last executing test programs:

4m19.588506239s ago: executing program 1 (id=92):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9a}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

4m19.588406762s ago: executing program 1 (id=93):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6(0xa, 0x3, 0x2f)
getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0)

4m19.537403049s ago: executing program 1 (id=95):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f00000022c0)="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", 0x713}], 0x1}}], 0x1, 0x4000900)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

4m19.47668465s ago: executing program 1 (id=97):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRES8, @ANYRESDEC, @ANYRES64, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000180)="$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")
creat(&(0x7f00000004c0)='./bus\x00', 0xf5)
mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838)
preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b)

4m19.408112824s ago: executing program 1 (id=99):
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000ac0)="241f11c1246602040000a7e83db1af009b001000", 0x14)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private2, 0xae3e}, 0x1c)

4m19.149632879s ago: executing program 1 (id=102):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdf41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xc7}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffff9}, 0x94)

4m19.086700045s ago: executing program 32 (id=102):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdf41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xc7}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffff9}, 0x94)

3m42.055431994s ago: executing program 3 (id=658):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

3m41.927523105s ago: executing program 3 (id=661):
unshare(0x20000400)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x0, 0x0, 0x10000000000001)

3m41.927282926s ago: executing program 3 (id=663):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a0000001801000000006c2500000000002020207b1af8ff00000000bfa100000000000047010000f8ffffffb702000000002000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffef4, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m41.869053809s ago: executing program 3 (id=664):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

3m41.807280484s ago: executing program 3 (id=666):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0xf010000, 0x3, 0x6d7, r1, 0x0, &(0x7f0000000240)={0x990906, 0x3, '\x00', @value=0x589}})

3m41.504733255s ago: executing program 3 (id=670):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, r1, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080)

3m41.35724742s ago: executing program 33 (id=670):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, r1, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080)

2m43.168706495s ago: executing program 2 (id=1504):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
fsmount(r4, 0x0, 0x1)
r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85)
lseek(r5, 0x100, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7)

2m41.448740935s ago: executing program 2 (id=1513):
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$inet(0x2, 0x1, 0x6)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
inotify_init()
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000)
r4 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x3, 0x3}, &(0x7f0000000080)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}})
io_uring_enter(r4, 0x6516, 0x6d93, 0x8, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000200)={0x5, 0xffffffffffffffff, 0x30, {0xa, 0x8000000000000003}, 0xb}, 0x1)

2m41.028631433s ago: executing program 2 (id=1519):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@alg={0xe0, 0x10, 0x1, 0x72bd28, 0x25dfdbfe, {{'gcm(aes)\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)

2m41.028396781s ago: executing program 2 (id=1520):
mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56f, &(0x7f0000000b00)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1cd883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

2m40.975883564s ago: executing program 2 (id=1522):
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@random={'user.', '))@+)+.]{:\x00'}, 0x0, 0x0, 0x0)
llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

2m40.598621449s ago: executing program 2 (id=1534):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x804, &(0x7f0000000100)={[{@shortname_win95}, {@shortname_lower}, {@utf8}, {@utf8no}, {@fat=@sys_immutable}, {@rodir}, {@shortname_lower}, {@shortname_win95}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@rodir}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp860'}}]}, 0x1, 0x276, &(0x7f0000000a40)="$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")
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)

2m40.587753168s ago: executing program 34 (id=1534):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x804, &(0x7f0000000100)={[{@shortname_win95}, {@shortname_lower}, {@utf8}, {@utf8no}, {@fat=@sys_immutable}, {@rodir}, {@shortname_lower}, {@shortname_win95}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@rodir}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp860'}}]}, 0x1, 0x276, &(0x7f0000000a40)="$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")
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)

2m38.646255848s ago: executing program 0 (id=1549):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@getlink={0x28, 0x12, 0x321, 0x70bd25, 0x8000, {0x7}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0)

2m38.543527609s ago: executing program 0 (id=1551):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0)

2m38.477558709s ago: executing program 0 (id=1554):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2m38.397689896s ago: executing program 0 (id=1555):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC=0x0, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuCiJP4kw6MU1jCGRG4zmb3pn7Xt+7M2SSTW5SFL7e/hxZ1or2fuzH91bsRjumzgIA2CYXKcW3VGh6LwBAPVZ4//9R85YAgA17/ebty6eDwcFhnmcR52fj4XhY/C3yz18MDh7lv+xWs87H4+GNy/zjfP6zwyS/EzfL/JNifn6Z7kbEsBsP7xf5Se7Zq0H++/xevN9w7QAAAAAAAAAAAAAAAAAAAAAA0JS7kU8t7O+ztzef75f54mimP9Bc/55O3OmUh1V7oHRaR1EAAAAAAAAAAAAAAAAAAADwjzk++fTx3Wj04agKehExe6azYMz1Qav8xysNbj5ox3rT+2WZayzaKi/RZgvsL765qwTR+VvuzrpBXsNa/aWXN6VJsPhVMG2Lce30bkQsX/3B4bqbv0gpjb7cOzo+ibR0cPWM6NX6RAIAAAAAAAAAAAAAAAAAgP/XzLe+r8ia2BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANKD6/f9JcPXM0uA0Im7FHwdP19qJrNFaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2F4/AwAA//856SI7")
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x40)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = creat(0x0, 0x28)
close(r1)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
getpid()
pidfd_getfd(0xffffffffffffffff, r3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0)

2m38.255324156s ago: executing program 0 (id=1559):
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0)

2m37.922523202s ago: executing program 0 (id=1570):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x189, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)

2m37.857990969s ago: executing program 35 (id=1570):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x189, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c)

1m57.574791024s ago: executing program 6 (id=2256):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="18000000b0000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00}, 0x94)

1m57.514150669s ago: executing program 6 (id=2257):
getgroups(0x1, &(0x7f00000039c0)=[0x0])

1m57.513956672s ago: executing program 6 (id=2258):
io_setup(0x2278, &(0x7f0000000180)=<r0=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
io_submit(r0, 0x2, &(0x7f0000000080)=[&(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f00000000c0)='m', 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x3, 0x2, r1, 0x0, 0x0, 0xfbd}])
syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m57.24779819s ago: executing program 6 (id=2260):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r2})

1m57.208973867s ago: executing program 6 (id=2262):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mkdirat(r0, &(0x7f00000002c0)='./file1\x00', 0x42)
mount$bind(&(0x7f0000000540)='./file1\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x5040, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

1m57.145339319s ago: executing program 6 (id=2263):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r2, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x40000)

1m42.179108718s ago: executing program 36 (id=2263):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r2, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x40000)

40.210980301s ago: executing program 7 (id=3411):
r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0205647, &(0x7f00000000c0)={0xf010000, 0x0, "bf5dff0f251ed700f61765c214525a2572ce1ced49e8981e103268fadc1433ae", 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff})

40.210562861s ago: executing program 7 (id=3413):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000300)=@newqdisc={0x64, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}, @TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x3}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}]}}]}, 0x64}}, 0x2000400c)

40.101248336s ago: executing program 7 (id=3415):
arch_prctl$ARCH_SHSTK_DISABLE(0x5003, 0x1)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1)

40.100743952s ago: executing program 7 (id=3417):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

40.041320095s ago: executing program 7 (id=3418):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0x6, @remote, 0x2}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0xfa9, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x9}], 0x2c)

39.490448605s ago: executing program 7 (id=3424):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000)
fsetxattr$security_capability(r1, &(0x7f0000000200), 0x0, 0x0, 0x0)

39.448176807s ago: executing program 37 (id=3424):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000)
fsetxattr$security_capability(r1, &(0x7f0000000200), 0x0, 0x0, 0x0)

1.440475628s ago: executing program 8 (id=4093):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94)

1.379050969s ago: executing program 8 (id=4095):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10)

1.308773934s ago: executing program 8 (id=4097):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0)

1.245645644s ago: executing program 8 (id=4101):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0)

1.160530903s ago: executing program 8 (id=4104):
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000002980)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x272, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x20, 0x80, "", [{{0x9, 0x4, 0x0, 0x23, 0x1, 0x3, 0x1, 0x2, 0x34, {0x9, 0x21, 0x4ea2, 0xc, 0x1, {0x22, 0xbe0}}, {{{0x9, 0x5, 0x81, 0x3, 0x60, 0x15, 0x80}}}}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})

989.126463ms ago: executing program 4 (id=4109):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000000000090000000006001500040000001400168004000880"], 0x38}}, 0x0)

899.998033ms ago: executing program 4 (id=4110):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xafe6)

899.769615ms ago: executing program 4 (id=4111):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x10}}, 0x1c}}, 0x0)

829.546714ms ago: executing program 4 (id=4112):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x48080, 0x0)
socket(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0))
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

320.486117ms ago: executing program 4 (id=4115):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
futex(&(0x7f000000cffc), 0xa, 0x4, 0x0, 0x0, 0x4)

320.324817ms ago: executing program 5 (id=4116):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x8000)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x1, 0x9, 0x200, "a6b4adc9640830a47a6171d8349d96b8255d154c76f65f0f521583d6af8fa3f6", 0x3631564e})

316.728336ms ago: executing program 4 (id=4117):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001600)=0x2, 0x4)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)

250.960992ms ago: executing program 5 (id=4118):
r0 = socket(0xa, 0x3, 0x87)
sendmmsg$unix(r0, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x1b, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000180)='\x00\x00\x00.', 0x4}], 0x2, 0x0, 0x0, 0x200080d5}}], 0x1, 0x40000a0)

250.757747ms ago: executing program 5 (id=4119):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000014c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x41}}]}, 0x1, 0x469, &(0x7f0000001980)="$eJzs3MtvVFUYAPDv3r54tyo+QNAqJhIfLS3PhRuMJi40MdEFxlVtC0EGqrQmQkhAF7g0JO6NSxP/Ale6MerKxMSV7g0JMWxEE5Mx9869nXE6Uzt0YID5/ZIL58w9wznfnHPmPs5cAuhb49kfScSWiPg1IjbUsv8tMF7768b1C7N/Xb8wm0S1+sYfSV7uz+sXZsui5fs21zLVapEfaVHv5bcjZiqV+bNFfnLp9HuTi+fOP3/y9MyJ+RPzZ6aPHDmwf/fwoemDXYlzNGvrSCzs2vHKW1demz125Z0fvsrau6XY3xhHt4zXPt2VBrpdU+9tbUgngz1sCB3JhmLWXUP5/B+Ngdi4vG80Xv64p40DbqlqtVptdXwuXKoC97Aket0CoDfKA312/Vtut+nU445w7WjE+4dr8d8ottqewUiLMkNN17fdNB4Rxy79/Xm2xS26DwEA0OiboxHxXKvzvzQeaii3rVhDGYuI+yLi/oh4ICK2R8SDEXnZhyPikQ7rb14hWXn+k169qcDWKDv/e6FY21o+//unmsdfGBsoclvz+IeS4ycr8/uKz2RvDI1k+alV6vj2pZ8/bbev8fwv27L6y3PBmvTqYNMNurmZpZl1hr3s2kcROweb4s8lUS7jJBGxIyJ2dvQv168wTj7z5a52perxb4yIVvGvogvrTNUvIp6u9f+laIq/lLRdn5w6fGj64OSGqMzvmyxHxUo//nT59Xb1/3//31pZ/29qHv/13ruYDflkQ8TiufOn8vXaxc7ruPzbJy2vaTatY/wPJ2/m6eHitQ9nlpbOTkUMJ6+ufH26/t4yX5bP4t+7p9X4T/PvuCj6/9GIyAbx7oh4LCIeL9r+REQ8GRF7Von/+xeferfdvvbxr3JXvouy+Oda9H/D+B/LUvX+7zwxcOq7rzuPv5T1/4E8tbd4ZS3ff2tt4Ho+OwAAALhbpPlv4JN0YjmdphMTtd/wb49NaWVhcenZ4wsfnJmr/VZ+LIbS8k7XaMP90Kni3nCZn27K7y/uG382sDHPT8wuVOZ6HTz0uc1t5n/m93vwORWgiee1oH+Z/9C/zH/oX/X5f6in7QBuP8d/6F+t5v/FHrQDuP0c/6F/mf/Qv8x/6F/mP/Slts/Gp+t65P+uTfyy7Y5oxl2QiLTzdw1GL9s83NPabzoxuOb/zOImEyMtd/X6mwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA7/g0AAP//hh/x1w==")
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

