613962][   T26] audit: type=1800 audit(1783054529.475:542): pid=20090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5253" name="file1" dev="loop4" ino=4 res=0 errno=0
[  723.745905][T20090] 
[  723.745905][T20090]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  723.745905][T20090] 
[  723.769037][T20111] REISERFS (device loop2): checking transaction log (loop2)
[  723.857911][T20090] 
[  723.857911][T20090]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  723.857911][T20090] 
[  723.917030][T20090] 
[  723.917030][T20090]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  723.917030][T20090] 
[  724.076327][T20090] 
[  724.076327][T20090]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  724.076327][T20090] 
[  724.168537][T20111] REISERFS (device loop2): Using rupasov hash to sort names
[  724.213111][T20111] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  724.413927][   T26] audit: type=1326 audit(1783054530.275:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.6.5268" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306819de59 code=0x7ffc0000
[  724.468081][ T4281] 
[  724.468081][ T4281]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  724.468081][ T4281] 
[  724.521270][ T4281] 
[  724.521270][ T4281]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  724.521270][ T4281] 
[  724.531777][   T26] audit: type=1326 audit(1783054530.315:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.6.5268" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f306819de59 code=0x7ffc0000
[  724.531827][   T26] audit: type=1326 audit(1783054530.315:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.6.5268" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306819de59 code=0x7ffc0000
[  724.531866][   T26] audit: type=1326 audit(1783054530.315:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.6.5268" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306819de59 code=0x7ffc0000
[  724.531907][   T26] audit: type=1326 audit(1783054530.315:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.6.5268" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f306819de59 code=0x7ffc0000
[  724.531946][   T26] audit: type=1326 audit(1783054530.315:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.6.5268" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306819de59 code=0x7ffc0000
[  724.531982][   T26] audit: type=1326 audit(1783054530.315:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.6.5268" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306819de59 code=0x7ffc0000
[  724.532019][   T26] audit: type=1326 audit(1783054530.315:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20135 comm="syz.6.5268" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f306819de59 code=0x7ffc0000
[  725.966398][T20171] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5280'.
[  726.217323][T20177] loop3: detected capacity change from 0 to 256
[  726.312303][T20177] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
[  726.324664][T19879] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  726.541874][T19879] usb 3-1: Using ep0 maxpacket: 16
[  726.552858][T19879] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  726.609220][T19879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.630924][T20160] loop6: detected capacity change from 0 to 32768
[  726.640905][T19879] usb 3-1: Product: syz
[  726.645995][T19879] usb 3-1: Manufacturer: syz
[  726.650655][T19879] usb 3-1: SerialNumber: syz
[  726.819599][T20160] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  726.828343][T20160] XFS (loop6): Mounting V5 Filesystem
[  726.889421][T19879] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  726.948602][T19879] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  726.959370][T19879] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  726.968164][T19879] usb 3-1: media controller created
[  726.988020][T19879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  727.078426][T20160] XFS (loop6): Ending clean mount
[  727.105077][T20160] XFS (loop6): Quotacheck needed: Please wait.
[  727.113223][T19879] zl10353_read_register: readreg error (reg=127, ret==-71)
[  727.182279][T19879] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5
[  727.254824][T19879] usb 3-1: USB disconnect, device number 12
[  727.405704][T20160] XFS (loop6): Quotacheck: Done.
[  727.569571][T17458] XFS (loop6): Unmounting Filesystem
[  727.976097][T20222] vxcan1: tx address claim with different name
[  728.661342][T20240] loop6: detected capacity change from 0 to 64
[  728.708552][T20244] overlayfs: unrecognized mount option "\']*=�����[\1\,-\=" or missing value
[  729.031900][ T4328] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  729.232243][ T4328] usb 10-1: Using ep0 maxpacket: 32
[  729.299424][ T4328] usb 10-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  729.340542][ T4328] usb 10-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3
[  729.362990][ T4328] usb 10-1: Product: syz
[  729.367322][ T4328] usb 10-1: Manufacturer: syz
[  729.383266][ T4328] usb 10-1: SerialNumber: syz
[  729.407480][ T4328] usb 10-1: config 0 descriptor??
[  729.601064][T20270] loop6: detected capacity change from 0 to 256
[  729.645014][ T4328] usb 10-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  730.351974][ T4328] usb 10-1: reset high-speed USB device number 15 using dummy_hcd
[  730.615058][T20300] loop4: detected capacity change from 0 to 1024
[  730.771954][ T5336] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  730.781812][ T4328] usb 10-1: [UEAGLE-ATM] interface 1 not found
[  730.788085][ T4328] ueagle-atm 10-1:0.0: usbatm_usb_probe: bind failed: -19!
[  730.992069][ T5336] usb 3-1: Using ep0 maxpacket: 32
[  731.016044][ T5336] usb 3-1: unable to get BOS descriptor or descriptor too short
[  731.072977][  T128] usb 10-1: USB disconnect, device number 15
[  731.084001][ T5336] usb 3-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40
[  731.132325][ T5336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.160932][ T5336] usb 3-1: Product: syz
[  731.171930][ T5336] usb 3-1: Manufacturer: syz
[  731.176622][ T5336] usb 3-1: SerialNumber: syz
[  731.503788][T20314] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5326'.
[  731.727453][T20316] loop4: detected capacity change from 0 to 256
[  731.846914][ T5336] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  731.906797][ T5336] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  731.993383][ T5336] usb 3-1: USB disconnect, device number 13
[  732.169357][T20304] loop3: detected capacity change from 0 to 40427
[  732.192839][T20304] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  732.226364][T20304] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  732.247648][T10834] udevd[10834]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  732.284276][T20304] F2FS-fs (loop3): invalid crc value
[  732.317410][T20304] F2FS-fs (loop3): Found nat_bits in checkpoint
[  732.409674][T20326] loop6: detected capacity change from 0 to 8192
[  732.466793][T20326] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  732.498797][T20304] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  732.502980][T20326] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  732.516523][T20326] REISERFS (device loop6): using ordered data mode
[  732.523724][T20326] reiserfs: using flush barriers
[  732.532019][T20326] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  732.602344][T20304] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  732.621749][T20340] loop2: detected capacity change from 0 to 1024
[  732.655212][T20326] REISERFS (device loop6): checking transaction log (loop6)
[  732.684539][T20326] REISERFS (device loop6): Using r5 hash to sort names
[  732.718764][T20326] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  732.935312][T20326] overlayfs: upper fs needs to support d_type.
[  732.994861][T20326] overlayfs: upper fs does not support tmpfile.
[  733.045367][T20326] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  733.102919][T20326] overlayfs: failed to set xattr on upper
[  733.108740][T20326] overlayfs: ...falling back to index=off,metacopy=off.
[  733.188806][T20326] overlayfs: failed to resolve './cgroup': -2
[  733.214897][T20350] loop4: detected capacity change from 0 to 128
[  733.390451][T20350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  733.453535][T20352] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.485215][T20350] ext4 filesystem being mounted at /1149/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  733.868677][ T4281] EXT4-fs (loop4): unmounting filesystem.
[  734.188542][T20369] input: syz0 as /devices/virtual/input/input39
[  734.607280][T20381] loop2: detected capacity change from 0 to 512
[  734.666371][T20381] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.5350: inode has both inline data and extents flags
[  734.690085][T20385] loop9: detected capacity change from 0 to 8
[  734.812620][T20385] syz.9.5349: attempt to access beyond end of device
[  734.812620][T20385] loop9: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8
[  734.850004][T20381] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.5350: couldn't read orphan inode 15 (err -117)
[  734.901441][T20381] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  734.941970][T20385] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5
[  734.949914][T20385] unable to read xattr id index table
[  734.965395][T20372] loop3: detected capacity change from 0 to 32768
[  735.016122][T20372] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.5345 (20372)
[  735.142449][T20372] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  735.170901][T20372] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  735.241541][T20372] BTRFS info (device loop3): setting nodatasum
[  735.260093][T20372] BTRFS info (device loop3): force zlib compression, level 3
[  735.273013][T12575] EXT4-fs (loop2): unmounting filesystem.
[  735.301682][T20372] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  735.311001][T20372] BTRFS info (device loop3): use lzo compression, level 0
[  735.351828][T20372] BTRFS info (device loop3): turning on flush-on-commit
[  735.358873][T20372] BTRFS info (device loop3): enabling auto defrag
[  735.470270][T20372] BTRFS info (device loop3): max_inline at 4096
[  735.517288][T20372] BTRFS info (device loop3): using free space tree
[  735.592756][T20404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5357'.
[  735.677908][T20397] loop6: detected capacity change from 0 to 4096
[  735.727471][T20397] __ntfs_error: 2 callbacks suppressed
[  735.727490][T20397] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  735.811541][T20372] BTRFS info (device loop3): enabling ssd optimizations
[  735.917424][T20397] ntfs: volume version 3.1.
[  735.982149][T20397] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  736.037382][T20397] ntfs: (device loop6): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  736.097207][T20397] ntfs: (device loop6): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[  736.152841][T12135] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  736.290725][T20397] ntfs: (device loop6): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccenteuro.  You might want to try to use the mount option nls=utf8.
[  736.502474][T20397] ntfs: (device loop6): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  736.939878][T20440] loop4: detected capacity change from 0 to 8192
[  736.964046][T20440] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  736.981904][T20440] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  737.016539][T20440] REISERFS (device loop4): using ordered data mode
[  737.048784][T20440] reiserfs: using flush barriers
[  737.078498][T20440] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  737.098634][T20440] REISERFS (device loop4): checking transaction log (loop4)
[  737.109894][T20440] REISERFS (device loop4): Using r5 hash to sort names
[  737.126277][T20440] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  737.201259][T20440] overlayfs: upper fs needs to support d_type.
[  737.216850][T20440] overlayfs: upper fs does not support tmpfile.
[  737.239213][T20440] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  737.267216][T20440] overlayfs: failed to set xattr on upper
[  737.285716][T20440] overlayfs: ...falling back to index=off,metacopy=off.
[  737.304870][T20440] overlayfs: failed to resolve './cgroup': -2
[  737.391932][ T4373] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4373)
[  738.091867][T20468] sctp: [Deprecated]: syz.6.5372 (pid 20468) Use of int in max_burst socket option.
[  738.091867][T20468] Use struct sctp_assoc_value instead
[  738.357132][T20475] loop4: detected capacity change from 0 to 2048
[  738.442000][T20475] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  738.502549][T20475] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  738.575323][T20475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  738.666443][T20479] overlayfs: invalid origin (0000006f7665726c61790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  738.921759][ T4276] Bluetooth: hci0: command 0x0406 tx timeout
[  739.038537][T20490] loop2: detected capacity change from 0 to 512
[  739.077246][T20490] EXT4-fs: Ignoring removed bh option
[  739.285601][T20490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  739.378123][T20490] ext4 filesystem being mounted at /517/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  739.404840][T20501] loop6: detected capacity change from 0 to 2048
[  739.435189][T20501] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  739.675551][T20453] loop3: detected capacity change from 0 to 40427
[  739.736132][T20453] F2FS-fs (loop3): invalid crc value
[  739.753134][T12575] EXT4-fs (loop2): unmounting filesystem.
[  739.794625][T20453] F2FS-fs (loop3): Found nat_bits in checkpoint
[  740.095383][T20453] F2FS-fs (loop3): Start checkpoint disabled!
[  740.255769][T20453] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  740.644652][T20530] loop4: detected capacity change from 0 to 1024
[  740.731152][T20530] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.5394: lblock 2 mapped to illegal pblock 2 (length 1)
[  740.874138][T20530] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  740.961978][T20530] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.5394: lblock 0 mapped to illegal pblock 48 (length 1)
[  740.988987][T20530] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  741.061839][T20530] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.5394: Failed to acquire dquot type 0
[  741.102180][T20530] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  741.137727][T20530] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.5394: mark_inode_dirty error
[  741.173876][T20530] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  741.200689][T20530] EXT4-fs (loop4): 1 orphan inode deleted
[  741.217873][T17508] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  741.242729][T20530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  741.297718][T17508] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  741.312882][T17883] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  741.355076][T17508] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 0
[  741.437059][ T4281] EXT4-fs (loop4): unmounting filesystem.
[  741.445932][ T4281] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  741.466251][ T4281] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  741.478113][ T4281] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  741.535354][T17883] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  741.555096][T17883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.606666][T17883] usb 3-1: config 0 descriptor??
[  741.638970][T17883] cp210x 3-1:0.0: cp210x converter detected
[  742.058588][T17883] usb 3-1: cp210x converter now attached to ttyUSB0
[  742.155937][T20566] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5405'.
[  742.232523][T20566] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5405'.