155.56792ms ago: executing program 5 (id=4120):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0612", @ANYRESHEX=0x0], 0x9)

310.68µs ago: executing program 5 (id=4121):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)

128.767µs ago: executing program 5 (id=4122):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

0s ago: executing program 8 (id=4123):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0xe904, 0x4)

kernel console output (not intermixed with test programs):

xceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  194.654937][T11463] netlink: 'syz.5.2224': attribute type 1 has an invalid length.
[  194.657652][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2224'.
[  194.932294][T11485] program syz.5.2234 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  195.304971][T11501] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  195.337478][T11503] loop5: detected capacity change from 0 to 256
[  195.368861][T11505] loop4: detected capacity change from 0 to 1024
[  195.373822][T11505] EXT4-fs: Ignoring removed oldalloc option
[  195.381127][T11505] EXT4-fs: Invalid want_extra_isize 130
[  195.411800][T11507] loop5: detected capacity change from 0 to 2048
[  195.430912][T11507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  195.436880][T11509] tipc: Failed to remove unknown binding: 66,0,0/4278321153:2680674839/2680674840
[  195.449476][T11509] tipc: Failed to remove unknown binding: 66,0,0/4278321153:2680674839/2680674840
[  195.475815][T11512] netlink: 'syz.4.2245': attribute type 10 has an invalid length.
[  195.485469][T11512] 8021q: adding VLAN 0 to HW filter on device team0
[  195.487158][ T9734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.502193][T11512] bond0: (slave team0): Enslaving as an active interface with an up link
[  195.663383][T11516] loop4: detected capacity change from 0 to 1024
[  196.082153][T11528] loop6: detected capacity change from 0 to 256
[  196.375856][  T797] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  196.525856][  T797] usb 5-1: Using ep0 maxpacket: 8
[  196.533868][  T797] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.552820][  T797] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  196.562691][  T797] usb 5-1: config 0 interface 0 has no altsetting 0
[  196.575867][  T797] usb 5-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00
[  196.593724][  T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.604826][  T797] usb 5-1: config 0 descriptor??
[  196.654376][T11557] xt_hashlimit: invalid interval
[  196.681026][T11559] netlink: 'syz.5.2267': attribute type 4 has an invalid length.
[  196.683691][T11559] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2267'.
[  196.699002][T11559] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  197.046345][  T797] hid_mf 0003:0079:1803.000A: item fetching failed at offset 7/9
[  197.049244][  T797] hid_mf 0003:0079:1803.000A: HID parse failed.
[  197.051512][  T797] hid_mf 0003:0079:1803.000A: probe with driver hid_mf failed with error -22
[  197.249813][ T5684] usb 5-1: USB disconnect, device number 14
[  197.476025][ T7606] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  197.626909][ T7606] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 57, changing to 9
[  197.631313][ T7606] usb 6-1: config 0 interface 0 has no altsetting 0
[  197.633438][ T7606] usb 6-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  197.636699][ T7606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.641097][ T7606] usb 6-1: config 0 descriptor??
[  197.910738][T11580] netlink: 'syz.4.2277': attribute type 2 has an invalid length.
[  197.940981][T11580] : entered promiscuous mode
[  198.057243][ T7606] hid-rmi 0003:1532:011D.000B: unknown main item tag 0x1
[  198.061855][ T7606] hid-rmi 0003:1532:011D.000B: unknown main item tag 0x5
[  198.064146][ T7606] hid-rmi 0003:1532:011D.000B: unknown main item tag 0x6
[  198.066710][ T7606] hid-rmi 0003:1532:011D.000B: unknown main item tag 0x0
[  198.068938][ T7606] hid-rmi 0003:1532:011D.000B: unknown main item tag 0x0
[  198.071103][ T7606] hid-rmi 0003:1532:011D.000B: unknown main item tag 0x0
[  198.073270][ T7606] hid-rmi 0003:1532:011D.000B: unknown main item tag 0x0
[  198.078423][ T7606] hid-rmi 0003:1532:011D.000B: unknown main item tag 0x0
[  198.081236][ T7606] hid-rmi 0003:1532:011D.000B: unknown main item tag 0x0
[  198.084572][ T7606] hid-rmi 0003:1532:011D.000B: unknown main item tag 0x0
[  198.094476][ T7606] hid-rmi 0003:1532:011D.000B: hidraw0: USB HID v0.c1 Device [HID 1532:011d] on usb-dummy_hcd.5-1/input0
[  198.261999][ T7606] usb 6-1: USB disconnect, device number 11
[  198.790542][T11586] loop5: detected capacity change from 0 to 16
[  198.797552][T11586] erofs (device loop5): mounted with root inode @ nid 36.
[  198.851583][T11588] no more MTRRs available
[  200.154176][ T7606] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  200.303875][ T7606] usb 5-1: Using ep0 maxpacket: 32
[  200.308100][ T7606] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  200.311498][ T7606] usb 5-1: config 0 has no interface number 0
[  200.313727][ T7606] usb 5-1: config 0 interface 184 has no altsetting 0
[  200.318813][ T7606] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  200.321793][ T7606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.324381][ T7606] usb 5-1: Product: syz
[  200.325756][ T7606] usb 5-1: Manufacturer: syz
[  200.327322][ T7606] usb 5-1: SerialNumber: syz
[  200.332419][ T7606] usb 5-1: config 0 descriptor??
[  200.692083][T11624] bridge_slave_0: left allmulticast mode
[  200.694111][T11624] bridge_slave_0: left promiscuous mode
[  200.696162][T11624] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.702118][T11624] bridge_slave_1: left allmulticast mode
[  200.705400][T11624] bridge_slave_1: left promiscuous mode
[  200.707496][T11624] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.714902][T11624] bond0: (slave bond_slave_0): Releasing backup interface
[  200.719849][T11624] bond0: (slave bond_slave_1): Releasing backup interface
[  200.726253][T11624] team0: Port device team_slave_0 removed
[  200.729424][T11624] team0: Port device team_slave_1 removed
[  200.731473][T11624] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.734872][T11624] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.737603][T11624] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  200.756338][T11624] team0: Port device xfrm0 added
[  200.760858][T11624] tipc: Started in network mode
[  200.762513][T11624] tipc: Node identity 3ec37af21f23, cluster identity 4711
[  200.767235][T11624] tipc: Enabled bearer <eth:team0>, priority 0
[  201.460902][ T7606] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  201.557196][ T7606] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  201.560522][ T7606] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  201.563635][ T7606] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  201.566869][ T7606] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  201.569915][ T7606] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  201.574343][ T7606] usb 5-1: USB disconnect, device number 15
[  201.883198][ T7606] tipc: Node number set to 568359666
[  202.133809][T11642] loop5: detected capacity change from 0 to 32768
[  202.150266][T11642] ERROR: (device loop5): dbAllocAG: unable to allocate blocks
[  202.150266][T11642] 
[  202.296514][T11658] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2309'.
[  202.329968][T11660] loop4: detected capacity change from 0 to 1024
[  202.357906][T11660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.433406][ T7450] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.513367][ T7606] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  202.885970][ T7606] usb 6-1: Using ep0 maxpacket: 8
[  202.889393][ T7606] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  202.892568][ T7606] usb 6-1: config 179 has no interface number 0
[  202.894892][ T7606] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  202.898418][ T7606] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  202.901956][ T7606] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  202.905439][ T7606] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  202.909241][ T7606] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  202.914059][ T7606] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  202.916771][ T7606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.921108][T11655] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  203.354600][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  203.357653][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  203.360839][   T10] usb 6-1: USB disconnect, device number 12
[  204.665782][T11700] loop5: detected capacity change from 0 to 1024
[  204.668524][T11700] EXT4-fs: Ignoring removed nomblk_io_submit option
[  204.686963][T11700] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102]
[  204.690021][T11700] System zones: 0-1, 3-12
[  204.695615][T11700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.780799][ T9734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.859364][T11704] loop5: detected capacity change from 0 to 512
[  204.870394][T11704] EXT4-fs (loop5): Test dummy encryption mode enabled
[  204.899786][T11704] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.2326: corrupted xattr block 95: invalid header
[  204.904971][T11704] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  204.910876][T11704] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2326: bg 0: block 7: invalid block bitmap
[  204.914095][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  204.914125][    C1] EXT4-fs (loop5): initial error at time 2000000025: ext4_expand_extra_isize_ea:2810: inode 11
[  204.914138][    C1] EXT4-fs (loop5): last error at time 2000000025: ext4_expand_extra_isize_ea:2810: inode 11
[  204.928260][T11704] loop5: lost filesystem error report for type 5 error -117
[  204.928603][T11704] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  204.935954][T11704] loop5: lost filesystem error report for type 5 error -117
[  204.936193][T11704] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.2326: corrupted xattr block 95: invalid header
[  204.944712][T11704] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  204.944945][T11704] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117)
[  204.950630][T11704] EXT4-fs (loop5): 1 orphan inode deleted
[  204.953590][T11704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.974066][T11704] EXT4-fs: Cannot specify journal on remount
[  205.002583][ T9734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.399436][T11722] loop5: detected capacity change from 0 to 128
[  205.404141][T11722] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  205.410478][T11722] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  205.731182][   T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  205.811236][ T5684] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  205.883082][   T10] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  205.886956][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.892464][   T10] usb 5-1: config 0 descriptor??
[  205.897420][   T10] gspca_main: cpia1-2.14.0 probing 0813:0001
[  205.961114][ T5684] usb 6-1: Using ep0 maxpacket: 32
[  205.964582][ T5684] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  205.968168][ T5684] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  205.971602][ T5684] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  205.974936][ T5684] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  205.979842][ T5684] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  205.982875][ T5684] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.985640][ T5684] usb 6-1: Product: syz
[  205.986997][ T5684] usb 6-1: Manufacturer: syz
[  205.988482][ T5684] usb 6-1: SerialNumber: syz
[  205.992031][ T5684] usb 6-1: config 0 descriptor??
[  206.205626][ T5684] usb 6-1: USB disconnect, device number 13
[  206.502829][   T10] gspca_cpia1: usb_control_msg 01, error -71
[  206.505965][   T10] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0)
[  206.509995][   T10] usb 5-1: USB disconnect, device number 16
[  207.030504][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.032962][    C0] bridge0: topology change detected, propagating
[  207.035200][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.037412][    C0] bridge0: topology change detected, propagating
[  207.090467][  T797] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  207.250587][  T797] usb 6-1: Using ep0 maxpacket: 32
[  207.256415][  T797] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.270261][  T797] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  207.280239][  T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.290006][  T797] usb 6-1: Product: syz
[  207.293121][  T797] usb 6-1: Manufacturer: syz
[  207.295725][  T797] usb 6-1: SerialNumber: syz
[  207.302562][  T797] usb 6-1: config 0 descriptor??
[  207.311732][  T797] cdc_ether 6-1:0.0: skipping garbage
[  207.314078][  T797] usb 6-1: No union descriptors
[  207.316858][  T797] usb 6-1: unsupported MDLM descriptors
[  207.514188][  T797] usb 6-1: USB disconnect, device number 14
[  207.579079][T11775] loop4: detected capacity change from 0 to 16
[  207.582525][T11775] erofs (device loop4): mounted with root inode @ nid 36.
[  207.588201][T11775] syz.4.2358: attempt to access beyond end of device
[  207.588201][T11775] loop4: rw=8388608, sector=34225530872, nr_sectors = 8 limit=16
[  207.745317][T11781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2361'.
[  207.749256][T11781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2361'.
[  208.106407][T11806] netlink: 'syz.5.2373': attribute type 5 has an invalid length.
[  208.132040][T11810] loop4: detected capacity change from 0 to 128
[  208.146786][T11810] zonefs (loop4) ERROR: Not a zoned block device
[  208.239294][ T5619] Bluetooth: hci0: link tx timeout
[  208.242054][ T5619] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  208.302410][T11819] loop4: detected capacity change from 0 to 512
[  208.781927][  T797] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  208.824357][T11849] loop4: detected capacity change from 0 to 128
[  208.834771][T11849] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  208.940106][  T797] usb 6-1: Using ep0 maxpacket: 16
[  208.943195][  T797] usb 6-1: config 0 has an invalid interface number: 49 but max is 0
[  208.945750][  T797] usb 6-1: config 0 has no interface number 0
[  208.947687][  T797] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  208.952325][  T797] usb 6-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.956104][  T797] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  208.961840][  T797] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  208.964714][  T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.967824][  T797] usb 6-1: Product: syz
[  208.969259][  T797] usb 6-1: Manufacturer: syz
[  208.971206][  T797] usb 6-1: SerialNumber: syz
[  208.977450][  T797] usb 6-1: config 0 descriptor??
[  208.980177][T11831] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  209.089138][T11851] loop4: detected capacity change from 0 to 40427
[  209.092434][T11851] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  209.094881][T11851] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  209.098272][T11851] F2FS-fs (loop4): invalid crc value
[  209.148801][T11851] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  209.162518][T11851] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  209.164808][T11851] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  209.193163][  T797] usb 6-1: USB disconnect, device number 15
[  209.826844][T11869] loop5: detected capacity change from 0 to 1024
[  209.829928][  T996] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  209.852828][T11869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  209.856840][T11869] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.880854][ T9734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  210.002191][  T996] usb 5-1: config index 0 descriptor too short (expected 1372, got 92)
[  210.005249][  T996] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.010326][  T996] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.013280][  T996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.016183][  T996] usb 5-1: Product: syz
[  210.017726][  T996] usb 5-1: Manufacturer: syz
[  210.019568][  T996] usb 5-1: SerialNumber: syz
[  210.309033][ T5626] Bluetooth: hci0: command 0x0406 tx timeout
[  211.003878][T11889] loop5: detected capacity change from 0 to 1764
[  211.024998][ T9734] iso9660: Corrupted directory entry in block 2 of inode 1920
[  211.032030][  T996] cdc_ncm 5-1:1.0: bind() failure
[  211.035893][ T9734] iso9660: Corrupted directory entry in block 2 of inode 1920
[  211.051266][  T996] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  211.054244][  T996] cdc_ncm 5-1:1.1: bind() failure
[  211.061561][  T996] usb 5-1: USB disconnect, device number 17
[  211.598873][   T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  211.763608][   T24] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  211.777593][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.781309][   T24] usb 6-1: Product: syz
[  211.783135][   T24] usb 6-1: Manufacturer: syz
[  211.786368][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  211.788464][   T24] usb 6-1: SerialNumber: syz
[  211.798826][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  211.803127][   T24] usb 6-1: config 0 descriptor??
[  211.804438][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  211.810731][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  211.813546][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  211.847140][   T24] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  211.981892][T11908] loop4: detected capacity change from 0 to 32768
[  211.987540][T11908] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  211.987540][T11908] 
[  211.995749][T11908] xtLookup: xtSearch returned -5
[  212.003958][T11908] read_mapping_page failed!
[  212.006853][T11908] jfs_mount: diMount failed w/rc = -5
[  212.011190][T11908] Mount JFS Failure: -5
[  212.014148][T11908] jfs_mount failed w/return code = -5
[  212.155330][ T5676] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.260946][ T5676] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.272531][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2419'.
[  212.376634][ T5676] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.386947][T11909] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.390235][T11909] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.393151][T11909] bridge_slave_0: entered allmulticast mode
[  212.396683][T11909] bridge_slave_0: entered promiscuous mode
[  212.402802][T11909] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.407224][T11909] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.409610][T11909] bridge_slave_1: entered allmulticast mode
[  212.412300][T11909] bridge_slave_1: entered promiscuous mode
[  212.438461][T11909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.449551][T11909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  212.477402][ T5676] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.506991][T11909] team0: Port device team_slave_0 added
[  212.510494][T11909] team0: Port device team_slave_1 added
[  212.530298][T11909] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.532655][T11909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  212.547502][T11909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.553780][T11909] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.555968][T11909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  212.564032][T11909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.602359][T11909] hsr_slave_0: entered promiscuous mode
[  212.604667][T11909] hsr_slave_1: entered promiscuous mode
[  212.608682][T11909] debugfs: 'hsr0' already exists in 'hsr'
[  212.610496][T11909] Cannot create hsr debugfs directory
[  212.778593][ T5676] bridge_slave_1: left allmulticast mode
[  212.784754][ T5676] bridge_slave_1: left promiscuous mode
[  212.786709][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.800233][ T5676] bridge_slave_0: left allmulticast mode
[  212.803259][ T5676] bridge_slave_0: left promiscuous mode
[  212.807274][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.907312][T11952] loop4: detected capacity change from 0 to 128
[  212.926403][T11952] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  212.961539][ T1115] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  212.979747][T11952] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  213.024507][ T5676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  213.029484][   T24] gspca_sunplus: reg_w_riv err -71
[  213.033091][   T24] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  213.041499][ T5676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.043397][   T24] usb 6-1: USB disconnect, device number 16
[  213.051957][ T5676] bond0 (unregistering): Released all slaves
[  213.337731][ T5355] 8021q: adding VLAN 0 to HW filter on device eth13
[  213.367812][T11970] netlink: 'syz.4.2437': attribute type 1 has an invalid length.
[  213.373880][T11970] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2437'.
[  213.385765][T11909] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  213.407031][T11909] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  213.410612][T11909] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  213.414486][T11909] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  213.417708][T11909] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  213.422591][T11909] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  213.430731][T11909] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  213.434752][T11909] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  213.443618][ T5676] hsr_slave_0: left promiscuous mode
[  213.450573][ T5676] hsr_slave_1: left promiscuous mode
[  213.455919][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.465556][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.472367][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.476500][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.490546][ T5676] veth1_macvtap: left promiscuous mode
[  213.492378][ T5676] veth0_macvtap: left promiscuous mode
[  213.494201][ T5676] veth1_vlan: left promiscuous mode
[  213.495827][ T5676] veth0_vlan: left promiscuous mode
[  213.681595][ T5676] team0 (unregistering): Port device team_slave_1 removed
[  213.690559][ T5676] team0 (unregistering): Port device team_slave_0 removed
[  213.762157][ T5355] 8021q: adding VLAN 0 to HW filter on device eth14
[  213.859885][T11909] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.863024][  T996] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  213.874067][T11909] 8021q: adding VLAN 0 to HW filter on device team0
[  213.886725][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.889320][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.905234][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.907509][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.987269][ T5619] Bluetooth: hci3: command tx timeout
[  214.021229][  T996] usb 6-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=a6.78
[  214.025743][  T996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.037260][  T996] usb 6-1: Product: syz
[  214.040184][  T996] usb 6-1: Manufacturer: syz
[  214.042723][  T996] usb 6-1: SerialNumber: syz
[  214.046627][  T996] usb 6-1: config 0 descriptor??
[  214.049098][ T5355] 8021q: adding VLAN 0 to HW filter on device eth15
[  214.051616][  T996] cytherm 6-1:0.0: Cypress thermometer device now attached
[  214.194167][T11909] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.206536][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2444'.
[  214.266547][  T996] usb 6-1: USB disconnect, device number 17
[  214.274942][  T996] cytherm 6-1:0.0: Cypress thermometer now disconnected
[  214.281207][ T5355] 8021q: adding VLAN 0 to HW filter on device eth16
[  214.401966][T11909] veth0_vlan: entered promiscuous mode
[  214.417767][T11909] veth1_vlan: entered promiscuous mode
[  214.440716][T11909] veth0_macvtap: entered promiscuous mode
[  214.445053][T11909] veth1_macvtap: entered promiscuous mode
[  214.454220][T11909] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.460829][T11909] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.468441][ T5676] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.476828][ T5676] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.482063][ T5676] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.485826][ T5676] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.607903][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.614720][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.635811][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.639173][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.734616][T12045] loop7: detected capacity change from 0 to 8192
[  214.763022][   T33] audit: type=1800 audit(2000000035.690:85): pid=12045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2450" name="bus" dev="loop7" ino=1048704 res=0 errno=0
[  214.883969][T12050] loop7: detected capacity change from 0 to 2048
[  214.893277][T12050] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  214.901557][T12052] netlink: 'syz.5.2453': attribute type 1 has an invalid length.
[  214.957183][T12049] UDF-fs: warning (device loop7): udf_truncate_tail_extent: Too long extent after EOF in inode 1347: i_size: 36864 lbcount: 40960 extent 65+7680
[  215.084189][T12065] loop5: detected capacity change from 0 to 512
[  215.156708][T12065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.160704][T12065] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.245590][ T9734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.742238][T12089] loop5: detected capacity change from 0 to 2048
[  215.753291][T12089] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  215.769146][T12090] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  215.769287][T12089] syz.5.2468: attempt to access beyond end of device
[  215.769287][T12089] loop5: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  215.903330][T12094] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2470'.
[  216.066367][ T5619] Bluetooth: hci3: command tx timeout
[  216.180504][T12117] loop7: detected capacity change from 0 to 256
[  216.380114][T12128] loop7: detected capacity change from 0 to 512
[  216.389010][T12128] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  216.401639][T12128] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it
[  216.404753][T12128] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2485: Corrupt directory, running e2fsck is recommended
[  216.420937][T12128] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  216.423679][T12128] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.2485: corrupted in-inode xattr: invalid ea_ino
[  216.428063][T12128] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  216.428318][T12128] EXT4-fs (loop7): Remounting filesystem read-only
[  216.434250][T12128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.471895][T11909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.548170][T12139] typec_fusb302 0-0022: supply vbus not found, using dummy regulator
[  216.636528][T12139] typec_fusb302 0-0022: failed to request gpio_int_n
[  216.704207][T12139] typec_fusb302 0-0022: probe with driver typec_fusb302 failed with error -2
[  216.713380][T12161] loop7: detected capacity change from 0 to 4096
[  216.723209][T12161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.762944][T12139] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22
[  217.270520][T11909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.391812][T12189] syzkaller0: entered promiscuous mode
[  217.393714][T12189] syzkaller0: entered allmulticast mode
[  218.243792][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2515'.
[  218.264388][T12199] bond1: option broadcast_neighbor: invalid value (30)
[  218.273267][T12199] bond1 (unregistering): Released all slaves