[  742.269806][T17883] usb 3-1: USB disconnect, device number 14
[  742.292907][T17883] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  742.338791][T20542] loop6: detected capacity change from 0 to 32768
[  742.381480][T17883] cp210x 3-1:0.0: device disconnected
[  742.415695][T20542] 
[  742.415695][T20542]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  742.415695][T20542] 
[  742.565582][T20571] loop9: detected capacity change from 0 to 1024
[  742.621801][ T4338] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  742.633595][T20571] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  742.669321][T17458] 
[  742.669321][T17458]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  742.669321][T17458] 
[  742.710616][T17458] 
[  742.710616][T17458]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  742.710616][T17458] 
[  742.746124][T20571] autofs4:pid:20571:autofs_fill_super: pipe file descriptor does not contain proper ops
[  742.831842][ T4338] usb 5-1: Using ep0 maxpacket: 16
[  742.839478][ T4338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  742.888757][ T4338] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  742.973804][ T4338] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  743.009016][ T4338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.033686][T11288] EXT4-fs (loop9): unmounting filesystem.
[  743.048807][ T4338] usb 5-1: config 0 descriptor??
[  743.461366][T20594] loop2: detected capacity change from 0 to 512
[  743.494742][T20594] EXT4-fs: Ignoring removed orlov option
[  743.509815][T20596] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  743.513173][ T4338] HID 045e:07da: Invalid code 65791 type 1
[  743.545576][T20594] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  743.562267][T20596] batman_adv: batadv0: Removing interface: batadv_slave_0
[  743.577842][ T4338] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0031/input/input41
[  743.600387][T20596] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  743.630544][T20594] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #16: comm syz.2.5413: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0)
[  743.663855][T20594] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.5413: couldn't read orphan inode 16 (err -117)
[  743.688456][ T4338] microsoft 0003:045E:07DA.0031: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  743.821162][T20594] EXT4-fs (loop2): 1 orphan inode deleted
[  743.829064][T20594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  743.997957][ T4338] usb 5-1: USB disconnect, device number 31
[  744.113109][T12575] EXT4-fs (loop2): unmounting filesystem.
[  744.583515][T20613] fido_id[20613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  744.885272][T20631] program syz.9.5426 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  745.578186][T20647] loop9: detected capacity change from 0 to 256
[  745.657742][T20647] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  745.788671][   T26] audit: type=1800 audit(1783054551.645:553): pid=20647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5431" name="file2" dev="loop9" ino=1049020 res=0 errno=0
[  745.821116][T20647] exFAT-fs (loop9): hint_cluster is invalid (17)
[  745.848958][T20647] exFAT-fs (loop9): error, invalid access to FAT (entry 0xffffffff)
[  745.892104][T20647] exFAT-fs (loop9): Filesystem has been set read-only
[  745.901153][T20656] 9pnet_fd: Insufficient options for proto=fd
[  745.919958][T20647] exFAT-fs (loop9): error, invalid access to FAT (entry 0xffffffff)
[  745.976841][   T26] audit: type=1804 audit(1783054551.835:554): pid=20657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.5431" name="/newroot/617/file2/file2" dev="loop9" ino=1049020 res=1 errno=0
[  746.545323][T20670] loop6: detected capacity change from 0 to 2048
[  746.704390][T20670] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  746.961705][T20680] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  747.090256][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  747.144084][T20654] loop3: detected capacity change from 0 to 32768
[  747.285861][T20654] UFO tlock:0xffffc9000289a168
[  747.309160][T20686] loop9: detected capacity change from 0 to 1024
[  747.329399][T20686] EXT4-fs: Ignoring removed nomblk_io_submit option
[  747.425925][T20686] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  747.599883][T20664] loop2: detected capacity change from 0 to 32768
[  747.696231][T20664] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.5437 (20664)
[  747.802329][T20664] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  747.855291][T20664] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  747.890570][T20664] BTRFS info (device loop2): enabling ssd optimizations
[  747.920461][T20664] BTRFS info (device loop2): not using ssd optimizations
[  747.954614][T20664] BTRFS info (device loop2): turning off barriers
[  747.980176][T11288] EXT4-fs (loop9): unmounting filesystem.
[  748.001844][T20664] BTRFS info (device loop2): using free space tree
[  748.062691][ T4338] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  748.283207][ T4338] usb 5-1: Using ep0 maxpacket: 32
[  748.300704][ T4338] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  748.378433][ T4338] usb 5-1: config 0 has no interface number 0
[  748.399745][ T4338] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  748.409407][ T6732] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  748.417777][ T4338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.427164][ T4338] usb 5-1: Product: syz
[  748.431434][ T4338] usb 5-1: Manufacturer: syz
[  748.437027][ T4338] usb 5-1: SerialNumber: syz
[  748.452448][ T4338] usb 5-1: config 0 descriptor??
[  748.464629][ T4338] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  748.567501][T12575] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  748.605883][ T6732] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  748.630925][ T6732] usb 10-1: config 0 has no interface number 0
[  748.695047][ T6732] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  748.719124][ T4338] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  748.747567][ T6732] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.769398][ T4338] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  748.778858][ T6732] usb 10-1: Product: syz
[  748.783876][ T6732] usb 10-1: Manufacturer: syz
[  748.788649][ T6732] usb 10-1: SerialNumber: syz
[  748.867899][ T6732] usb 10-1: config 0 descriptor??
[  749.120259][ T6732] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  749.148768][ T6732] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  749.160131][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  749.178294][ T6732] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  749.187418][ T6732] usb 10-1: media controller created
[  749.214670][ T6732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  749.323533][ T6732] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  749.333928][ T6735] usb 5-1: USB disconnect, device number 32
[  749.378630][ T6735] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  749.422780][ T6735] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  749.469931][ T6732] usb 10-1: USB disconnect, device number 16
[  749.517425][ T6735] quatech2 5-1:0.51: device disconnected
[  749.606612][T20740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5454'.
[  750.343513][T20757] loop9: detected capacity change from 0 to 8192
[  750.363527][T20757] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  750.382747][T20757] REISERFS (device loop9): found reiserfs format "3.5" with non-standard journal
[  750.420634][T20757] REISERFS (device loop9): using ordered data mode
[  750.464933][T20757] reiserfs: using flush barriers
[  750.508115][T20757] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  750.563782][T20757] REISERFS (device loop9): checking transaction log (loop9)
[  750.590499][T20757] REISERFS (device loop9): Using r5 hash to sort names
[  750.608542][T20757] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage.
[  750.657359][T20761] loop3: detected capacity change from 0 to 8192
[  750.713150][T20761] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  750.805770][T20761] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  750.870500][T20761] REISERFS (device loop3): using ordered data mode
[  750.922913][T20761] reiserfs: using flush barriers
[  750.942131][T20761] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  751.034925][T20761] REISERFS (device loop3): checking transaction log (loop3)
[  751.411427][T20761] REISERFS (device loop3): Using rupasov hash to sort names
[  751.482509][T20761] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  752.222666][T20788] loop6: detected capacity change from 0 to 4096
[  752.377835][T20788] ntfs: volume version 3.1.
[  752.448249][T20788] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  752.541895][T20788] ntfs: (device loop6): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  752.652157][T20788] ntfs: (device loop6): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[  752.704247][T20814] loop2: detected capacity change from 0 to 64
[  752.713668][T20813] loop9: detected capacity change from 0 to 128
[  752.831148][T20788] ntfs: (device loop6): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4).  Marking corrupt inode and base inode 0x1a as bad.  Run chkdsk.
[  753.056596][T17508] kworker/u4:1: attempt to access beyond end of device
[  753.056596][T17508] loop2: rw=1, sector=268435468, nr_sectors = 2 limit=64
[  753.124829][T17508] Buffer I/O error on dev loop2, logical block 134217734, lost async page write
[  753.139363][T20788] ntfs: (device loop6): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute.
[  753.230974][T20788] ntfs: (device loop6): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  754.464244][T20855] netlink: 'syz.3.5495': attribute type 10 has an invalid length.
[  754.558241][T20855] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  754.629302][T20859] netlink: 'syz.3.5495': attribute type 10 has an invalid length.
[  754.781136][T20859] 8021q: adding VLAN 0 to HW filter on device bond0
[  754.828278][T20859] team0: Port device bond0 added
[  755.201184][T20874] loop9: detected capacity change from 0 to 2048
[  755.348189][T20883] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  755.398417][T20874] NILFS error (device loop9): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  755.429800][T20882] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  755.509754][T20874] Remounting filesystem read-only
[  755.820323][T20894] loop4: detected capacity change from 0 to 512
[  755.901485][T20894] EXT4-fs: Ignoring removed orlov option
[  755.909554][T20894] EXT4-fs: Ignoring removed mblk_io_submit option
[  755.968499][   T48] Bluetooth: hci4: adv larger than maximum supported
[  755.968596][   T48] Bluetooth: hci4: Unknown advertising packet type: 0x2540
[  755.976877][   T48] Bluetooth: hci4: Malformed LE Event: 0x0d
[  756.022833][T20906] loop3: detected capacity change from 0 to 512
[  756.078976][T20894] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.5509: corrupted in-inode xattr
[  756.142818][T20894] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.5509: couldn't read orphan inode 15 (err -117)
[  756.173628][T20906] EXT4-fs (loop3): 1 truncate cleaned up
[  756.182256][T20906] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  756.198147][T20894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  756.258445][T20894] EXT4-fs (loop4): shut down requested (1)
[  756.394670][T12135] EXT4-fs (loop3): unmounting filesystem.
[  756.621154][ T4281] EXT4-fs (loop4): unmounting filesystem.
[  757.741775][  T128] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  757.784945][T20948] loop2: detected capacity change from 0 to 4096
[  757.799737][T20948] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  757.945737][  T128] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  758.001049][  T128] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  758.020505][  T128] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  758.034140][T20956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5529'.
[  758.045596][  T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  758.059834][T20956] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5529'.
[  758.072697][  T128] usb 5-1: SerialNumber: syz
[  758.096512][T20956] bridge0: port 4(vlan3) entered blocking state
[  758.112925][T12575] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22.
[  758.119960][T20956] bridge0: port 4(vlan3) entered disabled state
[  758.138726][T12575] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22.
[  758.149115][T12575] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  758.300823][  T128] usb 5-1: 0:2 : does not exist
[  758.359217][  T128] usb 5-1: USB disconnect, device number 33
[  758.604351][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  759.109708][T20981] loop4: detected capacity change from 0 to 2048
[  759.238653][T20981] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  759.336269][T20981] ext4 filesystem being mounted at /1193/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  759.471937][T20981] fs-verity: sha512 using implementation "sha512-avx2"
[  759.523216][T20996] binder: 20995:20996 ioctl 541b 0 returned -22
[  759.664206][T21001] loop3: detected capacity change from 0 to 1024
[  759.703744][T21001] EXT4-fs: Ignoring removed nomblk_io_submit option
[  759.772706][ T4281] EXT4-fs (loop4): unmounting filesystem.
[  759.809561][T21001] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  759.831811][T21001] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  759.871400][T21001] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.5544: path /587/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[  760.066604][T12135] EXT4-fs (loop3): unmounting filesystem.
[  760.444068][T21022] loop4: detected capacity change from 0 to 64
[  760.550100][T21022] gfs2: path_lookup on c::: returned error -2
[  760.663403][T21026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5553'.
[  761.403564][T21016] loop3: detected capacity change from 0 to 32768
[  761.412355][T21047] program syz.4.5560 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  761.622945][T21016] XFS (loop3): Mounting V5 Filesystem
[  761.696667][T21016] XFS (loop3): Ending clean mount
[  761.705731][T21065] loop2: detected capacity change from 0 to 256
[  761.721052][T21016] XFS (loop3): Quotacheck needed: Please wait.
[  761.851887][T21065] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d)
[  761.895214][T21016] XFS (loop3): Quotacheck: Done.