[  218.718496][ T5619] Bluetooth: hci3: command tx timeout
[  218.718680][T12208] loop5: detected capacity change from 0 to 4096
[  218.751841][T12208] EXT4-fs: inline encryption not supported
[  218.826337][T12208] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  218.840927][T12208] EXT4-fs (loop5): Test dummy encryption mode enabled
[  218.849155][T12208] EXT4-fs (loop5): Unsupported encryption level 6
[  219.083213][T12232] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  219.088227][T12232] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  219.275472][   T33] audit: type=1326 audit(2000065832.254:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12233 comm="syz.4.2531" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd357b9e019 code=0x0
[  219.511061][T12244] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2535'.
[  219.820648][T12250] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2537'.
[  219.823510][T12250] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2537'.
[  219.831948][T12250] geneve0: entered promiscuous mode
[  220.016465][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2540'.
[  220.019833][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2540'.
[  220.206197][  T797] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  220.357629][  T797] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[  220.360442][  T797] usb 6-1: config 0 has no interface number 0
[  220.364258][  T797] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  220.367376][  T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.370203][  T797] usb 6-1: Product: syz
[  220.371574][  T797] usb 6-1: Manufacturer: syz
[  220.373236][  T797] usb 6-1: SerialNumber: syz
[  220.377913][  T797] usb 6-1: config 0 descriptor??
[  220.944873][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2544'.
[  221.254671][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2552'.
[  221.266702][  T797] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  221.274406][  T797] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  221.287162][  T797] asix 6-1:0.251: probe with driver asix failed with error -71
[  221.295869][  T797] usb 6-1: USB disconnect, device number 18
[  221.692321][T12300] netlink: 'syz.4.2559': attribute type 1 has an invalid length.
[  221.705522][T12300] 8021q: adding VLAN 0 to HW filter on device bond2
[  221.725678][T12300] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[  221.753791][T12300] bond2: (slave dummy0): Enslaving as a backup interface with an up link
[  221.818770][ T8379] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  221.842867][T12305] loop5: detected capacity change from 0 to 512
[  221.855542][T12305] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  221.884227][T12305] EXT4-fs (loop5): 1 truncate cleaned up
[  221.889114][T12305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.980497][ T8379] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  222.017894][ T9734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.625900][T12327] loop5: detected capacity change from 0 to 40427
[  222.634896][T12327] F2FS-fs (loop5): Wrong SSA boundary, start(3584) end(4096) blocks(1024)
[  222.640939][T12327] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  222.646248][T12327] F2FS-fs (loop5): Image doesn't support compression
[  222.649061][T12327] F2FS-fs (loop5): build fault injection rate: 15
[  222.651468][T12327] F2FS-fs (loop5): build fault injection type: 0xe
[  222.654526][T12327] F2FS-fs (loop5): invalid crc value
[  222.659061][T12327] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of build_sit_entries+0x259/0x1ba0
[  222.662644][T12327] F2FS-fs (loop5): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4971/0x77f0
[  222.665573][T12327] F2FS-fs (loop5): Failed to initialize F2FS node manager (-12)
[  222.752329][T12340] loop7: detected capacity change from 0 to 764
[  223.326224][T12353] netlink: 'syz.4.2581': attribute type 1 has an invalid length.
[  223.404336][T12359] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  223.451569][T12361] fuse: Bad value for 'fd'
[  223.552248][T12367] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2588'.
[  225.056668][ T5701] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  225.207472][ T5701] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.212470][ T5701] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f
[  225.215262][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.218471][ T5701] usb 6-1: Product: syz
[  225.219827][ T5701] usb 6-1: Manufacturer: syz
[  225.221342][ T5701] usb 6-1: SerialNumber: syz
[  225.224033][ T5701] usb 6-1: config 0 descriptor??
[  225.227736][ T5701] redrat3 6-1:0.0: Couldn't find all endpoints
[  225.435687][    T9] usb 6-1: USB disconnect, device number 19
[  225.945704][T12444] loop7: detected capacity change from 0 to 1024
[  226.488676][T12482] xt_l2tp: missing protocol rule (udp|l2tpip)
[  226.575116][T12489] xt_time: unknown flags 0xc
[  226.899779][T12514] fuse: Bad value for 'fd'
[  227.278317][T12521] loop5: detected capacity change from 0 to 8192
[  227.285835][T12521] vfat filesystem being mounted at /339/bus supports timestamps until 2107-12-31 (0x10391447e)
[  227.606119][  T996] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  227.762591][  T996] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  227.767263][  T996] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  227.773387][  T996] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  227.779148][  T996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  227.782330][  T996] usb 6-1: SerialNumber: syz
[  227.789921][  T996] cdc_ether 6-1:1.0: missing cdc ether descriptor
[  228.046640][  T996] usb 6-1: USB disconnect, device number 20
[  229.059083][T12538] loop5: detected capacity change from 0 to 512
[  229.062721][T12538] EXT4-fs: Ignoring removed nobh option
[  229.066656][T12538] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  229.075801][T12538] EXT4-fs (loop5): 1 truncate cleaned up
[  229.085292][T12538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.110974][ T9734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.258586][T12542] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  229.260786][T12542] overlayfs: failed to set xattr on upper
[  229.262510][T12542] overlayfs: ...falling back to redirect_dir=nofollow.
[  229.264540][T12542] overlayfs: ...falling back to index=off.
[  229.267135][T12542] overlayfs: ...falling back to uuid=null.
[  229.273210][T12542] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  229.345701][T12545] loop5: detected capacity change from 0 to 2048
[  229.375749][T12545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.398501][ T9734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.669191][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2662'.
[  229.701006][T12556] loop5: detected capacity change from 0 to 32768
[  229.750888][T12556] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  229.864793][ T9734] ocfs2: Unmounting device (7,5) on (node local)
[  229.900121][T12572] openvswitch: netlink: Duplicate key (type 6).
[  230.154519][T12594] loop5: detected capacity change from 0 to 16
[  230.160851][T12594] erofs (device loop5): mounted with root inode @ nid 36.
[  230.223194][T12598] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2679'.
[  230.510794][T12611] loop5: detected capacity change from 0 to 32768
[  230.526823][T12611] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2685 (12611)
[  230.540718][T12632] fuse: Bad value for 'fd'
[  230.563455][T12611] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  230.576207][T12611] BTRFS info (device loop5): using sha256 checksum algorithm
[  230.648003][T12611] BTRFS info (device loop5): enabling ssd optimizations
[  230.650316][T12611] BTRFS info (device loop5): turning on sync discard
[  230.652447][T12611] BTRFS info (device loop5): enabling free space tree
[  230.654770][T12611] BTRFS info (device loop5): use zlib compression, level 3
[  230.687467][T12651] tipc: Failed to remove unknown binding: 66,0,0/0:3347981207/3347981209
[  230.692264][T12651] tipc: Failed to remove unknown binding: 66,0,0/0:3347981207/3347981208
[  230.699533][T12651] tipc: Failed to remove unknown binding: 66,0,0/0:3347981207/3347981209
[  230.711042][T12651] tipc: Failed to remove unknown binding: 66,0,0/0:3347981207/3347981208
[  230.779149][ T9734] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  230.813889][T12659] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  231.049276][T12665] loop7: detected capacity change from 0 to 8192
[  231.083160][T12665]  loop7: p1 p2[DM] p4
[  231.085666][T12675] loop5: detected capacity change from 0 to 512
[  231.087020][T12665] loop7: partition table partially beyond EOD, truncated
[  231.092946][T12675] EXT4-fs (loop5): 1 truncate cleaned up
[  231.104981][T12665] loop7: p1 start 65535 is beyond EOD, truncated
[  231.105211][T12675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.109525][T12665] loop7: p2 start 4292936063 is beyond EOD, truncated
[  231.116652][T12665] loop7: p4 start 65535 is beyond EOD, truncated
[  231.122232][ T5058]  loop7: p1 p2[DM] p4
[  231.123604][ T5058] loop7: partition table partially beyond EOD, truncated
[  231.134546][ T5058] loop7: p1 start 65535 is beyond EOD, truncated
[  231.139290][ T5058] loop7: p2 start 4292936063 is beyond EOD, truncated
[  231.142490][ T5058] loop7: p4 start 65535 is beyond EOD, truncated
[  231.147092][T12675] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 215 vs 220 free clusters
[  231.168647][T12675] EXT4-fs (loop5): Remounting filesystem read-only
[  231.194774][ T9734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.444861][  T996] IPVS: starting estimator thread 0...
[  231.501886][T12708] input: syz1 as /devices/virtual/input/input15
[  231.538383][T12706] IPVS: using max 82 ests per chain, 196800 per kthread
[  231.959864][T12718] syzkaller0: entered promiscuous mode
[  231.961984][T12718] syzkaller0: entered allmulticast mode
[  232.376983][T12731] loop7: detected capacity change from 0 to 128
[  232.394441][T12731] vfat filesystem being mounted at /65/bus supports timestamps until 2107-12-31 (0x10391447e)
[  232.650748][T12749] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  233.838793][T12787] loop7: detected capacity change from 0 to 512
[  233.860433][T12787] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.2761: Unrecognised inode hash code 255
[  233.865063][T12787] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2761: Corrupt directory, running e2fsck is recommended
[  233.903379][T12787] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  233.907249][T12787] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.2761: corrupted in-inode xattr: invalid ea_ino
[  233.911333][T12787] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  233.912007][T12787] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2761: couldn't read orphan inode 15 (err -117)
[  233.918279][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  233.918289][    C1] EXT4-fs (loop7): initial error at time 6295033142: ext4_iget_extra_inode:5180: inode 15
[  233.918301][    C1] EXT4-fs (loop7): last error at time 6295033142: ext4_iget_extra_inode:5180: inode 15
[  233.927583][T12787] loop7: lost filesystem error report for type 5 error -117
[  233.933027][T12787] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.961252][T12787] EXT4-fs (loop7): shut down requested (2)
[  234.027168][T11909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.247454][T12794] loop7: detected capacity change from 0 to 1024
[  235.221727][T12838] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2784'.
[  236.432238][T12872] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2799'.
[  236.601190][T12880] use of bytesused == 0 is deprecated and will be removed in the future,
[  236.606191][T12880] use the actual size instead.
[  237.076816][T12908] xt_l2tp: v2 sid > 0xffff: 4294967292
[  237.224794][T12924] IPv6: addrconf: prefix option has invalid lifetime
[  237.270479][ T5619] Bluetooth: hci2: command 0x0406 tx timeout
[  237.380623][T12938] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2830'.
[  237.383668][T12938] syzkaller0: entered promiscuous mode
[  237.385571][T12938] syzkaller0: entered allmulticast mode
[  237.390695][T12938] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.394020][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2830'.
[  237.399717][T12938] tipc: Resetting bearer <eth:syzkaller0>
[  237.405044][T12935] tipc: Resetting bearer <eth:syzkaller0>
[  237.432886][T12935] tipc: Disabling bearer <eth:syzkaller0>
[  237.564377][T12944] sg_write: data in/out 517950/136 bytes for SCSI command 0x0-- guessing data in;
[  237.564377][T12944]    program syz.5.2834 not setting count and/or reply_len properly
[  237.671367][T12952] fuse: Bad value for 'fd'
[  239.055765][  T996] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  239.205634][  T996] usb 6-1: Using ep0 maxpacket: 32
[  239.210679][  T996] usb 6-1: config 247 has an invalid interface number: 221 but max is 0
[  239.214397][  T996] usb 6-1: config 247 has no interface number 0
[  239.217549][  T996] usb 6-1: config 247 interface 221 has no altsetting 0
[  239.222935][  T996] usb 6-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=70.55
[  239.226816][  T996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.230145][  T996] usb 6-1: Product: syz
[  239.231996][  T996] usb 6-1: Manufacturer: syz
[  239.234004][  T996] usb 6-1: SerialNumber: syz
[  239.246821][  T996] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:247.221/input/input16
[  239.443005][ T5043] bcm5974 6-1:247.221: could not read from device
[  239.452694][ T5043] bcm5974 6-1:247.221: could not read from device
[  239.463118][  T996] usb 6-1: USB disconnect, device number 21
[  239.470440][ T5043] bcm5974 6-1:247.221: could not read from device
[  240.035948][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2861'.
[  240.038731][T13002] netlink: 'syz.5.2861': attribute type 15 has an invalid length.
[  240.041104][T13002] netlink: 'syz.5.2861': attribute type 25 has an invalid length.
[  240.043516][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2861'.
[  240.144149][T13012] netlink: 'syz.4.2867': attribute type 2 has an invalid length.
[  240.151450][T13012] openvswitch: : Dropping previously announced user features
[  240.185751][T13017] loop5: detected capacity change from 0 to 164
[  240.190490][T13017] iso9660: Bad value for 'block'
[  240.388934][T13028] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2873'.
[  240.465088][  T996] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  240.616416][  T996] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  240.619293][  T996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.623252][  T996] usb 6-1: config 0 descriptor??
[  240.627599][  T996] cp210x 6-1:0.0: cp210x converter detected
[  240.868708][T13043] loop7: detected capacity change from 0 to 128
[  240.881648][T13043] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  240.893001][T13043] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  240.943488][T11909] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  241.046183][  T996] usb 6-1: cp210x converter now attached to ttyUSB0
[  241.060150][  T996] usb 6-1: USB disconnect, device number 22
[  241.074692][  T996] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  241.078618][  T996] cp210x 6-1:0.0: device disconnected
[  241.329645][T13052] fuseblk: Unknown parameter 'fd0x0000000000000006'
[  241.369023][T13052] loop7: detected capacity change from 0 to 1024
[  241.435053][T13052] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.691819][T13067] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2888'.
[  241.828447][T13074] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2891'.
[  242.114943][T11909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.258274][T13084] loop7: detected capacity change from 0 to 4096
[  242.277907][T13084] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  242.293124][T13084] ntfs3(loop7): ino=3, mi_enum_attr
[  242.305533][T13084] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  242.312116][T13084] ntfs3(loop7): Failed to load $AttrDef (-22)
[  242.416725][T13088] tipc: Started in network mode
[  242.418406][T13088] tipc: Node identity ac14142f, cluster identity 4711
[  242.420661][T13088] tipc: New replicast peer: 172.20.20.170
[  242.422875][T13088] tipc: Enabled bearer <udp:syz2>, priority 10
[  242.427423][T13088] tipc: New replicast peer: 0.0.0.0
[  242.523691][T13092] loop7: detected capacity change from 0 to 164
[  242.549740][T13092] iso9660: Corrupted directory entry in block 2 of inode 1920
[  242.703626][T13096] loop7: detected capacity change from 0 to 512
[  242.742337][T13096] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  242.752091][T13096] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  242.769211][T13096] System zones: 0-1, 15-15, 18-18, 34-34
[  242.772197][T13096] EXT4-fs (loop7): orphan cleanup on readonly fs
[  242.775689][T13096] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0
[  242.780666][T13096] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  242.787526][T13096] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  242.790647][T13096] EXT4-fs (loop7): 1 truncate cleaned up
[  242.795046][T13096] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  242.804751][T13096] fscrypt (loop7, inode 16): Error -61 getting encryption context
[  242.808224][T13096] fscrypt (loop7, inode 16): Error -61 getting encryption context
[  242.825972][T11909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.018100][T13113] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2908'.
[  243.063846][T13117] netlink: 'syz.4.2909': attribute type 2 has an invalid length.
[  243.106398][T13119] netlink: zone id is out of range
[  243.118007][T13119] netlink: zone id is out of range
[  243.292546][  T996] IPVS: starting estimator thread 0...
[  243.414688][T13132] IPVS: using max 84 ests per chain, 201600 per kthread
[  243.553585][    T9] tipc: Node number set to 2886997039
[  243.981767][T13158] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  244.425873][T13167] loop5: detected capacity change from 0 to 256
[  244.485129][T13167] vfat filesystem being mounted at /439/bus supports timestamps until 2107-12-31 (0x10391447e)
[  244.702736][T13177] loop7: detected capacity change from 0 to 64
[  244.723762][T13177] minix filesystem being mounted at /112/file1 supports timestamps until 2106-02-07 (0xffffffff)
[  244.824548][T13177] syz.7.2936: attempt to access beyond end of device
[  244.824548][T13177] loop7: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[  244.841757][T13177] Buffer I/O error on dev loop7, logical block 512, async page read
[  244.847096][T13177] syz.7.2936: attempt to access beyond end of device
[  244.847096][T13177] loop7: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  244.863002][T13177] Buffer I/O error on dev loop7, logical block 56576, async page read
[  245.221581][T13189] loop7: detected capacity change from 0 to 32768
[  245.226411][T13189] jfs_mount: dbMount failed w/rc = -22
[  245.229088][T13189] Mount JFS Failure: -22
[  245.230902][T13189] jfs_mount failed w/return code = -22
[  245.652011][T13202] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2948'.
[  245.907162][T13226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2960'.
[  245.955351][T13230] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2961'.
[  246.037263][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2963'.
[  246.196415][T13243] netlink: 'syz.4.2968': attribute type 64 has an invalid length.
[  246.201245][T13243] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.203753][T13243] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.231220][T13243] netlink: 'syz.4.2968': attribute type 64 has an invalid length.
[  246.283683][T13248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2970'.
[  246.286958][T13248] netlink: 'syz.4.2970': attribute type 8 has an invalid length.
[  246.289524][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2970'.
[  246.310690][T13246] loop7: detected capacity change from 0 to 2048
[  246.316627][T13246] NILFS: invalid option "cp=0": invalid checkpoint number 0
[  246.334593][T13249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2970'.
[  246.346231][T13249] netlink: 'syz.4.2970': attribute type 8 has an invalid length.
[  246.356151][T13249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2970'.
[  246.826524][T13270] loop5: detected capacity change from 0 to 8
[  246.847420][T13270] SQUASHFS error: xz decompression failed, data probably corrupt
[  246.849840][T13270] SQUASHFS error: Failed to read block 0x108: -5
[  246.858425][T13270] SQUASHFS error: Unable to read metadata cache entry [106]
[  246.863752][T13270] SQUASHFS error: Unable to read inode 0x11f
[  246.874251][T13272] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2979'.
[  246.992334][T13286] loop7: detected capacity change from 0 to 8
[  247.120315][T13298] loop7: detected capacity change from 0 to 2048
[  247.125300][T13300] xt_bpf: check failed: parse error
[  247.167970][T13298] Alternate GPT is invalid, using primary GPT.
[  247.170592][T13298]  loop7: p1 p2 p3
[  247.172633][T13298] loop7: partition table partially beyond EOD, truncated
[  247.289158][ T5629] udevd[5629]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  247.290697][ T5618] udevd[5618]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  247.299100][ T6488] udevd[6488]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  247.470254][T13308] loop7: detected capacity change from 0 to 32768
[  247.478923][T13308] jfs filesystem being mounted at /133/file1 supports timestamps until 2106-02-07 (0xffffffff)
[  247.956602][T13326] loop5: detected capacity change from 0 to 1024
[  247.986840][T13326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.001623][T13326] EXT4-fs error (device loop5): ext4_generic_delete_entry:2673: inode #2: block 16: comm syz.5.3005: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1
[  248.015075][T13326] EXT4-fs error (device loop5) in ext4_delete_entry:2744: Corrupt filesystem
[  248.022395][T13326] EXT4-fs warning (device loop5): ext4_rename_delete:3739: inode #2: comm syz.5.3005: Deleting old file: nlink 1, error=-117
[  248.039820][ T9734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.218649][T13337] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3009'.
[  248.773707][T13362] loop7: detected capacity change from 0 to 1024
[  248.776569][T13362] EXT4-fs: Ignoring removed bh option
[  248.789715][T13362] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  248.807308][T13362] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.835696][T11909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.975413][T13383] loop5: detected capacity change from 0 to 512
[  248.989073][T13383] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  248.998998][T13383] EXT4-fs (loop5): 1 truncate cleaned up
[  249.002665][T13383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.039967][ T9734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.320805][   T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  249.430093][T13407] loop7: detected capacity change from 0 to 8
[  249.471007][   T10] usb 6-1: Using ep0 maxpacket: 32
[  249.476523][   T10] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  249.485553][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.497662][   T10] usb 6-1: config 0 descriptor??
[  249.519316][   T10] gspca_main: sq930x-2.14.0 probing 041e:403c
[  250.390116][   T10] gspca_sq930x: reg_w 0105 bf00 failed -71
[  250.450162][   T10] sq930x 6-1:0.0: probe with driver sq930x failed with error -71
[  250.474970][   T10] usb 6-1: USB disconnect, device number 23
[  250.958070][T13458] netlink: 'syz.5.3059': attribute type 4 has an invalid length.
[  251.545117][   T33] audit: type=1326 audit(6295557448.534:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.5.3072" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  251.552189][   T33] audit: type=1326 audit(6295557448.544:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.5.3072" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  251.564217][   T33] audit: type=1326 audit(6295557448.554:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.5.3072" exe="/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  251.579681][   T33] audit: type=1326 audit(6295557448.554:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.5.3072" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  251.595122][   T33] audit: type=1326 audit(6295557448.554:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13487 comm="syz.5.3072" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  251.654364][T13492] sctp: [Deprecated]: syz.4.3074 (pid 13492) Use of int in max_burst socket option deprecated.
[  251.654364][T13492] Use struct sctp_assoc_value instead
[  251.769722][T13500] netlink: 'syz.4.3077': attribute type 12 has an invalid length.
[  251.907479][T13506] sch_fq: defrate 0 ignored.
[  252.052020][T13512] loop7: detected capacity change from 0 to 128
[  252.055337][T13512] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  252.062344][T13512] hpfs: filesystem error: improperly stopped
[  252.065833][T13512] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  252.072874][T13512] hpfs: You really don't want any checks? You are crazy...
[  252.075894][T13512] hpfs: Code page index out of array
[  252.078115][T13512] hpfs: code page support is disabled
[  252.083036][T13512] hpfs: hpfs_map_4sectors(): unaligned read
[  252.086559][T13512] hpfs: hpfs_map_4sectors(): unaligned read
[  252.090371][T13512] hpfs: filesystem error: unable to find root dir
[  252.154919][T13516] 9pnet_fd: p9_fd_create_tcp (13516): problem connecting socket to 127.0.0.1
[  252.346713][   T33] audit: type=1800 audit(6295557449.324:92): pid=13528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3090" name="nullb0" dev="tmpfs" ino=4949 res=0 errno=0
[  252.945940][T13559] __nla_validate_parse: 3 callbacks suppressed
[  252.945950][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3103'.
[  253.351659][T13583] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3114'.
[  253.388051][T13587] loop5: detected capacity change from 0 to 256
[  253.392442][T13587] vfat filesystem being mounted at /485/file0 supports timestamps until 2107-12-31 (0x10391447e)
[  253.429993][T13589] xt_ecn: cannot match TCP bits for non-tcp packets
[  253.693370][T13612] xt_CT: You must specify a L4 protocol and not use inversions on it
[  253.720790][T13614] loop7: detected capacity change from 0 to 2048
[  253.773717][T13614]  loop7: p1 < > p4
[  253.773717][T13614]  p4: <netbsd: >
[  253.777224][T13614] loop7: p4 size 722688 extends beyond EOD, truncated
[  253.831046][T13626] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3136'.
[  253.834906][T13626] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3136'.
[  254.013416][T13645] loop5: detected capacity change from 0 to 256
[  254.016511][T13645] exfat: Deprecated parameter 'utf8'
[  254.019837][T13645] exfat: Deprecated parameter 'utf8'
[  254.025142][T13645] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  254.031253][T13645] exfat filesystem being mounted at /494/file1 supports timestamps until 2107-12-31 (0x10391447f)
[  254.625821][T13681] loop5: detected capacity change from 0 to 128
[  254.645339][T13681] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4685: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  254.653475][T13681] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  255.616255][T13713] loop5: detected capacity change from 0 to 1024
[  255.631080][T13713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.660594][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  255.663138][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  255.672934][ T9734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.155420][T13737] loop5: detected capacity change from 0 to 256
[  256.163785][T13737] msdos filesystem being mounted at /521/file1 supports timestamps until 2107-12-31 (0x10391447e)