[  761.930394][   T26] audit: type=1800 audit(1783054567.785:555): pid=21065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5563" name="file1" dev="loop2" ino=1049021 res=0 errno=0
[  762.131993][T12135] XFS (loop3): Unmounting Filesystem
[  762.194282][T21072] loop6: detected capacity change from 0 to 256
[  762.276713][T21072] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d)
[  762.439989][   T48] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  762.456372][   T48] CPU: 0 PID: 48 Comm: kworker/u5:0 Not tainted syzkaller #0
[  762.463856][   T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  762.473983][   T48] Workqueue: hci2 hci_rx_work
[  762.478801][   T48] Call Trace:
[  762.482133][   T48]  <TASK>
[  762.485119][   T48]  dump_stack_lvl+0x188/0x24e
[  762.489871][   T48]  ? show_regs_print_info+0x12/0x12
[  762.495144][   T48]  ? load_image+0x410/0x410
[  762.499737][   T48]  sysfs_create_dir_ns+0x26a/0x290
[  762.505007][   T48]  ? __lock_acquire+0x7bd0/0x7bd0
[  762.510129][   T48]  ? sysfs_warn_dup+0xa0/0xa0
[  762.514904][   T48]  ? do_raw_spin_unlock+0x11d/0x230
[  762.520185][   T48]  kobject_add_internal+0x617/0xca0
[  762.525466][   T48]  kobject_add+0x160/0x230
[  762.529966][   T48]  ? kobject_init+0x1c0/0x1c0
[  762.534716][   T48]  ? __raw_spin_lock_init+0x41/0x100
[  762.540066][   T48]  ? klist_children_get+0x50/0x50
[  762.545248][   T48]  ? get_device_parent+0x121/0x3e0
[  762.550443][   T48]  device_add+0x470/0x1050
[  762.554943][   T48]  hci_conn_add_sysfs+0xd1/0x1e0
[  762.560063][   T48]  le_conn_complete_evt+0xf69/0x1560
[  762.565439][   T48]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  762.571755][   T48]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  762.577543][   T48]  ? mutex_unlock+0x10/0x10
[  762.582124][   T48]  ? skb_pull_data+0xec/0x1f0
[  762.586962][   T48]  hci_le_conn_complete_evt+0x183/0x440
[  762.592761][   T48]  ? hci_remote_host_features_evt+0x230/0x230
[  762.598917][   T48]  hci_event_packet+0x7b3/0x1290
[  762.603936][   T48]  ? __lock_acquire+0x7bd0/0x7bd0
[  762.609040][   T48]  ? bis_list+0x280/0x280
[  762.613425][   T48]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  762.619386][   T48]  ? kcov_remote_start+0x4b0/0x7e0
[  762.624590][   T48]  ? exc_spurious_interrupt_bug+0x20/0x20
[  762.630385][   T48]  ? hci_send_to_monitor+0x9c/0x4a0
[  762.635651][   T48]  hci_rx_work+0x3eb/0xd40
[  762.640126][   T48]  ? _raw_spin_unlock+0x40/0x40
[  762.645049][   T48]  ? process_one_work+0x7b4/0x1160
[  762.650299][   T48]  process_one_work+0x8ab/0x1160
[  762.655317][   T48]  ? worker_detach_from_pool+0x240/0x240
[  762.661023][   T48]  ? _raw_spin_lock_irq+0xb7/0xf0
[  762.666109][   T48]  ? _raw_spin_lock_irqsave+0x100/0x100
[  762.671721][   T48]  ? wq_worker_running+0x97/0x190
[  762.676803][   T48]  worker_thread+0xaf5/0x12a0
[  762.681575][   T48]  kthread+0x29d/0x330
[  762.685767][   T48]  ? worker_clr_flags+0x1a0/0x1a0
[  762.690853][   T48]  ? kthread_blkcg+0xd0/0xd0
[  762.695499][   T48]  ret_from_fork+0x1f/0x30
[  762.700077][   T48]  </TASK>
[  762.705558][   T48] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  762.718900][   T48] Bluetooth: hci2: failed to register connection device
[  762.801193][T21076] loop2: detected capacity change from 0 to 4096
[  762.943924][T21079] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  763.909986][T21104] loop4: detected capacity change from 0 to 64
[  763.951971][T21104] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  764.307952][T21107] loop2: detected capacity change from 0 to 4096
[  764.349010][T21107] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  764.740883][T12575] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22.
[  764.790731][T12575] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22.
[  764.865791][T12575] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  764.914864][T21122] overlayfs: filesystem on './file0' not supported as upperdir
[  766.333873][T21155] loop2: detected capacity change from 0 to 4096
[  766.441844][   T48] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  767.187060][T21166] netlink: 'syz.9.5597': attribute type 1 has an invalid length.
[  767.222414][T12575] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  767.266152][T12575] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  767.275435][T21166] netlink: 'syz.9.5597': attribute type 2 has an invalid length.
[  767.355016][T21167] netlink: 'syz.9.5597': attribute type 1 has an invalid length.
[  767.430674][T21167] netlink: 'syz.9.5597': attribute type 2 has an invalid length.
[  767.446358][T21141] loop6: detected capacity change from 0 to 32768
[  767.715230][T21141] XFS (loop6): Mounting V5 Filesystem
[  767.884443][T21152] loop3: detected capacity change from 0 to 262144
[  767.923612][T21152] F2FS-fs (loop3): invalid crc value
[  767.967739][T21152] F2FS-fs (loop3): Found nat_bits in checkpoint
[  767.975070][T21141] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  768.030270][T21152] F2FS-fs (loop3): Start checkpoint disabled!
[  768.076554][T21152] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  768.084412][T21189] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5600'.
[  768.113793][T21141] XFS (loop6): Tail block (0x29) overwrite detected. Updated to 0x30
[  768.229002][T21141] XFS (loop6): Ending clean mount
[  768.535120][T17458] XFS (loop6): Unmounting Filesystem
[  769.117127][T21211] loop3: detected capacity change from 0 to 256
[  769.206719][T21211] FAT-fs (loop3): Directory bread(block 64) failed
[  769.257273][T21211] FAT-fs (loop3): Directory bread(block 65) failed
[  769.289193][T21211] FAT-fs (loop3): Directory bread(block 66) failed
[  769.331691][T21211] FAT-fs (loop3): Directory bread(block 67) failed
[  769.362295][T21211] FAT-fs (loop3): Directory bread(block 68) failed
[  769.395016][T21211] FAT-fs (loop3): Directory bread(block 69) failed
[  769.427146][T21211] FAT-fs (loop3): Directory bread(block 70) failed
[  769.482528][T21211] FAT-fs (loop3): Directory bread(block 71) failed
[  769.489234][T21211] FAT-fs (loop3): Directory bread(block 72) failed
[  769.591736][T21211] FAT-fs (loop3): Directory bread(block 73) failed
[  769.799634][T21232] loop2: detected capacity change from 0 to 512
[  769.899235][T21232] EXT4-fs (loop2): Test dummy encryption mode enabled
[  769.990481][T21232] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.5616: inode has both inline data and extents flags
[  770.085527][T21232] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.5616: couldn't read orphan inode 15 (err -117)
[  770.139616][T21232] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  770.187185][T21243] loop6: detected capacity change from 0 to 512
[  770.211330][T21241] loop9: detected capacity change from 0 to 4096
[  770.289145][T21245] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  770.419541][T21243] EXT4-fs: Ignoring removed nobh option
[  770.443440][T21243] EXT4-fs: Ignoring removed nomblk_io_submit option
[  770.513785][T21243] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.5619: iget: bad i_size value: 38620345925642
[  770.546167][T21243] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.5619: couldn't read orphan inode 15 (err -117)
[  770.580281][T21243] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  770.730001][T21243] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.5619: bg 0: block 5: invalid block bitmap
[  770.990030][T17458] EXT4-fs (loop6): unmounting filesystem.
[  771.015254][T21232] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  771.427376][T12575] EXT4-fs (loop2): unmounting filesystem.
[  772.266321][T21254] loop3: detected capacity change from 0 to 32768
[  772.385304][T21254] jfs_readdir called with invalid offset!
[  772.443664][T21286] loop6: detected capacity change from 0 to 8192
[  773.769724][T21327] loop3: detected capacity change from 0 to 256
[  773.867691][T21327] FAT-fs (loop3): Directory bread(block 64) failed
[  773.885055][T21327] FAT-fs (loop3): Directory bread(block 65) failed
[  773.915603][T21327] FAT-fs (loop3): Directory bread(block 66) failed
[  773.942231][T21327] FAT-fs (loop3): Directory bread(block 67) failed
[  773.975638][T21327] FAT-fs (loop3): Directory bread(block 68) failed
[  774.029654][T21327] FAT-fs (loop3): Directory bread(block 69) failed
[  774.049730][T21327] FAT-fs (loop3): Directory bread(block 70) failed
[  774.082560][T21327] FAT-fs (loop3): Directory bread(block 71) failed
[  774.140383][T21327] FAT-fs (loop3): Directory bread(block 72) failed
[  774.160049][T21327] FAT-fs (loop3): Directory bread(block 73) failed
[  775.546360][T21376] futex_wake_op: syz.9.5663 tries to shift op by -1; fix this program
[  776.634145][T21372] loop3: detected capacity change from 0 to 32768
[  776.648418][T21366] loop4: detected capacity change from 0 to 40427
[  776.696575][T21366] F2FS-fs (loop4): invalid crc value
[  776.723279][T21366] F2FS-fs (loop4): Found nat_bits in checkpoint
[  776.763717][T21372] JBD2: Ignoring recovery information on journal
[  776.849414][T21366] F2FS-fs (loop4): Start checkpoint disabled!
[  776.915095][T21372] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  776.937675][T21366] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  777.027793][T21415] loop9: detected capacity change from 0 to 764
[  777.102475][T21372] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74)
[  777.278150][T21372] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  777.317883][T21372] OCFS2: File system is now read-only.
[  777.323906][T21372] (syz.3.5662,21372,0):ocfs2_search_one_group:1684 ERROR: status = -30
[  777.341408][T21372] (syz.3.5662,21372,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30
[  777.350900][T21372] (syz.3.5662,21372,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  777.387784][T21372] (syz.3.5662,21372,0):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  777.397559][T21372] (syz.3.5662,21372,0):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  777.409064][ T1088] kworker/u4:5: attempt to access beyond end of device
[  777.409064][ T1088] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  777.431769][T21372] (syz.3.5662,21372,0):ocfs2_mknod_locked:639 ERROR: status = -30
[  777.454502][T21372] (syz.3.5662,21372,1):ocfs2_mknod:385 ERROR: status = -30
[  777.485626][T21372] (syz.3.5662,21372,1):ocfs2_mknod:502 ERROR: status = -30
[  777.545761][T21372] (syz.3.5662,21372,1):ocfs2_mkdir:659 ERROR: status = -30
[  777.754551][T12135] ocfs2: Unmounting device (7,3) on (node local)
[  778.219026][T21434] loop3: detected capacity change from 0 to 256
[  778.357280][T21437] loop9: detected capacity change from 0 to 512
[  778.596764][T21437] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.5678: inode has both inline data and extents flags
[  778.656201][T21437] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.5678: couldn't read orphan inode 15 (err -117)
[  778.733308][T21437] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  778.798803][T21437] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #2: comm syz.9.5678: directory missing '.'
[  778.979784][T11288] EXT4-fs (loop9): unmounting filesystem.
[  778.987242][T21456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5684'.
[  779.077621][T21458] netlink: 'syz.2.5685': attribute type 34 has an invalid length.
[  779.460114][T21473] loop6: detected capacity change from 0 to 256
[  779.520492][T21473] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  779.585563][   T26] audit: type=1800 audit(1783054585.445:556): pid=21473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5691" name="file2" dev="loop6" ino=1049063 res=0 errno=0
[  779.606711][T21473] exFAT-fs (loop6): hint_cluster is invalid (17)
[  779.616637][T21473] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff)
[  779.632070][T21473] exFAT-fs (loop6): Filesystem has been set read-only
[  779.639157][T21473] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff)
[  779.657960][   T26] audit: type=1804 audit(1783054585.515:557): pid=21478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.5691" name="/newroot/186/file2/file2" dev="loop6" ino=1049063 res=1 errno=0
[  779.990614][T21488] loop6: detected capacity change from 0 to 128
[  780.043305][T21488] FAT-fs (loop6): Unrecognized mount option "��" or missing value
[  780.111732][ T6732] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  780.302657][ T6732] usb 4-1: Using ep0 maxpacket: 32
[  780.310993][ T6732] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  780.352869][ T6732] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  780.387374][T21500] loop4: detected capacity change from 0 to 512
[  780.398746][ T6732] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  780.438746][ T6732] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  780.451706][ T6732] usb 4-1: Product: syz
[  780.455966][ T6732] usb 4-1: Manufacturer: syz
[  780.499666][T21500] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  780.509613][ T6732] hub 4-1:4.0: USB hub found
[  780.608877][T21500] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm syz.4.5700: bg 0: bad block bitmap checksum
[  780.702902][ T6732] hub 4-1:4.0: config failed, hub has too many ports! (err -19)
[  780.794976][ T4281] EXT4-fs (loop4): unmounting filesystem.
[  780.984891][T21518] loop9: detected capacity change from 0 to 512
[  781.039194][T21518] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  781.062135][ T6732] usb 4-1: USB disconnect, device number 14
[  781.202167][T21518] EXT4-fs error (device loop9): ext4_orphan_get:1431: comm syz.9.5706: bad orphan inode 15
[  781.216244][T21518] ext4_test_bit(bit=14, block=18) = 1
[  781.223928][T21518] is_bad_inode(inode)=0
[  781.228156][T21518] NEXT_ORPHAN(inode)=1023
[  781.235025][T21525] loop6: detected capacity change from 0 to 1024
[  781.243435][T21518] max_ino=32
[  781.246780][T21518] i_nlink=0
[  781.260293][T21518] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.5706: bg 0: block 161: padding at end of block bitmap is not set
[  781.285156][T21518] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  781.312161][T21518] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  781.342714][   T26] audit: type=1800 audit(1783054587.205:558): pid=21525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5707" name="file1" dev="loop6" ino=20 res=0 errno=0
[  781.370843][T21518] ext2 filesystem being mounted at /679/�q�Y�3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  781.481820][   T48] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  781.482029][ T4276] Bluetooth: hci5: command 0x1003 tx timeout
[  781.894821][T11288] EXT4-fs (loop9): unmounting filesystem.
[  781.915198][T21548] loop2: detected capacity change from 0 to 64
[  782.033246][T21548] hfs: request for non-existent node 131072 in B*Tree
[  782.139176][T21548] hfs: request for non-existent node 131072 in B*Tree
[  782.179857][T21542] loop3: detected capacity change from 0 to 8192
[  782.228042][T21542] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  782.306292][T21542] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  782.360945][T21542] REISERFS (device loop3): using ordered data mode
[  782.391795][T21542] reiserfs: using flush barriers
[  782.418968][T21542] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  782.476803][T21542] REISERFS (device loop3): checking transaction log (loop3)
[  782.503928][T21542] REISERFS (device loop3): Using r5 hash to sort names
[  782.511763][ T6732] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  782.549340][T21542] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  782.736719][ T6732] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  782.761860][ T6732] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  782.807306][ T6732] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  782.863599][ T6732] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  782.907942][ T6732] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  782.940434][ T6732] usb 10-1: Product: syz
[  782.957451][ T6732] usb 10-1: Manufacturer: syz
[  782.978241][ T6732] usb 10-1: SerialNumber: syz
[  783.154346][T21576] loop4: detected capacity change from 0 to 512
[  783.197260][T21576] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  783.226747][ T6732] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  783.454499][T17883] usb 10-1: USB disconnect, device number 17
[  783.506368][T17883] usblp0: removed
[  783.771014][T21585] loop4: detected capacity change from 0 to 4096
[  783.839320][T21585] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  783.880246][T21571] loop6: detected capacity change from 0 to 32768
[  783.907383][T21571] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop6 scanned by syz.6.5718 (21571)
[  783.969038][T21571] BTRFS info (device loop6): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  784.000303][T21571] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  784.027362][T21585] ntfs: volume version 3.1.
[  784.056263][T21585] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  784.069414][T21571] BTRFS info (device loop6): enabling ssd optimizations
[  784.101719][T21571] BTRFS info (device loop6): not using ssd optimizations
[  784.109320][T21585] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  784.134180][T21571] BTRFS info (device loop6): turning off barriers
[  784.149941][T21585] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[  784.192487][T21571] BTRFS info (device loop6): using free space tree
[  784.278081][T21585] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccenteuro.  You might want to try to use the mount option nls=utf8.
[  784.302733][T21585] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  784.819165][T21624] input: syz0 as /devices/virtual/input/input42
[  784.831546][T17458] BTRFS info (device loop6): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  784.927164][T21620] loop4: detected capacity change from 0 to 4096
[  785.015376][T21620] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  785.210972][T21620] ntfs3: loop4: failed to convert "c46c" to cp850
[  785.802180][T21527] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  785.806250][T21637] loop6: detected capacity change from 0 to 512
[  786.078938][T21637] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  786.119810][T21637] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  786.390952][T17458] EXT4-fs (loop6): unmounting filesystem.
[  786.400196][T21657] loop4: detected capacity change from 0 to 2048
[  786.411674][ T5621] usb 4-1: new low-speed USB device number 15 using dummy_hcd
[  786.450291][T21657] EXT4-fs: Ignoring removed nobh option
[  786.512718][T21657] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  786.560089][T21657] ext4 filesystem being mounted at /1246/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  786.613953][ T5621] usb 4-1: unable to get BOS descriptor or descriptor too short
[  786.633320][ T5621] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0
[  786.655627][ T5621] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0
[  786.679759][ T5621] usb 4-1: string descriptor 0 read error: -22
[  786.688304][ T5621] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[  786.698083][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  786.776163][   T26] audit: type=1800 audit(1783054592.635:559): pid=21657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5738" name="file0" dev="loop4" ino=13 res=0 errno=0
[  786.883858][ T4281] EXT4-fs (loop4): unmounting filesystem.
[  787.167918][ T5621] snd-usb-audio: probe of 4-1:1.0 failed with error -2
[  787.279860][T21674] loop9: detected capacity change from 0 to 4096
[  787.380463][T21675] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  787.401736][   T27] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  787.551891][T21677] loop6: detected capacity change from 0 to 1024
[  787.564438][ T5621] snd-usb-audio: probe of 4-1:1.1 failed with error -2
[  787.614081][   T27] usb 5-1: Using ep0 maxpacket: 32
[  787.625489][T21677] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5
[  787.626916][   T27] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  787.644082][T21677] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  787.662194][   T27] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  787.679100][   T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  787.688601][   T27] usb 5-1: config 1 has no interface number 0
[  787.695285][   T27] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  787.706616][   T27] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  787.719767][   T27] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  787.729327][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.741741][T21677] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.5744: Failed to acquire dquot type 0
[  787.768295][T21677] EXT4-fs error (device loop6): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  787.805216][ T5621] snd-usb-audio: probe of 4-1:1.2 failed with error -2
[  787.818485][   T27] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  787.827671][T21677] EXT4-fs (loop6): 1 truncate cleaned up
[  787.876555][ T5621] usb 4-1: USB disconnect, device number 15
[  787.884877][T21677] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  787.899997][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  788.023924][   T27] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  788.332714][T17458] EXT4-fs (loop6): unmounting filesystem.
[  788.415724][T21683] device macsec3 entered promiscuous mode
[  788.514798][   T27] usb 5-1: USB disconnect, device number 34
[  788.556131][   T27] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  788.748803][T21688] loop6: detected capacity change from 0 to 4096
[  788.763033][T21686] loop3: detected capacity change from 0 to 4096
[  788.845905][T21686] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  788.867485][T21688] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  788.911517][T21686] ntfs3: loop3: Failed to load $Extend.
[  789.499251][T17458] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22.
[  789.932325][T21714] device batadv0 entered promiscuous mode
[  789.951399][T21714] device batadv0 left promiscuous mode
[  790.944571][T21720] loop9: detected capacity change from 0 to 32768
[  791.079395][T21720] XFS (loop9): Mounting V5 Filesystem
[  791.122581][ T5342] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  791.267056][T21720] XFS (loop9): Ending clean mount
[  791.309633][T21720] XFS (loop9): Quotacheck needed: Please wait.
[  791.332561][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  791.387561][ T5342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  791.415332][ T5342] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  791.443322][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  791.493138][ T5342] usb 4-1: config 0 descriptor??
[  791.574549][T21720] XFS (loop9): Quotacheck: Done.
[  791.730319][T21762] netlink: 112 bytes leftover after parsing attributes in process `syz.6.5769'.
[  791.801783][T21762] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  791.875474][T11288] XFS (loop9): Unmounting Filesystem
[  791.990389][ T5342] hid-thrustmaster 0003:044F:B65D.0032: unknown main item tag 0x0
[  792.006377][ T5342] hid-thrustmaster 0003:044F:B65D.0032: unknown main item tag 0x0
[  792.025324][ T5342] hid-thrustmaster 0003:044F:B65D.0032: unknown main item tag 0x0
[  792.045853][ T5342] hid-thrustmaster 0003:044F:B65D.0032: unknown main item tag 0x0
[  792.060952][ T5342] hid-thrustmaster 0003:044F:B65D.0032: unknown main item tag 0x0
[  792.093882][ T5342] hid-thrustmaster 0003:044F:B65D.0032: unknown main item tag 0x0
[  792.131038][ T5342] hid-thrustmaster 0003:044F:B65D.0032: unknown main item tag 0x0
[  792.224082][ T5342] hid-thrustmaster 0003:044F:B65D.0032: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0
[  792.253274][ T5342] hid-thrustmaster 0003:044F:B65D.0032: Wrong number of endpoints?
[  792.262036][    C1] hid-thrustmaster 0003:044F:B65D.0032: Unknown packet type 0x0, unable to proceed further with wheel init
[  792.532832][ T5342] usb 4-1: USB disconnect, device number 16
[  792.600354][T21771] fido_id[21771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  793.114751][T21791] loop6: detected capacity change from 0 to 1024
[  793.135496][T21791] EXT4-fs: Ignoring removed bh option
[  793.146460][T21791] ext4: Bad value for 'journal_dev'
[  793.189243][T21797] netlink: 'syz.9.5770': attribute type 3 has an invalid length.
[  793.664151][T21806] loop9: detected capacity change from 0 to 4096
[  793.739264][T21806] ntfs3: loop9: Mark volume as dirty due to NTFS errors
[  793.827552][T21806] ntfs3: loop9: Failed to load $Extend.
[  794.030632][T21817] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5785'.
[  794.523937][T21829] loop6: detected capacity change from 0 to 2048
[  794.639582][T21829]  loop6: p1 < > p3
[  794.682645][T21829] loop6: p3 size 134217728 extends beyond EOD, truncated
[  795.043825][T21845] loop3: detected capacity change from 0 to 1024
[  795.116740][T21847] netlink: 26332 bytes leftover after parsing attributes in process `syz.6.5797'.
[  795.260150][ T4373] udevd[4373]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  795.285152][T10836] udevd[10836]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  795.299327][T21854] loop4: detected capacity change from 0 to 256
[  795.462882][T21854] FAT-fs (loop4): Unrecognized mount option "�}�" or missing value
[  795.622071][T21859] netlink: 'syz.6.5801': attribute type 10 has an invalid length.
[  795.732511][T21859] device syz_tun entered promiscuous mode
[  795.796785][T21859] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  795.861811][T21862] netlink: 'syz.6.5801': attribute type 10 has an invalid length.
[  795.890661][T21867] loop3: detected capacity change from 0 to 256
[  795.988866][T21867] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d)
[  796.132459][T21862] 8021q: adding VLAN 0 to HW filter on device bond0
[  796.178784][T21862] team0: Port device bond0 added
[  796.515401][T21848] loop9: detected capacity change from 0 to 32768
[  796.558954][T21848] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.5796 (21848)
[  796.616237][T21853] loop2: detected capacity change from 0 to 32768
[  796.629887][T21848] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  796.675916][T21848] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm
[  796.728530][T21848] BTRFS info (device loop9): force clearing of disk cache
[  796.737086][T21853] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  796.807589][T21848] BTRFS info (device loop9): metadata ratio 0
[  796.822306][T21848] BTRFS info (device loop9): enabling ssd optimizations
[  796.863446][T21848] BTRFS info (device loop9): using spread ssd allocation scheme
[  796.871223][T21848] BTRFS info (device loop9): using free space tree
[  796.918027][T21853] (syz.2.5798,21853,1):ocfs2_double_lock:1188 ERROR: status = -2
[  796.962645][T21885] tc_dump_action: action bad kind
[  797.054847][T21853] (syz.2.5798,21853,1):ocfs2_rename:1297 ERROR: status = -2
[  797.105964][T21853] (syz.2.5798,21853,0):ocfs2_rename:1687 ERROR: status = -2
[  797.178287][T12575] ocfs2: Unmounting device (7,2) on (node local)
[  797.230470][T21848] BTRFS info (device loop9): rebuilding free space tree
[  797.691746][ T6732] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  797.893030][ T6732] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[  797.906529][ T6732] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  797.964853][ T6732] usb 4-1: config 0 has no interface number 0
[  797.984243][ T6732] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  798.031690][ T6732] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  798.061793][ T6732] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  798.156174][ T6732] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  798.196544][ T6732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  798.226773][ T6732] usb 4-1: Product: syz
[  798.245022][ T6732] usb 4-1: Manufacturer: syz
[  798.249723][ T6732] usb 4-1: SerialNumber: syz
[  798.318941][ T6732] usb 4-1: config 0 descriptor??
[  798.396296][T21895] loop6: detected capacity change from 0 to 32768
[  798.581102][T21895] XFS (loop6): Mounting V5 Filesystem
[  798.581565][T17508] BTRFS info (device loop9): qgroup scan completed (inconsistency flag cleared)
[  798.597291][T21944] loop4: detected capacity change from 0 to 256
[  798.654606][T21944] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  798.690113][T21944] 9pnet_fd: p9_fd_create_unix (21944): problem connecting socket: ./file0: -13
[  798.730938][T21895] XFS (loop6): Ending clean mount
[  798.770830][ T6732] usb 4-1: USB disconnect, device number 17
[  798.838978][T11288] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  799.172813][T21955] device macvlan2 entered promiscuous mode
[  799.561574][T17458] XFS (loop6): Unmounting Filesystem
[  799.885165][T21966] loop9: detected capacity change from 0 to 256
[  799.935225][T21966] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  799.947111][T21966] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[  799.977220][T21966] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000e8a4, chksum : 0xd6c92322, utbl_chksum : 0xe619d30d)
[  800.024632][T21970] loop2: detected capacity change from 0 to 128
[  800.031740][T11634] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  800.233168][T11634] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  800.265275][T11634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  800.321965][T11634] usb 4-1: Product: syz
[  800.326213][T11634] usb 4-1: Manufacturer: syz
[  800.330852][T11634] usb 4-1: SerialNumber: syz
[  800.372694][T21975] sctp: [Deprecated]: syz.4.5829 (pid 21975) Use of struct sctp_assoc_value in delayed_ack socket option.