[  256.290331][T13740] netlink: 'syz.5.3185': attribute type 20 has an invalid length.
[  256.934022][T13749] loop7: detected capacity change from 0 to 256
[  256.939795][T13749] exfat: Deprecated parameter 'namecase'
[  256.945454][T13749] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  256.952237][T13749] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  256.958541][T13749] exfat filesystem being mounted at /184/file0 supports timestamps until 2107-12-31 (0x10391447f)
[  257.189841][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3195'.
[  257.694168][T13792] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  258.076776][   T33] audit: type=1326 audit(6295557455.067:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13794 comm="syz.7.3209" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef1ef9e019 code=0x0
[  258.148279][T13799] hub 1-0:1.0: USB hub found
[  258.152779][T13799] hub 1-0:1.0: 1 port detected
[  258.734599][T13803] loop5: detected capacity change from 0 to 40427
[  258.788428][T13803] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  258.801839][T13803] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  258.816771][T13803] F2FS-fs (loop5): Inconsistent error blkaddr:5633, sit bitmap:0
[  258.822606][T13803] CPU: 0 UID: 0 PID: 13803 Comm: syz.5.3212 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  258.822620][T13803] Tainted: [L]=SOFTLOCKUP
[  258.822622][T13803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  258.822627][T13803] Call Trace:
[  258.822630][T13803]  <TASK>
[  258.822634][T13803]  dump_stack_lvl+0xe8/0x150
[  258.822654][T13803]  __f2fs_is_valid_blkaddr+0xd5e/0x14f0
[  258.822665][T13803]  f2fs_get_read_data_folio+0xaae/0xfd0
[  258.822680][T13803]  ? __pfx_f2fs_get_read_data_folio+0x10/0x10
[  258.822724][T13803]  ? __filemap_get_folio_mpol+0xd03/0x1000
[  258.822739][T13803]  f2fs_find_data_folio+0x3a3/0x6d0
[  258.822750][T13803]  ? f2fs_readdir+0x4ec/0xad0
[  258.822762][T13803]  f2fs_readdir+0x4ec/0xad0
[  258.822780][T13803]  ? __pfx_f2fs_readdir+0x10/0x10
[  258.822795][T13803]  ? iterate_dir+0x209/0x4d0
[  258.822804][T13803]  ? down_read_killable+0x1bb/0x3b0
[  258.822817][T13803]  iterate_dir+0x2e2/0x4d0
[  258.822828][T13803]  __se_sys_getdents64+0xf1/0x280
[  258.822839][T13803]  ? __pfx___se_sys_getdents64+0x10/0x10
[  258.822848][T13803]  ? __pfx_filldir64+0x10/0x10
[  258.822857][T13803]  ? rcu_is_watching+0x15/0xb0
[  258.822868][T13803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.822876][T13803]  do_syscall_64+0x174/0x580
[  258.822884][T13803]  ? trace_irq_disable+0x3b/0x140
[  258.822901][T13803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.822912][T13803] RIP: 0033:0x7f264259e019
[  258.822922][T13803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.822930][T13803] RSP: 002b:00007f26434ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  258.822942][T13803] RAX: ffffffffffffffda RBX: 00007f2642825fa0 RCX: 00007f264259e019
[  258.822951][T13803] RDX: 0000000000000043 RSI: 0000000000000000 RDI: 0000000000000004
[  258.822958][T13803] RBP: 00007f264263500c R08: 0000000000000000 R09: 0000000000000000
[  258.822965][T13803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  258.822969][T13803] R13: 00007f2642826038 R14: 00007f2642825fa0 R15: 00007ffcaf441a78
[  258.822981][T13803]  </TASK>
[  261.699986][T13808] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  261.737442][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3220'.
[  261.791288][T13829] IPv6: addrconf: prefix option has invalid lifetime
[  261.969524][T13841] overlayfs: conflicting options: nfs_export=on,index=off
[  262.162131][T13868] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3239'.
[  262.169228][T13866] loop7: detected capacity change from 0 to 2048
[  262.175077][T13866] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  262.179881][T13868] bond1: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms
[  262.186577][T13868] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3239'.
[  262.188535][T13866] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  262.190286][T13868] bond1: Unable to set peer notification delay as MII monitoring is disabled
[  262.206367][T13866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  262.277578][T13877] netlink: 'syz.4.3243': attribute type 11 has an invalid length.
[  262.342701][T13881] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  262.347832][T13880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.514425][   T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  262.667528][   T10] usb 6-1: Using ep0 maxpacket: 8
[  262.676422][   T10] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.686388][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  262.694984][   T10] usb 6-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00
[  262.713755][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.730860][   T10] usb 6-1: config 0 descriptor??
[  263.269332][   T10] thrustmaster 0003:044F:B300.000C: unknown main item tag 0x2
[  263.272354][   T10] thrustmaster 0003:044F:B300.000C: invalid report_count 2121247544
[  263.275057][   T10] thrustmaster 0003:044F:B300.000C: item 0 4 1 9 parsing failed
[  263.277777][   T10] thrustmaster 0003:044F:B300.000C: parse failed
[  263.279828][   T10] thrustmaster 0003:044F:B300.000C: probe with driver thrustmaster failed with error -22
[  263.470410][   T10] usb 6-1: USB disconnect, device number 24
[  264.076758][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3271'.
[  264.092635][T13945] ip6erspan0: entered promiscuous mode
[  264.131342][T13950] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  264.196048][T13954] loop7: detected capacity change from 0 to 512
[  264.224316][T13954] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.228398][T13954] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.286684][T11909] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.402548][   T33] audit: type=1326 audit(6295557461.390:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13958 comm="syz.7.3276" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1ef9e019 code=0x7ffc0000
[  264.411352][   T33] audit: type=1326 audit(6295557461.390:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13958 comm="syz.7.3276" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1ef9e019 code=0x7ffc0000
[  264.424027][   T33] audit: type=1326 audit(6295557461.390:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13958 comm="syz.7.3276" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1ef9e019 code=0x7ffc0000
[  264.443192][   T33] audit: type=1326 audit(6295557461.390:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13958 comm="syz.7.3276" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1ef9e019 code=0x7ffc0000
[  264.452221][   T33] audit: type=1326 audit(6295557461.410:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13958 comm="syz.7.3276" exe="/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fef1ef9e019 code=0x7ffc0000
[  264.470219][   T33] audit: type=1326 audit(6295557461.410:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13958 comm="syz.7.3276" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1ef9e019 code=0x7ffc0000
[  264.484315][   T33] audit: type=1326 audit(6295557461.410:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13958 comm="syz.7.3276" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1ef9e019 code=0x7ffc0000
[  264.493190][   T33] audit: type=1326 audit(6295557461.410:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13958 comm="syz.7.3276" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fef1ef9e019 code=0x7ffc0000
[  264.508884][   T33] audit: type=1326 audit(6295557461.410:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13958 comm="syz.7.3276" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fef1ef9e019 code=0x7ffc0000
[  265.301143][T13975] misc userio: No port type given on /dev/userio
[  265.709729][T13997] openvswitch: netlink: IP tunnel dst address not specified
[  265.734602][T13999] kernel read not supported for file /!selinuxw (pid: 13999 comm: syz.5.3294)
[  265.796957][T14005] loop5: detected capacity change from 0 to 256
[  265.806588][T14005] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  265.811042][T14005] exfat filesystem being mounted at /548/qY3aK supports timestamps until 2107-12-31 (0x10391447f)
[  265.843552][T14007] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  265.845966][T14007] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  265.848447][T14007] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  265.850886][T14007] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  266.004917][T14013] bond3: entered promiscuous mode
[  266.011061][T14013] bond3: entered allmulticast mode
[  266.012968][T14013] 8021q: adding VLAN 0 to HW filter on device bond3
[  266.132717][   T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  266.282599][   T24] usb 6-1: Using ep0 maxpacket: 8
[  266.288005][   T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  266.290898][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.293913][   T24] usb 6-1: Product: syz
[  266.295276][   T24] usb 6-1: Manufacturer: syz
[  266.297262][   T24] usb 6-1: SerialNumber: syz
[  266.300543][   T24] usb 6-1: config 0 descriptor??
[  266.506603][   T24] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  266.928741][   T24] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  267.017731][   T24] usb 6-1: USB disconnect, device number 25
[  268.683204][T14055] loop7: detected capacity change from 0 to 128
[  268.698796][T14055] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  268.710375][T14055] hpfs: filesystem error: improperly stopped
[  268.717258][T14055] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  268.724566][T14055] hpfs: You really don't want any checks? You are crazy...
[  268.730757][T14055] hpfs: hpfs_map_sector(): read error
[  268.736233][T14055] hpfs: code page support is disabled
[  268.740221][T14055] hpfs: hpfs_map_4sectors(): unaligned read
[  268.745869][T14055] hpfs: hpfs_map_4sectors(): unaligned read
[  268.754643][T14055] hpfs: filesystem error: unable to find root dir
[  268.766875][T14055] hpfs: hpfs_map_4sectors(): unaligned read
[  268.788038][T14055] hpfs: hpfs_map_sector(): read error
[  268.799208][T14055] hpfs: hpfs_map_sector(): read error
[  268.882058][T14059] loop5: detected capacity change from 0 to 1024
[  269.590148][T14087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3333'.
[  269.996998][T14118] loop7: detected capacity change from 0 to 1764
[  270.698956][T14173] 8021q: adding VLAN 0 to HW filter on device bond4
[  270.709179][T14173] bond0: (slave team0): Releasing backup interface
[  270.719081][T14173] bond2: (slave dummy0): Releasing backup interface
[  270.724554][T14173] bridge_slave_0: left allmulticast mode
[  270.726784][T14173] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.734775][T14173] bridge_slave_1: left allmulticast mode
[  270.736559][T14173] bridge_slave_1: left promiscuous mode
[  270.738490][T14173] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.743761][T14173] bond0: (slave bond_slave_0): Releasing backup interface
[  270.748163][T14173] bond0: (slave bond_slave_1): Releasing backup interface
[  270.754670][T14173] team0: Port device team_slave_0 removed
[  270.760165][T14173] team0: Port device team_slave_1 removed
[  270.766698][T14173] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  270.769002][T14173] batman_adv: batadv0: Removing interface: batadv_slave_0
[  270.774436][T14173] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  270.776922][T14173] batman_adv: batadv0: Removing interface: batadv_slave_1
[  270.785230][T14173] bond2: (slave gretap1): Removing an active aggregator
[  270.789707][T14173] bond2: (slave gretap1): Releasing backup interface
[  270.809026][T14149] loop7: detected capacity change from 0 to 131072
[  270.813598][T14149] F2FS-fs (loop7): Invalid log sectorsize (67108873)
[  270.816465][T14149] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  270.819422][T14149] F2FS-fs (loop7): invalid crc value
[  270.851992][T14149] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  270.859484][T14149] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  270.861824][T14149] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  270.891341][T14175] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  271.095066][   T33] audit: type=1326 audit(6295557468.093:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.5.3375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  271.116228][   T33] audit: type=1326 audit(6295557468.093:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.5.3375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  271.135003][   T33] audit: type=1326 audit(6295557468.093:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.5.3375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  271.141860][   T33] audit: type=1326 audit(6295557468.093:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.5.3375" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  271.148952][   T33] audit: type=1326 audit(6295557468.093:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.5.3375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  271.161884][   T33] audit: type=1326 audit(6295557468.093:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.5.3375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  271.179696][   T33] audit: type=1326 audit(6295557468.093:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.5.3375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  271.194775][   T33] audit: type=1326 audit(6295557468.093:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.5.3375" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  271.209829][   T33] audit: type=1326 audit(6295557468.093:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.5.3375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  271.227368][   T33] audit: type=1326 audit(6295557468.093:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14182 comm="syz.5.3375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  271.885745][T14217] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3387'.