[  800.372694][T21975] Use struct sctp_sack_info instead
[  800.654462][T11634] rtl8150 4-1:1.0: couldn't reset the device
[  800.660739][T11634] rtl8150: probe of 4-1:1.0 failed with error -5
[  800.715646][T11634] usb 4-1: USB disconnect, device number 18
[  801.360890][   T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  801.377688][   T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  801.504144][T21999] loop6: detected capacity change from 0 to 8192
[  801.590208][   T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  801.656485][   T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  801.907578][   T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  801.952755][   T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  802.264306][   T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  802.302149][   T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  802.450034][T21995] loop4: detected capacity change from 0 to 40427
[  802.537356][T21995] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  802.580885][T21995] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  802.628718][T21995] F2FS-fs (loop4): invalid crc_offset: 1
[  802.673095][T22024] loop3: detected capacity change from 0 to 128
[  802.695169][T21995] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  802.960951][   T46] tipc: Left network mode
[  803.079817][T21995] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  803.093205][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  803.108192][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  803.118956][T21995] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  803.129119][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  803.138770][   T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  803.154513][   T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  803.162253][   T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  803.514391][ T4281] syz-executor: attempt to access beyond end of device
[  803.514391][ T4281] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  803.655900][T22043] loop3: detected capacity change from 0 to 16
[  803.696274][T22043] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  804.001377][T22022] loop6: detected capacity change from 0 to 40427
[  804.104846][T22022] F2FS-fs (loop6): invalid crc value
[  804.159429][T22022] F2FS-fs (loop6): Found nat_bits in checkpoint
[  804.260956][T22053] futex_wake_op: syz.9.5853 tries to shift op by 32; fix this program
[  804.306075][T22022] F2FS-fs (loop6): Start checkpoint disabled!
[  804.361780][T22022] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  804.440546][T22022] F2FS-fs (loop6): Skipping Checkpoint. Checkpoints currently disabled.
[  804.957112][T22031] chnl_net:caif_netlink_parms(): no params data found
[  805.242781][T21527] Bluetooth: hci4: command 0x0409 tx timeout
[  805.591436][T22031] bridge0: port 1(bridge_slave_0) entered blocking state
[  805.598746][T22031] bridge0: port 1(bridge_slave_0) entered disabled state
[  805.607961][T22031] device bridge_slave_0 entered promiscuous mode
[  805.950188][T22031] bridge0: port 2(bridge_slave_1) entered blocking state
[  805.970003][T22031] bridge0: port 2(bridge_slave_1) entered disabled state
[  805.995709][T22031] device bridge_slave_1 entered promiscuous mode
[  806.151726][ T5336] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  806.189387][T22031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  806.235698][T22031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  806.356234][ T5336] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  806.391968][ T5336] usb 4-1: config 0 interface 0 has no altsetting 0
[  806.429057][ T5336] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  806.461704][ T5336] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  806.485280][ T5336] usb 4-1: Product: syz
[  806.489529][ T5336] usb 4-1: Manufacturer: syz
[  806.528244][T22112] loop4: detected capacity change from 0 to 128
[  806.561657][ T5336] usb 4-1: SerialNumber: syz
[  806.603721][ T5336] usb 4-1: config 0 descriptor??
[  806.617405][ T5336] usb 4-1: selecting invalid altsetting 0
[  806.637968][T22112] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  806.693454][T22112] hpfs: filesystem error: improperly stopped
[  806.737173][T22112] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  806.809234][T22112] hpfs: You really don't want any checks? You are crazy...
[  806.848420][T22112] hpfs: Code page index out of array
[  806.864189][   T46] device hsr_slave_0 left promiscuous mode
[  806.882616][   T46] device hsr_slave_1 left promiscuous mode
[  806.888790][T22112] hpfs: code page support is disabled
[  806.901162][ T5336] usb 4-1: USB disconnect, device number 19
[  806.912479][T22112] hpfs: hpfs_map_4sectors(): unaligned read
[  806.923094][T22112] hpfs: hpfs_map_4sectors(): unaligned read
[  806.934668][T22112] hpfs: filesystem error: unable to find root dir
[  806.946930][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  806.975301][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  807.010919][T22112] hpfs: bad mount options.
[  807.024601][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  807.034929][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  807.043428][   T46] bridge0: port 3(batadv0) entered disabled state
[  807.051507][   T46] device bridge_slave_1 left promiscuous mode
[  807.059489][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.115831][   T46] device bridge_slave_0 left promiscuous mode
[  807.142393][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.203688][T22121] loop9: detected capacity change from 0 to 256
[  807.248191][   T46] device bridge0 left promiscuous mode
[  807.256269][   T46] device veth1_macvtap left promiscuous mode
[  807.276049][   T46] device veth0_macvtap left promiscuous mode
[  807.302687][   T46] device veth1_vlan left promiscuous mode
[  807.327109][T21527] Bluetooth: hci4: command 0x041b tx timeout
[  807.328074][   T46] device veth0_vlan left promiscuous mode
[  807.498776][T22125] program syz.6.5873 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  807.832169][    C0] vkms_vblank_simulate: vblank timer overrun
[  808.026607][T22140] loop3: detected capacity change from 0 to 128
[  808.540860][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  808.615299][    C0] vkms_vblank_simulate: vblank timer overrun
[  808.774240][T22156] loop9: detected capacity change from 0 to 1024
[  808.810528][T22156] EXT4-fs: inline encryption not supported
[  808.920164][T22156] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  808.948621][T22156] ext4 filesystem being mounted at /720/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  809.068496][T22156] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.5887: bg 0: block 112: padding at end of block bitmap is not set
[  809.182879][ T4483] EXT4-fs error (device loop9): ext4_map_blocks:747: inode #15: block 3: comm kworker/u4:8: lblock 3 mapped to illegal pblock 3 (length 3)
[  809.236013][ T4483] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  809.268722][ T4483] EXT4-fs (loop9): This should not happen!! Data will be lost
[  809.268722][ T4483] 
[  809.299958][ T4483] EXT4-fs error (device loop9): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:8: lblock 8 mapped to illegal pblock 8 (length 2)
[  809.321229][ T4483] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 2 with error 117
[  809.341878][ T4483] EXT4-fs (loop9): This should not happen!! Data will be lost
[  809.341878][ T4483] 
[  809.399635][T11288] EXT4-fs (loop9): unmounting filesystem.
[  809.405722][T21527] Bluetooth: hci4: command 0x040f tx timeout
[  809.534064][T22168] program syz.9.5891 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  809.551563][    C0] vkms_vblank_simulate: vblank timer overrun
[  809.755725][   T46] team0 (unregistering): Port device team_slave_1 removed
[  809.837551][   T46] team0 (unregistering): Port device team_slave_0 removed
[  809.950465][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  810.065504][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  810.944393][   T46] bond0 (unregistering): Released all slaves
[  811.107912][T22031] team0: Port device team_slave_0 added
[  811.134027][T22031] team0: Port device team_slave_1 added
[  811.143938][T22133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5879'.
[  811.153722][T22133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5879'.
[  811.276064][T22031] batman_adv: batadv0: Adding interface: batadv_slave_0
[  811.293342][T22031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  811.421449][T22031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  811.481858][T21527] Bluetooth: hci4: command 0x0419 tx timeout
[  811.529386][T22031] batman_adv: batadv0: Adding interface: batadv_slave_1
[  811.537192][T22031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  811.635022][T22031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  811.994689][T22031] device hsr_slave_0 entered promiscuous mode
[  812.032097][T22031] device hsr_slave_1 entered promiscuous mode
[  812.070310][T22031] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  812.108208][T22031] Cannot create hsr debugfs directory
[  812.498499][T22188] loop3: detected capacity change from 0 to 32768
[  812.532956][T22188] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.5899 (22188)
[  812.617965][T22188] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  812.697162][T22188] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  812.726666][T22188] BTRFS info (device loop3): force clearing of disk cache
[  812.791883][T22188] BTRFS info (device loop3): metadata ratio 0
[  812.798060][T22188] BTRFS info (device loop3): enabling ssd optimizations
[  812.848925][T22188] BTRFS info (device loop3): using spread ssd allocation scheme
[  812.901934][T22188] BTRFS info (device loop3): using free space tree
[  813.124210][T22240] loop4: detected capacity change from 0 to 128
[  813.124305][T22188] BTRFS info (device loop3): rebuilding free space tree
[  813.145939][T22240] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  813.158109][T22240] hpfs: filesystem error: improperly stopped
[  813.173247][T22240] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  813.191325][T22240] hpfs: You really don't want any checks? You are crazy...
[  813.252477][T22240] hpfs: hpfs_map_sector(): read error
[  813.257952][T22240] hpfs: code page support is disabled
[  813.282068][T22240] hpfs: hpfs_map_4sectors(): unaligned read
[  813.288271][T22240] hpfs: hpfs_map_4sectors(): unaligned read
[  813.294707][T22240] hpfs: filesystem error: unable to find root dir
[  813.693118][T17508] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  813.922081][T12135] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  814.221894][T10834] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 14 /dev/loop3 scanned by udevd (10834)
[  814.349639][T22265] loop4: detected capacity change from 0 to 1024
[  814.891410][T22274] loop3: detected capacity change from 0 to 16
[  814.964871][T22274] erofs: (device loop3): mounted with root inode @ nid 36.
[  814.965037][T22277] loop9: detected capacity change from 0 to 128
[  815.061264][T22274] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  815.094866][T22277] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  815.172491][T22285] erofs: (device loop3): z_erofs_readahead: readahead error at page 87 @ nid 36
[  815.175996][T22277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  815.192955][T22274] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[  815.201485][T22285] erofs: (device loop3): z_erofs_readahead: readahead error at page 86 @ nid 36
[  815.274886][T22285] syz.3.5915: attempt to access beyond end of device
[  815.274886][T22285] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16
[  815.367444][T22285] syz.3.5915: attempt to access beyond end of device
[  815.367444][T22285] loop3: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  815.500744][T22285] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -50 in[64, 4032] out[3749]
[  815.993117][   T26] audit: type=1400 audit(1783054621.855:560): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=22296 comm="syz.6.5926"
[  816.213296][T22031] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  816.250900][T22031] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  816.302913][T22031] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  816.330969][T22297] loop6: detected capacity change from 0 to 8192
[  816.360517][T22031] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  816.420056][T22297]  loop6: p1 < > p3 < p5 > p4
[  816.460673][T22297] loop6: p4 size 33557760 extends beyond EOD, truncated
[  816.500566][T22297] loop6: p5 size 33557760 extends beyond EOD, truncated
[  816.584531][T22288] loop4: detected capacity change from 0 to 32768
[  816.716305][T22288] JBD2: Ignoring recovery information on journal
[  816.904432][T22031] 8021q: adding VLAN 0 to HW filter on device bond0
[  817.005952][T22288] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  817.057740][T22031] 8021q: adding VLAN 0 to HW filter on device team0
[  817.109983][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  817.122286][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  817.192803][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  817.202786][   T26] audit: type=1800 audit(1783054623.065:561): pid=22288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5924" name="bus" dev="loop4" ino=17058 res=0 errno=0
[  817.233469][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  817.261154][T17508] bridge0: port 1(bridge_slave_0) entered blocking state
[  817.268394][T17508] bridge0: port 1(bridge_slave_0) entered forwarding state
[  817.313157][ T4365] udevd[4365]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  817.322996][ T4359] udevd[4359]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  817.328139][T10836] udevd[10836]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  817.350862][T10834] udevd[10834]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  817.412018][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  817.449775][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  817.479631][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  817.517710][T17508] bridge0: port 2(bridge_slave_1) entered blocking state
[  817.525013][T17508] bridge0: port 2(bridge_slave_1) entered forwarding state
[  817.555796][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  817.597355][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  817.672858][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  817.739732][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  817.764677][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  817.820567][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  817.862924][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  817.885331][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  817.908478][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  817.932792][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  817.958228][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  818.010358][T22031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  818.034087][ T4281] ocfs2: Unmounting device (7,4) on (node local)
[  818.631754][ T5347] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  818.801504][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  818.810789][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  818.835129][T22031] 8021q: adding VLAN 0 to HW filter on device batadv0
[  818.842609][ T5347] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  818.850750][ T5347] usb 10-1: config 0 has no interface number 0
[  818.895126][ T5347] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  818.941890][ T5347] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  818.962053][ T5347] usb 10-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  818.992476][ T5347] usb 10-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  819.011691][ T5347] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  819.052687][ T5347] usb 10-1: config 0 descriptor??