[  272.356025][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3391'.
[  272.401366][ T5626] Bluetooth: Frame is too long (len 95, expected len 4)
[  272.581073][T14239] loop5: detected capacity change from 0 to 512
[  272.591961][T14239] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.3396: Failed to acquire dquot type 1
[  272.595923][T14239] loop5: lost filesystem error report for type 5 error -117
[  272.596227][T14239] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.3396: Failed to acquire dquot type 1
[  272.602056][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  272.602066][    C0] EXT4-fs (loop5): last error at time 6295557469: ext4_acquire_dquot:7041
[  272.607618][T14239] loop5: lost filesystem error report for type 5 error -117
[  272.608046][T14239] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3396: bg 0: block 248: padding at end of block bitmap is not set
[  272.615199][T14239] loop5: lost filesystem error report for type 5 error -117
[  272.615389][T14239] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  272.621415][T14239] loop5: lost filesystem error report for type 5 error -117
[  272.622118][T14239] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.3396: Failed to acquire dquot type 1
[  272.627772][T14239] loop5: lost filesystem error report for type 5 error -117
[  272.631800][T14239] EXT4-fs (loop5): 1 orphan inode deleted
[  272.636567][T14239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.640403][T14239] ext4 filesystem being mounted at /580/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.681835][ T9734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.228393][T14263] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3405'.
[  273.234250][T14263] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3405'.
[  273.238861][T14263] netlink: 'syz.7.3405': attribute type 32 has an invalid length.
[  273.243678][T14263] netlink: 424 bytes leftover after parsing attributes in process `syz.7.3405'.
[  273.664498][T14285] loop5: detected capacity change from 0 to 1024
[  273.693118][T14285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  273.703073][T14285] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.939258][T14296] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3414: bg 0: block 112: padding at end of block bitmap is not set
[  273.954893][T14296] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28
[  273.959092][T14296] EXT4-fs (loop5): This should not happen!! Data will be lost
[  273.959092][T14296] 
[  273.962029][T14296] EXT4-fs (loop5): Total free blocks count 0
[  273.963956][T14296] EXT4-fs (loop5): Free/Dirty block details
[  273.965885][T14296] EXT4-fs (loop5): free_blocks=0
[  273.967421][T14296] EXT4-fs (loop5): dirty_blocks=64
[  273.969209][T14296] EXT4-fs (loop5): Block reservation details
[  273.971028][T14296] EXT4-fs (loop5): i_reserved_data_blocks=4
[  274.395538][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.410990][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  274.422951][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  274.426725][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  274.430499][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  274.433255][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  274.539796][ T9734] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  274.553655][ T9734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  274.606458][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.770121][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.927565][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.004408][T14331] netlink: 'syz.4.3432': attribute type 11 has an invalid length.
[  275.026291][T14329] loop5: detected capacity change from 0 to 4096
[  275.036958][T14329] ntfs3(loop5): ino=3, mi_enum_attr
[  275.409079][T14307] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.412427][T14307] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.415470][T14307] bridge_slave_0: entered allmulticast mode
[  275.420597][T14307] bridge_slave_0: entered promiscuous mode
[  275.424688][T14352] netlink: 'syz.4.3439': attribute type 11 has an invalid length.
[  275.446191][T14307] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.449620][T14307] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.452702][T14307] bridge_slave_1: entered allmulticast mode
[  275.456722][T14307] bridge_slave_1: entered promiscuous mode
[  275.463990][   T12] bridge_slave_1: left allmulticast mode
[  275.468350][   T12] bridge_slave_1: left promiscuous mode
[  275.470854][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.476563][   T12] bridge_slave_0: left allmulticast mode
[  275.480155][   T12] bridge_slave_0: left promiscuous mode
[  275.484509][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.577825][T14360] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3443'.
[  275.724199][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  275.729452][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  275.732892][   T12] bond0 (unregistering): Released all slaves
[  275.772805][T14307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.791771][T14307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.857074][   T12] tipc: Disabling bearer <udp:syz2>
[  275.871875][   T12] tipc: Left network mode
[  275.879441][T14307] team0: Port device team_slave_0 added
[  275.907728][T14307] team0: Port device team_slave_1 added
[  276.010615][T14307] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.015077][T14307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.030188][T14307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.054531][T14307] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.062197][T14307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.087868][T14307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.259137][T14307] hsr_slave_0: entered promiscuous mode
[  276.261553][T14307] hsr_slave_1: entered promiscuous mode
[  276.265454][T14307] debugfs: 'hsr0' already exists in 'hsr'
[  276.267316][T14307] Cannot create hsr debugfs directory
[  276.295776][ T5355] 8021q: adding VLAN 0 to HW filter on device eth17
[  276.378407][   T12] hsr_slave_0: left promiscuous mode
[  276.382702][   T12] hsr_slave_1: left promiscuous mode
[  276.391881][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  276.398970][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  276.409060][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  276.417866][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  276.429785][   T12] veth1_macvtap: left promiscuous mode
[  276.432136][   T12] veth0_macvtap: left promiscuous mode
[  276.437215][   T12] veth1_vlan: left promiscuous mode
[  276.450934][   T12] veth0_vlan: left promiscuous mode
[  276.527882][ T5626] Bluetooth: hci0: command tx timeout
[  276.685587][   T12] team0 (unregistering): Port device team_slave_1 removed
[  276.693411][   T12] team0 (unregistering): Port device team_slave_0 removed
[  276.807756][ T5355] 8021q: adding VLAN 0 to HW filter on device eth18
[  277.136460][ T5355] 8021q: adding VLAN 0 to HW filter on device eth19
[  277.184450][T14307] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  277.188801][T14307] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  277.191382][T14307] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  277.195084][T14307] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  277.198220][T14307] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  277.202038][T14307] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  277.204593][T14307] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  277.210527][T14307] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  277.246477][   T12] IPVS: stop unused estimator thread 0...
[  277.476344][T14307] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.495081][T14307] 8021q: adding VLAN 0 to HW filter on device team0
[  277.500164][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.502391][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.516192][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.518521][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state
[  277.561394][ T5355] 8021q: adding VLAN 0 to HW filter on device eth20
[  277.752767][T14307] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.882170][T14307] veth0_vlan: entered promiscuous mode
[  277.893635][T14307] veth1_vlan: entered promiscuous mode
[  277.915661][T14307] veth0_macvtap: entered promiscuous mode
[  277.926307][T14307] veth1_macvtap: entered promiscuous mode
[  277.939806][T14307] batman_adv: batadv0: Interface activated: batadv_slave_0
[  277.950382][T14307] batman_adv: batadv0: Interface activated: batadv_slave_1
[  277.966741][ T8381] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.992828][ T8381] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.032686][ T8381] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.035283][ T8381] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.208487][ T5626] Bluetooth: hci1: command 0x0406 tx timeout
[  278.215869][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.223421][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.276385][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.279951][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.656899][ T5619] Bluetooth: hci0: command tx timeout
[  278.830593][T14525] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  278.832843][T14525] overlayfs: failed to set xattr on upper
[  278.834682][T14525] overlayfs: ...falling back to redirect_dir=nofollow.
[  278.837605][T14525] overlayfs: ...falling back to index=off.
[  278.839533][T14525] overlayfs: ...falling back to uuid=null.
[  278.872512][T14525] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  278.985320][T14528] Invalid logical block size (8196)
[  278.991888][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3495'.
[  279.638514][T14569] loop5: detected capacity change from 0 to 4096
[  279.689821][T14573] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  279.705979][   T33] kauditd_printk_skb: 11 callbacks suppressed
[  279.705988][   T33] audit: type=1800 audit(6295557476.697:118): pid=14569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3511" name="file1" dev="loop5" ino=15 res=0 errno=0
[  280.639577][T14607] loop8: detected capacity change from 0 to 16
[  280.681292][T14607] erofs (device loop8): mounted with root inode @ nid 36.
[  280.695869][ T5619] Bluetooth: hci0: command tx timeout
[  280.983578][T14619] loop8: detected capacity change from 0 to 1764
[  281.426304][T14639] loop5: detected capacity change from 0 to 4096
[  281.432936][T14639] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  281.451199][T14639] ntfs3(loop5): Failed to load $MFT.
[  281.621687][T14645] openvswitch: netlink: IP tunnel dst address not specified
[  281.624474][T14645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.663232][ T5684] kernel read not supported for file /bluetooth/6lowpan_control (pid: 5684 comm: kworker/1:4)
[  282.167864][T14656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3551'.
[  282.485030][   T33] audit: type=1326 audit(6295557479.488:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14677 comm="syz.4.3559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357b9e019 code=0x7ffc0000
[  282.495179][   T33] audit: type=1326 audit(6295557479.488:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14677 comm="syz.4.3559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357b9e019 code=0x7ffc0000
[  282.507398][   T33] audit: type=1326 audit(6295557479.498:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14677 comm="syz.4.3559" exe="/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fd357b9e019 code=0x7ffc0000
[  282.523335][   T33] audit: type=1326 audit(6295557479.498:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14677 comm="syz.4.3559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357b9e019 code=0x7ffc0000
[  282.540595][   T33] audit: type=1326 audit(6295557479.498:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14677 comm="syz.4.3559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd357b9e019 code=0x7ffc0000
[  282.607267][T14682] loop5: detected capacity change from 0 to 256
[  282.613851][T14682] exfat: Deprecated parameter 'utf8'
[  282.624904][T14682] exfat: Deprecated parameter 'namecase'
[  282.627195][T14682] exfat: Deprecated parameter 'namecase'
[  282.629481][T14682] exfat: Deprecated parameter 'utf8'
[  282.638845][T14682] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  282.643393][T14682] exFAT-fs (loop5): failed to test first cluster bit of root dir(5)
[  282.654539][T14682] exfat filesystem being mounted at /631/file0 supports timestamps until 2107-12-31 (0x10391447f)
[  282.733542][   T33] audit: type=1800 audit(6295557479.728:124): pid=14686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3563" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  282.765354][ T5619] Bluetooth: hci0: command tx timeout
[  282.798283][T14688] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3564'.
[  283.093841][T14702] tmpfs: Bad value for 'mpol'
[  283.274794][ T5701] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  283.339112][T14716] loop8: detected capacity change from 0 to 512
[  283.346371][T14716] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  283.353119][T14716] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  283.355920][T14716] System zones: 0-1, 15-15, 18-18, 34-34
[  283.357821][T14716] EXT4-fs (loop8): orphan cleanup on readonly fs
[  283.359811][T14716] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0
[  283.362562][T14716] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  283.371030][T14716] EXT4-fs (loop8): Cannot turn on quotas: error -22
[  283.380379][T14716] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3578: bg 0: block 40: padding at end of block bitmap is not set
[  283.382292][T14719] overlayfs: failed to clone upperpath