[  819.076886][T22335] loop3: detected capacity change from 0 to 32768
[  819.194385][T22335] XFS (loop3): Mounting V5 Filesystem
[  819.305067][T22335] XFS (loop3): Ending clean mount
[  819.517101][T12135] XFS (loop3): Unmounting Filesystem
[  819.680914][ T5347] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/0003:28BD:0042.0033/input/input44
[  819.825106][ T5347] uclogic 0003:28BD:0042.0033: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.9-1/input1
[  819.921076][ T5347] usb 10-1: USB disconnect, device number 18
[  820.171150][T22381] fido_id[22381]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  820.573324][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  820.602600][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  820.640175][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  820.651120][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  820.675193][T22031] device veth0_vlan entered promiscuous mode
[  820.692996][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  820.702120][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  820.729099][T22031] device veth1_vlan entered promiscuous mode
[  820.770254][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  820.789092][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  820.809660][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  820.830152][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  820.853491][T22031] device veth0_macvtap entered promiscuous mode
[  820.881352][T22031] device veth1_macvtap entered promiscuous mode
[  820.920748][T22377] loop4: detected capacity change from 0 to 40427
[  820.934919][T22031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  820.945988][T22031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  820.966098][T22031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  820.981500][T22031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  820.997845][T22377] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  821.011219][T22377] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  821.036415][T22031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  821.052444][T22377] F2FS-fs (loop4): invalid crc value
[  821.063829][T22031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  821.080102][T22377] F2FS-fs (loop4): Found nat_bits in checkpoint
[  821.107254][T22031] batman_adv: batadv0: Interface activated: batadv_slave_0
[  821.162179][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  821.178950][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  821.200959][T22377] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  821.209003][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  821.218087][T22377] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  821.242785][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  821.267074][T22031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  821.278901][T22031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  821.299774][T22031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  821.319368][T22031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  821.334343][T22031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  821.348487][T22031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  821.359907][T22031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  821.370840][T22031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  821.383711][T22031] batman_adv: batadv0: Interface activated: batadv_slave_1
[  821.391494][T22377] syz.4.5945: attempt to access beyond end of device
[  821.391494][T22377] loop4: rw=2051, sector=36912, nr_sectors = 8152 limit=40427
[  821.423109][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  821.432138][T22377] syz.4.5945: attempt to access beyond end of device
[  821.432138][T22377] loop4: rw=2051, sector=45096, nr_sectors = 36824 limit=40427
[  821.456223][T17508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  821.516824][T22031] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  821.543479][T22399] syz.4.5945: attempt to access beyond end of device
[  821.543479][T22399] loop4: rw=2051, sector=81920, nr_sectors = 49152 limit=40427
[  821.571197][T22031] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  821.589708][T22031] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  821.600193][T22031] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  821.623289][T22377] F2FS-fs (loop4): Issue discard(4614, 4614, 1019) failed, ret: -5
[  821.623340][T22377] F2FS-fs (loop4): Issue discard(5637, 5637, 4603) failed, ret: -5
[  821.641765][T22399] F2FS-fs (loop4): Issue discard(10240, 10240, 6144) failed, ret: -5
[  821.916786][   T26] audit: type=1326 audit(1783054627.775:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22407 comm="syz.3.5949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd98b59de59 code=0x0
[  821.954804][ T4483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  821.996789][ T4483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  822.021132][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  822.089589][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  822.106694][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  822.141942][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  823.458612][T22437] input: syz0 as /devices/virtual/input/input45
[  823.862929][T22449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  825.341454][T22459] loop9: detected capacity change from 0 to 131072
[  825.378565][T22459] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0)
[  825.386844][T22459] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  825.396769][T22459] F2FS-fs (loop9): invalid crc value
[  825.527301][T22459] F2FS-fs (loop9): Found nat_bits in checkpoint
[  825.664440][T22459] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  825.672631][T22459] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  827.103329][T22511] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0
[  827.451105][T22516] loop6: detected capacity change from 0 to 128
[  827.953565][T22496] loop9: detected capacity change from 0 to 40427
[  828.048932][T22496] F2FS-fs (loop9): build fault injection attr: rate: 14, type: 0x3ffff
[  828.073387][T22496] F2FS-fs (loop9): invalid crc value
[  828.141517][T22496] F2FS-fs (loop9): Found nat_bits in checkpoint
[  828.407167][T22496] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  828.505747][T22546] loop6: detected capacity change from 0 to 128
[  828.561115][T22546] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  828.601900][T22546] hpfs: filesystem error: improperly stopped
[  828.632118][T22546] hpfs: You really don't want any checks? You are crazy...
[  828.651329][T22546] hpfs: hpfs_map_sector(): read error
[  828.689813][T22546] hpfs: code page support is disabled
[  828.727682][ T4328] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  828.733982][T22546] hpfs: hpfs_map_4sectors(): unaligned read
[  828.775520][T22546] hpfs: hpfs_map_4sectors(): unaligned read
[  828.781507][T22546] hpfs: filesystem error: unable to find root dir
[  828.943621][ T4328] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  828.969529][ T4328] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  829.024924][ T4328] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  829.099660][ T4328] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  829.140481][ T4328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.177664][ T4328] usb 5-1: Product: syz
[  829.190967][ T4328] usb 5-1: Manufacturer: syz
[  829.206533][ T4328] usb 5-1: SerialNumber: syz
[  829.246217][ T4328] hub 5-1:1.0: bad descriptor, ignoring hub
[  829.303038][ T4328] hub: probe of 5-1:1.0 failed with error -5
[  829.412126][ T5339] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  829.450434][ T4328] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  829.613816][ T5339] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  829.635482][ T5339] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  829.655967][ T5339] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  829.689354][ T5339] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  829.730341][T22560] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  829.895556][T22542] loop7: detected capacity change from 0 to 40427
[  829.939116][T22542] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504)
[  829.968331][T22542] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  829.987599][T22542] F2FS-fs (loop7): invalid crc value
[  829.996524][T22542] F2FS-fs (loop7): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  830.014221][T22542] F2FS-fs (loop7): Found nat_bits in checkpoint
[  830.026286][ T6735] usb 5-1: USB disconnect, device number 35
[  830.046618][ T6735] usblp0: removed
[  830.111106][ T6735] usb 10-1: USB disconnect, device number 19
[  830.155370][T22542] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  830.171010][T22542] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  831.667647][T22600] input: syz0 as /devices/virtual/input/input46
[  831.877334][T22603] loop7: detected capacity change from 0 to 8
[  831.958971][T22603] SQUASHFS error: Failed to read block 0x260685: -5
[  831.986988][T22603] SQUASHFS error: Unable to read metadata cache entry [260685]
[  832.001763][T22603] SQUASHFS error: Unable to read directory block [260685:0]
[  832.094187][T22587] loop4: detected capacity change from 0 to 32768
[  832.544752][T22613] loop6: detected capacity change from 0 to 512
[  833.446852][T22610] loop7: detected capacity change from 0 to 32768
[  833.487436][T22610] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 14
[  833.558076][T22622] loop6: detected capacity change from 0 to 8192
[  833.628180][T22622] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  833.662203][ T5339] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  833.880708][ T5339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  833.931357][ T5339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  833.961035][ T5339] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  834.025280][ T5339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.048699][T10834] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 14
[  834.079941][ T5339] usb 5-1: config 0 descriptor??
[  834.252576][T22636] device bridge0 entered promiscuous mode
[  834.270342][T22635] device bridge0 left promiscuous mode
[  834.528104][ T5339] logitech-djreceiver 0003:046D:C71F.0034: unknown main item tag 0x7
[  834.577827][ T5339] logitech-djreceiver 0003:046D:C71F.0034: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0
[  834.673107][T22644] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  834.682785][T22644] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  834.691555][T22644] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  834.700411][T22644] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  834.785111][ T5339] usb 5-1: USB disconnect, device number 36
[  835.017134][T22645] fido_id[22645]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  835.320905][T22655] loop6: detected capacity change from 0 to 4096
[  835.498762][T22655] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  835.577473][T22664] loop4: detected capacity change from 0 to 64
[  835.624676][   T26] audit: type=1800 audit(1783054641.485:563): pid=22655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6019" name="file2" dev="loop6" ino=31 res=0 errno=0
[  835.966706][T22671] loop6: detected capacity change from 0 to 16
[  836.023005][T22671] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  836.367452][T22677] program syz.9.6027 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  836.386311][T22679] loop4: detected capacity change from 0 to 128
[  836.467978][T22679] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  836.546085][T22679] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  836.657597][T22658] loop7: detected capacity change from 0 to 32768
[  836.896386][T22658] XFS (loop7): Mounting V5 Filesystem
[  837.177450][T22658] XFS (loop7): Ending clean mount
[  837.426292][T22031] XFS (loop7): Unmounting Filesystem
[  837.491671][ T4328] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  837.701722][ T4328] usb 10-1: Using ep0 maxpacket: 16
[  837.720158][ T4328] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  837.760277][ T4328] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  837.802300][ T4328] usb 10-1: Product: syz
[  837.806645][ T4328] usb 10-1: Manufacturer: syz
[  837.811379][ T4328] usb 10-1: SerialNumber: syz
[  838.053863][ T4328] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  838.090874][ T4328] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  838.121907][ T4328] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  838.130478][ T4328] usb 10-1: media controller created
[  838.205003][ T4328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  838.310199][ T4328] zl10353_read_register: readreg error (reg=127, ret==-71)
[  838.392351][T22727] loop7: detected capacity change from 0 to 256
[  838.428780][ T4328] dvb_usb_gl861: probe of 10-1:157.0 failed with error -5
[  838.508587][ T4328] usb 10-1: USB disconnect, device number 20
[  838.645794][T22730] loop5: detected capacity change from 0 to 7
[  838.714207][T22730] Dev loop5: unable to read RDB block 7
[  838.719968][T22730]  loop5: unable to read partition table
[  838.756874][T22730] loop5: partition table beyond EOD, truncated
[  838.809692][T22730] loop_reread_partitions: partition scan of loop5 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  839.095544][T22739] loop7: detected capacity change from 0 to 256
[  840.056891][T22773] loop4: detected capacity change from 0 to 256
[  840.520532][T22741] loop9: detected capacity change from 0 to 32768
[  840.651777][T22790] netlink: 'syz.7.6058': attribute type 2 has an invalid length.
[  840.679713][T22741] XFS (loop9): Mounting V5 Filesystem
[  840.842043][T22741] XFS (loop9): Ending clean mount
[  840.942114][T22799] program syz.7.6061 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  841.027713][T11288] XFS (loop9): Unmounting Filesystem
[  841.854076][T22816] loop7: detected capacity change from 0 to 1024
[  841.960777][T22816] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  842.236677][T22031] EXT4-fs (loop7): unmounting filesystem.
[  842.672116][T22831] loop4: detected capacity change from 0 to 4096
[  842.702632][T22831] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  843.662059][ T5339] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  843.823301][T22829] loop7: detected capacity change from 0 to 40427
[  843.853481][ T5339] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  843.873674][T22829] F2FS-fs (loop7): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  843.881436][T22829] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  843.893575][ T5339] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  843.928038][T22829] F2FS-fs (loop7): invalid crc value
[  843.946594][ T5339] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.970952][T22829] F2FS-fs (loop7): Found nat_bits in checkpoint
[  843.987339][ T5339] usb 10-1: Product: syz
[  844.001690][ T5339] usb 10-1: Manufacturer: syz
[  844.006456][ T5339] usb 10-1: SerialNumber: syz
[  844.180275][T22863] loop6: detected capacity change from 0 to 64
[  844.299914][T22829] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  844.337663][T22829] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  844.504920][ T4320] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  844.582283][T22829] syz.7.6069: attempt to access beyond end of device
[  844.582283][T22829] loop7: rw=2051, sector=36912, nr_sectors = 8152 limit=40427
[  844.657971][T22829] syz.7.6069: attempt to access beyond end of device
[  844.657971][T22829] loop7: rw=2051, sector=45096, nr_sectors = 36824 limit=40427
[  844.732437][ T4320] usb 5-1: Using ep0 maxpacket: 16
[  844.749425][ T4320] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  844.767111][T22875] syz.7.6069: attempt to access beyond end of device
[  844.767111][T22875] loop7: rw=2051, sector=81920, nr_sectors = 49152 limit=40427
[  844.810818][ T4320] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  844.839929][ T4320] usb 5-1: config 0 interface 0 has no altsetting 0
[  844.872759][ T4320] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  844.894806][ T5339] cdc_ncm 10-1:1.0: SET_NTB_FORMAT failed
[  844.931310][ T5339] cdc_ncm 10-1:1.0: bind() failure
[  844.951313][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.978806][ T5339] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found
[  845.004171][ T4320] usb 5-1: config 0 descriptor??
[  845.014552][ T5339] cdc_ncm 10-1:1.1: bind() failure
[  845.022094][T22829] F2FS-fs (loop7): Issue discard(4614, 4614, 1019) failed, ret: -5
[  845.022138][T22829] F2FS-fs (loop7): Issue discard(5637, 5637, 4603) failed, ret: -5
[  845.053850][T22875] F2FS-fs (loop7): Issue discard(10240, 10240, 6144) failed, ret: -5
[  845.077046][ T5339] usb 10-1: USB disconnect, device number 21
[  845.465856][T22885] loop6: detected capacity change from 0 to 1024
[  845.469200][ T4320] hid (null): usage index exceeded
[  845.535931][    C1] vkms_vblank_simulate: vblank timer overrun
[  845.562015][ T4320] hid (null): global environment stack underflow
[  845.570484][ T4320] hid (null): unknown global tag 0xc
[  845.592354][ T4320] hid (null): bogus close delimiter
[  845.597728][ T4320] hid (null): invalid report_count 159310733
[  845.665269][ T4320] hid (null): unknown global tag 0xd
[  845.667547][T22885] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  845.670678][ T4320] hid (null): global environment stack overflow
[  845.670719][ T4320] hid (null): unknown global tag 0xd
[  845.771966][T22885] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  845.861528][ T4320] usb 5-1: USB disconnect, device number 37
[  845.869323][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  845.886898][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  845.913032][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  845.923395][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  845.931125][   T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  845.939384][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  845.956204][T20560] bond0: (slave syz_tun): Releasing backup interface
[  846.038996][T17458] EXT4-fs (loop6): unmounting filesystem.
[  846.538463][ T1088] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  846.570995][ T1088] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  846.843502][ T1088] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  846.872251][ T1088] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  847.049094][ T1088] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  847.082166][ T1088] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  847.248765][T22933] loop4: detected capacity change from 0 to 512
[  847.273333][ T1088] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  847.284049][ T1088] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  847.311711][ T5339] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  847.336302][T22933] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  847.378016][T22933] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  847.449730][T22933] EXT4-fs (loop4): 1 truncate cleaned up
[  847.476028][T22933] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  847.503790][ T5339] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  847.542501][ T5339] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  847.631837][ T5339] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  847.639540][T22892] chnl_net:caif_netlink_parms(): no params data found
[  847.678776][ T5339] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.745855][T22927] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  847.817515][ T4281] EXT4-fs (loop4): unmounting filesystem.
[  848.004319][T22935] loop6: detected capacity change from 0 to 32768
[  848.018498][T22935] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop6 scanned by syz.6.6099 (22935)
[  848.048160][T21527] Bluetooth: hci3: command 0x0409 tx timeout
[  848.155180][T22935] BTRFS info (device loop6): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  848.185305][T22892] bridge0: port 1(bridge_slave_0) entered blocking state
[  848.194431][T22935] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  848.257303][T22892] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.318056][  T125] usb 10-1: USB disconnect, device number 22
[  848.324274][T22935] BTRFS info (device loop6): using free space tree
[  848.333802][T22892] device bridge_slave_0 entered promiscuous mode
[  848.342300][ T1088] tipc: Disabling bearer <eth:ipvlan1>
[  848.361970][ T1088] tipc: Disabling bearer <eth:ip6gre0>
[  848.407917][ T1088] tipc: Disabling bearer <eth:batadv0>
[  848.441015][T22892] bridge0: port 2(bridge_slave_1) entered blocking state
[  848.450837][ T1088] tipc: Left network mode
[  848.464127][T22892] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.485206][T22892] device bridge_slave_1 entered promiscuous mode
[  848.520474][T22892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  848.535387][T22892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  848.600651][T22892] team0: Port device team_slave_0 added
[  848.608084][T22935] BTRFS info (device loop6): enabling ssd optimizations
[  848.645367][T22892] team0: Port device team_slave_1 added
[  848.940375][T17458] BTRFS info (device loop6): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  849.900451][T22981] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6104'.
[  849.950566][T22995] loop7: detected capacity change from 0 to 4096
[  849.968457][T22995] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512)
[  849.978066][T22981] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6104'.
[  849.998257][T22892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  850.011504][T22892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  850.061187][T23001] loop4: detected capacity change from 0 to 1024
[  850.110010][T22892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  850.123468][T21527] Bluetooth: hci3: command 0x041b tx timeout
[  850.172679][T22984] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6104'.
[  850.191915][T22984] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6104'.
[  850.387328][T22892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  850.408476][T22892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  850.472815][T23004] loop9: detected capacity change from 0 to 256
[  850.512173][T22892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  850.524921][T23006] loop6: detected capacity change from 0 to 8
[  850.539129][   T26] audit: type=1800 audit(1783054656.395:564): pid=23004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6110" name="file1" dev="loop9" ino=1049078 res=0 errno=0
[  850.895837][T23018] loop6: detected capacity change from 0 to 512
[  850.958021][T23018] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  851.145839][T23018] EXT4-fs (loop6): 1 truncate cleaned up
[  851.151866][T23018] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  851.219535][T22892] device hsr_slave_0 entered promiscuous mode
[  851.288091][T17458] EXT4-fs (loop6): unmounting filesystem.
[  851.302954][T23031] program syz.7.6118 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  851.338270][T22892] device hsr_slave_1 entered promiscuous mode
[  851.459948][T22892] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  851.489356][T22892] Cannot create hsr debugfs directory
[  852.185530][T23055] loop7: detected capacity change from 0 to 512
[  852.201950][   T48] Bluetooth: hci3: command 0x040f tx timeout
[  853.230109][T23058] loop4: detected capacity change from 0 to 32768
[  853.267261][T23058] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 scanned by syz.4.6127 (23058)
[  853.411111][T23058] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  853.423188][T23058] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  853.449921][T23058] BTRFS info (device loop4): using free space tree
[  853.828902][T23058] BTRFS info (device loop4): enabling ssd optimizations
[  854.028793][ T1088] device hsr_slave_0 left promiscuous mode
[  854.039899][ T1088] device hsr_slave_1 left promiscuous mode
[  854.082275][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  854.094359][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1
[  854.144377][ T1088] bridge0: port 3(batadv0) entered disabled state
[  854.171455][ T1088] device bridge_slave_1 left promiscuous mode
[  854.196604][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[  854.209633][ T4281] BTRFS info (device loop4): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  854.257242][ T1088] device bridge_slave_0 left promiscuous mode
[  854.271842][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[  854.281909][   T48] Bluetooth: hci3: command 0x0419 tx timeout
[  854.414212][T23109] loop6: detected capacity change from 0 to 512
[  854.457912][T23109] EXT4-fs: Ignoring removed i_version option
[  854.497383][T23109] EXT4-fs: Ignoring removed nobh option
[  854.541477][T23109] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  854.727256][T23109] EXT4-fs (loop6): 1 truncate cleaned up
[  854.742051][T23109] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  854.850599][   T26] audit: type=1800 audit(1783054660.705:565): pid=23109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6138" name="bus" dev="loop6" ino=18 res=0 errno=0
[  854.942394][ T1088] device bridge0 left promiscuous mode
[  854.970334][ T1088] device veth1_macvtap left promiscuous mode
[  854.985642][ T1088] device veth0_macvtap left promiscuous mode
[  855.020643][ T1088] device veth1_vlan left promiscuous mode
[  855.031147][T17458] EXT4-fs (loop6): unmounting filesystem.
[  855.042088][ T1088] device veth0_vlan left promiscuous mode
[  855.178170][T23119] program syz.4.6142 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  855.533254][T23115] loop9: detected capacity change from 0 to 32768
[  855.630800][ T1088] team0 (unregistering): Port device bridge1 removed
[  855.654841][T23115] XFS (loop9): Mounting V5 Filesystem
[  855.671948][ T4319] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  855.773033][T23115] XFS (loop9): Ending clean mount
[  855.894024][T11288] XFS (loop9): Unmounting Filesystem
[  855.902130][ T4319] usb 5-1: Using ep0 maxpacket: 8
[  855.938874][ T4319] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  855.948634][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  856.004140][ T4319] pvrusb2: Hardware description: Terratec Grabster AV400
[  856.011337][ T4319] pvrusb2: **********
[  856.015879][ T4319] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  856.026155][ T4319] pvrusb2: Important functionality might not be entirely working.
[  856.034531][ T4319] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  856.048727][ T4319] pvrusb2: **********
[  856.214031][ T2312] pvrusb2: Invalid write control endpoint
[  856.453255][ T4319] usb 5-1: USB disconnect, device number 38
[  856.540844][ T2312] pvrusb2: Invalid write control endpoint
[  856.566757][ T2312] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  856.594231][ T2312] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  856.607005][ T2312] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  856.617579][ T2312] pvrusb2: Device being rendered inoperable
[  856.642655][ T2312] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  856.651398][ T2312] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  856.683866][ T2312] pvrusb2: Attached sub-driver cx25840
[  856.699786][ T2312] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  856.710380][ T2312] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  856.754283][  T128] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  856.992363][  T128] usb 10-1: Using ep0 maxpacket: 8
[  857.015340][  T128] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  857.027435][  T128] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  857.037084][  T128] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.056715][  T128] usb 10-1: config 0 descriptor??
[  857.084917][  T128] gspca_main: vc032x-2.14.0 probing 046d:0892
[  857.421626][ T1088] team0 (unregistering): Port device team_slave_1 removed
[  857.519428][ T1088] team0 (unregistering): Port device team_slave_0 removed
[  857.604305][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  857.694460][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  857.921189][  T128] gspca_vc032x: reg_w err -71
[  857.929350][  T128] vc032x: probe of 10-1:0.0 failed with error -71
[  857.938372][  T128] usb 10-1: USB disconnect, device number 23
[  858.415131][ T1088] team0 (unregistering): Port device bond0 removed
[  858.505047][ T1088] bond0 (unregistering): Released all slaves
[  859.375681][T23155] loop7: detected capacity change from 0 to 64
[  859.420969][ T4319] kernel write not supported for file /643/comm (pid: 4319 comm: kworker/1:4)
[  859.720515][T22892] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  859.771318][T22892] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  859.797024][T22892] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  859.911509][T22892] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  860.309530][T22892] 8021q: adding VLAN 0 to HW filter on device bond0
[  860.366836][T22114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  860.381448][T22114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  860.423077][T22892] 8021q: adding VLAN 0 to HW filter on device team0
[  860.488531][T22114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  860.513143][T22114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  860.552143][T22114] bridge0: port 1(bridge_slave_0) entered blocking state
[  860.559325][T22114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  860.629208][T22114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  860.662704][T22114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  860.682458][T22114] bridge0: port 2(bridge_slave_1) entered blocking state
[  860.689629][T22114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  860.709256][T23157] loop9: detected capacity change from 0 to 40427
[  860.743661][T23157] F2FS-fs (loop9): invalid crc value
[  860.769909][T22114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  860.788288][T23157] F2FS-fs (loop9): Found nat_bits in checkpoint
[  860.796315][T22114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  860.835876][T22114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  860.899773][T22114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  860.945958][T22114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  860.968183][T23157] F2FS-fs (loop9): Start checkpoint disabled!
[  860.981186][T22114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  861.004417][T22114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  861.047904][T22114] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  861.091152][T23157] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  861.117960][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  861.133861][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  861.192980][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  861.215402][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  861.246622][T22892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  861.464777][T23167] loop7: detected capacity change from 0 to 32768
[  861.542078][T23167] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  861.559582][ T4483] kworker/u4:8: attempt to access beyond end of device
[  861.559582][ T4483] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  861.587882][T23167] JBD2: Ignoring recovery information on journal
[  861.716330][T23167] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  861.762337][T23188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6167'.
[  861.792293][T23188] netem: invalid attributes len -19
[  861.802070][T23188] netem: change failed
[  862.427898][T23178] loop6: detected capacity change from 0 to 40427
[  862.497510][T23178] F2FS-fs (loop6): invalid crc value
[  862.502982][T22031] 
[  862.502994][T22031] ======================================================
[  862.503003][T22031] WARNING: possible circular locking dependency detected
[  862.503029][T22031] syzkaller #0 Not tainted
[  862.503042][T22031] ------------------------------------------------------
[  862.503050][T22031] syz-executor/22031 is trying to acquire lock:
[  862.503063][T22031] ffff88802a06c990 (jbd2_handle){++++}-{0:0}, at: jbd2_journal_lock_updates+0x8f/0x390
[  862.547027][T22031] 
[  862.547027][T22031] but task is already holding lock:
[  862.553796][T23178] F2FS-fs (loop6): Found nat_bits in checkpoint
[  862.554409][T22031] ffff888055312648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x43/0x60
[  862.573617][T22031] 
[  862.573617][T22031] which lock already depends on the new lock.
[  862.573617][T22031] 
[  862.584057][T22031] 
[  862.584057][T22031] the existing dependency chain (in reverse order) is:
[  862.593122][T22031] 
[  862.593122][T22031] -> #4 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}:
[  862.603706][T22031]        down_write+0x36/0x60
[  862.608430][T22031]        ocfs2_try_to_free_truncate_log+0xb1/0x370
[  862.614985][T22031]        ocfs2_reserve_clusters_with_limit+0x48a/0xc10
[  862.621991][T22031]        ocfs2_lock_allocators+0x2ce/0x5f0
[  862.627853][T22031]        ocfs2_extend_allocation+0x3fe/0x1940
[  862.633976][T22031]        ocfs2_extend_no_holes+0x206/0x4b0
[  862.639833][T22031]        ocfs2_extend_file+0x1d9/0x550
[  862.645349][T22031]        ocfs2_setattr+0xa04/0x1d90
[  862.650594][T22031]        notify_change+0xca0/0xf90
[  862.655761][T22031]        do_truncate+0x1ac/0x240
[  862.660829][T22031]        do_sys_ftruncate+0x312/0x3c0
[  862.666255][T22031]        do_syscall_64+0x4c/0xa0
[  862.671255][T22031]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  862.677730][T22031] 
[  862.677730][T22031] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  862.686644][T22031]        down_write+0x36/0x60
[  862.691372][T22031]        ocfs2_create_local_dquot+0x19a/0x1900
[  862.697675][T22031]        ocfs2_acquire_dquot+0x7e6/0xb80
[  862.703363][T22031]        dqget+0x713/0xbb0
[  862.707899][T22031]        dquot_set_dqblk+0x27/0xfb0
[  862.713142][T22031]        quota_setquota+0x4d6/0x590
[  862.718395][T22031]        __se_sys_quotactl+0x28b/0x6f0
[  862.722913][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  862.723895][T22031]        do_syscall_64+0x4c/0xa0
[  862.736194][T22031]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  862.743101][T22031] 
[  862.743101][T22031] -> #2 (&dquot->dq_lock){+.+.}-{3:3}:
[  862.746342][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  862.750777][T22031]        __mutex_lock+0x12d/0xae0
[  862.763185][T22031]        dquot_commit+0x5a/0x410
[  862.768173][T22031]        ext4_write_dquot+0x1f0/0x360
[  862.773676][T22031]        mark_all_dquot_dirty+0xf9/0x400
[  862.779361][T22031]        __dquot_free_space+0x7f8/0xbc0
[  862.784950][T22031]        ext4_free_blocks+0x1be5/0x26a0
[  862.790653][T22031]        ext4_ext_remove_space+0x22ba/0x43d0
[  862.796748][T22031]        ext4_ext_truncate+0x213/0x370
[  862.802262][T22031]        ext4_truncate+0xa5b/0x12a0
[  862.807521][T22031]        ext4_evict_inode+0xb21/0x10e0
[  862.813031][T22031]        evict+0x4b6/0x8b0
[  862.817496][T22031]        vfs_rmdir+0x374/0x4a0
[  862.822314][T22031]        do_rmdir+0x29a/0x5c0
[  862.827031][T22031]        __x64_sys_unlinkat+0xc0/0xe0
[  862.832447][T22031]        do_syscall_64+0x4c/0xa0
[  862.837449][T22031]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  862.843935][T22031] 
[  862.843935][T22031] -> #1 (&ei->i_data_sem){++++}-{3:3}:
[  862.851722][T22031]        down_read+0x42/0x2d0
[  862.856440][T22031]        ext4_map_blocks+0x338/0x1a90
[  862.858132][T22892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  862.861841][T22031]        ext4_append+0x22d/0x560
[  862.861876][T22031]        ext4_init_new_dir+0x2b8/0x550
[  862.879179][T22031]        ext4_mkdir+0x4c3/0xc90
[  862.884176][T22031]        vfs_mkdir+0x386/0x570
[  862.888986][T22031]        do_mkdirat+0x1d8/0x440
[  862.893880][T22031]        __x64_sys_mkdir+0x6a/0x80
[  862.899036][T22031]        do_syscall_64+0x4c/0xa0
[  862.904028][T22031]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  862.910500][T22031] 
[  862.910500][T22031] -> #0 (jbd2_handle){++++}-{0:0}:
[  862.917849][T22031]        __lock_acquire+0x2c92/0x7bd0
[  862.923312][T22031]        lock_acquire+0x1bb/0x4a0
[  862.928389][T22031]        jbd2_journal_lock_updates+0xa8/0x390
[  862.934521][T22031]        __ocfs2_flush_truncate_log+0x2cf/0x1220
[  862.940901][T22031]        ocfs2_flush_truncate_log+0x4b/0x60
[  862.946843][T22031]        ocfs2_sync_fs+0x119/0x330
[  862.952013][T22031]        sync_filesystem+0x1be/0x220
[  862.957468][T22031]        generic_shutdown_super+0x6b/0x340
[  862.963341][T22031]        kill_block_super+0x7c/0xe0
[  862.968594][T22031]        deactivate_locked_super+0x93/0xf0
[  862.974453][T22031]        cleanup_mnt+0x471/0x4f0
[  862.979446][T22031]        task_work_run+0x1d0/0x260
[  862.984621][T22031]        exit_to_user_mode_loop+0xe6/0x110
[  862.987390][T23178] F2FS-fs (loop6): Start checkpoint disabled!
[  862.990553][T22031]        exit_to_user_mode_prepare+0xee/0x180
[  863.002743][T22031]        syscall_exit_to_user_mode+0x16/0x40
[  863.008771][T22031]        do_syscall_64+0x58/0xa0
[  863.013766][T22031]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  863.020241][T22031] 
[  863.020241][T22031] other info that might help us debug this:
[  863.020241][T22031] 
[  863.030513][T22031] Chain exists of:
[  863.030513][T22031]   jbd2_handle --> &ocfs2_quota_ip_alloc_sem_key --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5
[  863.030513][T22031] 
[  863.047471][T22031]  Possible unsafe locking scenario:
[  863.047471][T22031] 
[  863.054968][T22031]        CPU0                    CPU1
[  863.060373][T22031]        ----                    ----
[  863.065778][T22031]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[  863.066125][T23178] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  863.073100][T22031]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  863.073121][T22031]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[  863.073144][T22031]   lock(jbd2_handle);
[  863.073158][T22031] 
[  863.073158][T22031]  *** DEADLOCK ***
[  863.073158][T22031] 
[  863.073164][T22031] 2 locks held by syz-executor/22031:
[  863.073177][T22031]  #0: ffff88805703c0e0 (&type->s_umount_key#59){++++}-{3:3}, at: deactivate_super+0xa0/0xd0
[  863.126541][T22031]  #1: ffff888055312648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x43/0x60
[  863.139761][T22031] 
[  863.139761][T22031] stack backtrace:
[  863.145687][T22031] CPU: 1 PID: 22031 Comm: syz-executor Not tainted syzkaller #0
[  863.153481][T22031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  863.163623][T22031] Call Trace:
[  863.166941][T22031]  <TASK>
[  863.169907][T22031]  dump_stack_lvl+0x188/0x24e
[  863.174640][T22031]  ? load_image+0x410/0x410
[  863.179194][T22031]  ? show_regs_print_info+0x12/0x12
[  863.184451][T22031]  ? print_circular_bug+0x12b/0x1a0
[  863.189804][T22031]  check_noncircular+0x296/0x330
[  863.194802][T22031]  ? add_chain_block+0x9b0/0x9b0
[  863.199802][T22031]  ? lockdep_lock+0xf1/0x1f0
[  863.204443][T22031]  ? mark_lock+0x94/0x320
[  863.208937][T22031]  ? _find_first_zero_bit+0xd2/0x100
[  863.214350][T22031]  __lock_acquire+0x2c92/0x7bd0
[  863.219282][T22031]  ? register_lock_class+0xc0/0x870
[  863.224538][T22031]  ? mark_lock+0x94/0x320
[  863.228920][T22031]  ? is_dynamic_key+0x260/0x260
[  863.233826][T22031]  ? __lock_acquire+0x13e3/0x7bd0
[  863.238905][T22031]  ? verify_lock_unused+0x140/0x140
[  863.244157][T22031]  ? look_up_lock_class+0x75/0x140
[  863.249321][T22031]  ? register_lock_class+0xc0/0x870
[  863.254569][T22031]  ? __lock_acquire+0x13e3/0x7bd0
[  863.259650][T22031]  ? is_dynamic_key+0x260/0x260
[  863.264559][T22031]  ? mark_lock+0x94/0x320
[  863.268945][T22031]  lock_acquire+0x1bb/0x4a0
[  863.273512][T22031]  ? jbd2_journal_lock_updates+0x8f/0x390
[  863.279288][T22031]  ? mark_lock+0x94/0x320
[  863.284115][T22031]  ? read_lock_is_recursive+0x10/0x10
[  863.289554][T22031]  ? __lock_acquire+0x13e3/0x7bd0
[  863.294674][T22031]  ? jbd2_journal_lock_updates+0x8f/0x390
[  863.300448][T22031]  jbd2_journal_lock_updates+0xa8/0x390
[  863.306047][T22031]  ? jbd2_journal_lock_updates+0x8f/0x390
[  863.311818][T22031]  ? rwsem_write_trylock+0x135/0x1c0
[  863.317167][T22031]  ? jbd2_journal_wait_updates+0x270/0x270
[  863.323040][T22031]  __ocfs2_flush_truncate_log+0x2cf/0x1220
[  863.328910][T22031]  ? ocfs2_truncate_log_needs_flush+0x300/0x300
[  863.335212][T22031]  ? ocfs2_sync_fs+0xe1/0x330
[  863.339954][T22031]  ? rwsem_write_trylock+0x135/0x1c0
[  863.345299][T22031]  ? clear_nonspinnable+0x60/0x60
[  863.350375][T22031]  ? __rwlock_init+0x140/0x140
[  863.355192][T22031]  ocfs2_flush_truncate_log+0x4b/0x60
[  863.360614][T22031]  ocfs2_sync_fs+0x119/0x330
[  863.365262][T22031]  ? ocfs2_put_super+0x230/0x230
[  863.370250][T22031]  ? writeback_inodes_sb_nr+0x30/0x30
[  863.375676][T22031]  ? get_nr_dirty_inodes+0x290/0x2c0
[  863.381024][T22031]  sync_filesystem+0x1be/0x220
[  863.385854][T22031]  generic_shutdown_super+0x6b/0x340
[  863.391189][T22031]  kill_block_super+0x7c/0xe0
[  863.395944][T22031]  deactivate_locked_super+0x93/0xf0
[  863.401278][T22031]  cleanup_mnt+0x471/0x4f0
[  863.405747][T22031]  task_work_run+0x1d0/0x260
[  863.410392][T22031]  ? task_work_cancel+0x220/0x220
[  863.415480][T22031]  ? exit_to_user_mode_loop+0x3b/0x110
[  863.421001][T22031]  exit_to_user_mode_loop+0xe6/0x110
[  863.426350][T22031]  exit_to_user_mode_prepare+0xee/0x180
[  863.431964][T22031]  syscall_exit_to_user_mode+0x16/0x40
[  863.437489][T22031]  do_syscall_64+0x58/0xa0
[  863.441959][T22031]  ? clear_bhb_loop+0x60/0xb0
[  863.446692][T22031]  ? clear_bhb_loop+0x60/0xb0
[  863.451427][T22031]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  863.457379][T22031] RIP: 0033:0x7fac0bd9f097
[  863.461844][T22031] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  863.481504][T22031] RSP: 002b:00007ffd3d96d3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  863.489967][T22031] RAX: 0000000000000000 RBX: 00007fac0be332ca RCX: 00007fac0bd9f097
[  863.498014][T22031] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3d96d4a0
[  863.506042][T22031] RBP: 00007ffd3d96d4a0 R08: 00007ffd3d96e4a0 R09: 00000000ffffffff
[  863.514060][T22031] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3d96e530
[  863.522084][T22031] R13: 00007fac0be332ca R14: 00000000000d283f R15: 00007ffd3d96e570
[  863.530206][T22031]  </TASK>
[  863.754152][ T4336] kworker/u4:6: attempt to access beyond end of device
[  863.754152][ T4336] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  863.875684][T22031] ocfs2: Unmounting device (7,7) on (node local)
[  864.101883][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  864.119772][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  864.156261][T23217] user requested TSC rate below hardware speed
[  864.165524][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  864.180814][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  864.203869][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  864.213201][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  864.223500][T22892] device veth0_vlan entered promiscuous mode
[  864.254032][T22892] device veth1_vlan entered promiscuous mode
[  864.278728][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  864.294751][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  864.305581][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  864.316378][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  864.329450][T22892] device veth0_macvtap entered promiscuous mode
[  864.340382][T22892] device veth1_macvtap entered promiscuous mode
[  864.361500][T22892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  864.374133][T22892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  864.385217][T22892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  864.397689][T22892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  864.407645][T22892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  864.420870][T22892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  864.430799][T22892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  864.443471][T22892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  864.454701][T22892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  864.463819][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  864.473715][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  864.482070][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  864.490875][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  864.502276][T22892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  864.513557][T22892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  864.523907][T22892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  864.534684][T22892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  864.544902][T22892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  864.555435][T22892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  864.565667][T22892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  864.577212][T22892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  864.588727][T22892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  864.599867][ T8271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  864.618354][ T8271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  864.630409][T22892] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  864.643372][T22892] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  864.653171][T22892] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  864.662075][T22892] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  864.699541][T22892] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht'
[  864.729673][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  864.741267][T22892] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht'
[  864.752321][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  864.760086][ T8271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  864.785252][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  864.797326][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  864.813913][T22114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  869.964529][ T1280] ieee802154 phy1 wpan1: encryption failed: -22