[  283.386542][T14716] loop8: lost filesystem error report for type 5 error -117
[  283.393280][T14716] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  283.396185][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  283.396194][    C0] EXT4-fs (loop8): initial error at time 6295560058: ext4_validate_block_bitmap:441
[  283.396205][    C0] EXT4-fs (loop8): last error at time 6295560058: ext4_validate_block_bitmap:441
[  283.409126][T14716] loop8: lost filesystem error report for type 5 error -117
[  283.410784][T14716] EXT4-fs (loop8): 1 truncate cleaned up
[  283.416612][T14716] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  283.428053][T14716] EXT4-fs error (device loop8): ext4_encrypted_get_link:46: inode #16: comm syz.8.3578: bad symlink.
[  283.438592][ T5701] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  283.442556][ T5701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.452596][T14307] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.452596][ T5701] usb 6-1: config 0 descriptor??
[  283.476424][ T5701] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  283.494597][ T5701] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  283.517975][T14723] loop8: detected capacity change from 0 to 1024
[  283.521442][T14723] EXT4-fs: Ignoring removed i_version option
[  283.523416][T14723] EXT4-fs: inline encryption not supported
[  283.537625][T14723] EXT4-fs (loop8): Test dummy encryption mode enabled
[  283.548290][T14723] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.614068][T14307] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.686837][    T9] usb 6-1: USB disconnect, device number 26
[  283.689986][    T9] ftdi_sio 6-1:0.0: device disconnected
[  283.883570][T14749] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  284.052127][T14760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  284.139226][T14766] loop8: detected capacity change from 0 to 2048
[  284.141851][T14766] nilfs2: Unknown parameter '00000000000000000000'
[  284.151072][ T6488] udevd[6488]: incorrect nilfs2 checksum on /dev/loop8
[  284.232998][T14770] netlink: 'syz.4.3600': attribute type 1 has an invalid length.
[  284.525995][ T5619] Bluetooth: hci2: unexpected event for opcode 0x0c46
[  284.868631][T14818] bond0: invalid NS target ff00:: specified for addition
[  284.870896][T14818] bond0: option ns_ip6_target: invalid value (18446744073709551615)
[  284.915288][T14812] loop8: detected capacity change from 0 to 32768
[  284.921433][T14812] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3620 (14812)
[  284.961181][T14812] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  284.969872][T14812] BTRFS info (device loop8): using sha256 checksum algorithm
[  284.973770][T14812] BTRFS error (device loop8): ignoredatacsums must be used with ro mount option
[  284.978612][T14812] BTRFS error (device loop8): open_ctree failed: -22
[  285.544377][    T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  285.696611][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  285.700827][    T9] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1024
[  285.705212][    T9] usb 6-1: config 1 interface 0 has no altsetting 0
[  285.710249][    T9] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  285.713905][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.717237][    T9] usb 6-1: Product: syz
[  285.719016][    T9] usb 6-1: Manufacturer: syz
[  285.720940][    T9] usb 6-1: SerialNumber: syz
[  285.725690][T14859] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  285.916522][T14865] fuse: fd is not a fuse device
[  285.985770][    T9] usb 6-1: USB disconnect, device number 27
[  287.129200][T14885] loop5: detected capacity change from 0 to 4096
[  287.138894][T14885] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  287.201359][T14885] ntfs3(loop5): ino=19, mi_enum_attr
[  287.214254][T14885] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  287.522915][T14909] loop8: detected capacity change from 0 to 8
[  287.557428][T14909] SQUASHFS error: Unable to read inode 0x127
[  287.605632][ T5684] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  287.767822][ T5684] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 180, changing to 11
[  287.775980][ T5684] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  287.781229][ T5684] usb 6-1: config 0 interface 0 has no altsetting 0
[  287.785201][ T5684] usb 6-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00
[  287.788938][ T5684] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.795236][ T5684] usb 6-1: config 0 descriptor??
[  287.812444][T14928] loop8: detected capacity change from 0 to 512
[  287.823444][T14928] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3675: iget: bad i_size value: 38620345925642
[  287.829895][T14928] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  287.830096][T14928] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3675: couldn't read orphan inode 15 (err -117)
[  287.836609][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  287.836619][    C0] EXT4-fs (loop8): initial error at time 6295560062: ext4_orphan_get:1399: inode 15
[  287.836631][    C0] EXT4-fs (loop8): last error at time 6295560062: ext4_orphan_get:1399: inode 15
[  287.847107][T14928] loop8: lost filesystem error report for type 5 error -117
[  287.848024][T14928] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.891436][T14928] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3675: bg 0: block 5: invalid block bitmap
[  287.902649][T14928] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 6 with error 28
[  287.907608][T14928] EXT4-fs (loop8): This should not happen!! Data will be lost
[  287.907608][T14928] 
[  287.911174][T14928] EXT4-fs (loop8): Total free blocks count 0
[  287.915834][T14928] EXT4-fs (loop8): Free/Dirty block details
[  287.918214][T14928] EXT4-fs (loop8): free_blocks=0
[  287.920116][T14928] EXT4-fs (loop8): dirty_blocks=66
[  287.922080][T14928] EXT4-fs (loop8): Block reservation details
[  287.924610][T14928] EXT4-fs (loop8): i_reserved_data_blocks=66
[  287.964749][ T1113] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 60 with error 28
[  287.975232][T14307] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  288.210825][ T5684] saitek 0003:06A3:0CD0.000D: ignoring exceeding usage max
[  288.217712][ T5684] saitek 0003:06A3:0CD0.000D: hidraw0: USB HID vd1.1d Device [HID 06a3:0cd0] on usb-dummy_hcd.5-1/input0
[  288.262951][T14950] libceph: Failed to parse secret: -22
[  288.343277][T14960] trusted_key: syz.4.3690 sent an empty control message without MSG_MORE.
[  288.417306][ T5701] usb 6-1: USB disconnect, device number 28
[  288.575732][  T996] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  288.636811][T14982] all: renamed from lo (while UP)
[  288.663199][T14984] netlink: 'syz.4.3696': attribute type 21 has an invalid length.
[  288.672163][ T8379] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  288.676075][ T8379] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  288.679008][ T8379] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  288.681670][ T8379] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  288.735193][  T996] usb 9-1: Using ep0 maxpacket: 32
[  288.739197][  T996] usb 9-1: config 2 has an invalid interface number: 32 but max is 0
[  288.741921][  T996] usb 9-1: config 2 has no interface number 0
[  288.744149][  T996] usb 9-1: config 2 interface 32 has no altsetting 0
[  288.746954][T14989] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3698'.
[  288.749155][  T996] usb 9-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=6b.27
[  288.750374][T14989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3698'.
[  288.757776][  T996] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.760371][  T996] usb 9-1: Product: syz
[  288.761673][  T996] usb 9-1: Manufacturer: syz
[  288.763137][  T996] usb 9-1: SerialNumber: syz
[  288.838407][T14995] SET target dimension over the limit!
[  288.911182][T14999] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3703'.
[  288.989194][  T996] ums-cypress 9-1:2.32: USB Mass Storage device detected
[  289.116919][  T996] usb 9-1: USB disconnect, device number 2
[  289.523431][T15022] loop5: detected capacity change from 0 to 1024
[  289.638240][T15027] loop5: detected capacity change from 0 to 512
[  289.651700][T15027] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  289.686182][T15027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.691314][T15027] ext4 filesystem being mounted at /667/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.778393][ T9734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.893383][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3712'.
[  290.648073][T15098] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3739'.
[  290.652481][T15098] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3739'.
[  291.555483][T15132] overlayfs: failed to clone upperpath
[  291.709025][T15145] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3761'.
[  291.889834][T15157] loop8: detected capacity change from 0 to 8
[  292.126163][T15177] loop5: detected capacity change from 0 to 256
[  292.130023][T15177] vfat filesystem being mounted at /689/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x103901752)
[  292.205928][T15181] smb3: Unknown parameter 'overriderockperm'
[  292.723892][  T996] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  292.853079][ T5677] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  292.873121][  T996] usb 9-1: Using ep0 maxpacket: 8
[  292.878323][  T996] usb 9-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  292.881389][  T996] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.884159][  T996] usb 9-1: Product: syz
[  292.885573][  T996] usb 9-1: Manufacturer: syz
[  292.887169][  T996] usb 9-1: SerialNumber: syz
[  293.003094][ T5677] usb 6-1: Using ep0 maxpacket: 16
[  293.006844][ T5677] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11
[  293.009820][ T5677] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  293.013111][ T5677] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  293.016417][ T5677] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  293.019658][ T5677] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  293.022772][ T5677] usb 6-1: config 1 interface 0 has no altsetting 0
[  293.026214][ T5677] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  293.029209][ T5677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.042634][ T5677] ums-sddr09 6-1:1.0: USB Mass Storage device detected
[  293.129760][  T996] snd-ua101 9-1:1.1: invalid format type
[  293.132193][  T996] snd-ua101 9-1:1.0: invalid num_altsetting
[  293.159053][  T996] usb 9-1: USB disconnect, device number 3
[  293.188118][T15208] netlink: 'syz.4.3789': attribute type 2 has an invalid length.
[  293.194359][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3789'.
[  293.246785][ T5677] scsi host6: usb-storage 6-1:1.0
[  293.315733][T15219] vti0: entered promiscuous mode
[  293.317246][T15219] vti0: entered allmulticast mode
[  293.445345][  T996] usb 6-1: USB disconnect, device number 29
[  293.769734][T15240] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  294.122986][ T5619] Bluetooth: hci1: command 0x0406 tx timeout
[  294.145665][T15256] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12
[  294.432917][  T996] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[  294.596540][  T996] usb 6-1: config 246 has an invalid interface number: 166 but max is 0
[  294.601414][  T996] usb 6-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[  294.605256][  T996] usb 6-1: config 246 has no interface number 0
[  294.612561][  T996] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63
[  294.616770][  T996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.620903][  T996] usb 6-1: Product: syz
[  294.625927][  T996] usb 6-1: Manufacturer: syz
[  294.628897][  T996] usb 6-1: SerialNumber: syz
[  294.849483][  T996] usb 6-1: Cannot retrieve CPort count: -71
[  294.852155][  T996] usb 6-1: Cannot retrieve CPort count: -71
[  294.854949][  T996] es2_ap_driver 6-1:246.166: probe with driver es2_ap_driver failed with error -71
[  294.866057][  T996] usb 6-1: USB disconnect, device number 30
[  296.767753][T15292] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3825'.
[  296.870222][T15296] netlink: 'syz.4.3827': attribute type 2 has an invalid length.
[  297.431486][T15302] loop8: detected capacity change from 0 to 128
[  297.436239][T15302] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  297.544347][T15308] loop5: detected capacity change from 0 to 4096
[  297.580941][T15308] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  297.590134][T15308] ntfs3(loop5): Failed to load $Extend (-22).
[  297.593895][T15308] ntfs3(loop5): Failed to initialize $Extend.
[  297.766022][T15324] xt_hashlimit: size too large, truncated to 1048576
[  297.813901][ T5684] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  297.825064][T15325] x9: renamed from bridge_slave_0 (while UP)
[  297.833922][T15329] loop5: detected capacity change from 0 to 1024
[  297.973979][ T5684] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  297.978295][ T5684] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  297.982500][ T5684] usb 9-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  297.986427][ T5684] usb 9-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  297.993861][ T5684] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  297.997974][ T5684] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  298.001868][ T5684] usb 9-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  298.005929][ T5684] usb 9-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  298.015608][ T5684] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  298.019304][ T5684] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.022699][ T5684] usb 9-1: Product: syz
[  298.024513][ T5684] usb 9-1: Manufacturer: syz
[  298.026415][ T5684] usb 9-1: SerialNumber: syz
[  298.036731][ T5684] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected
[  298.040768][ T5684] ti_usb_3410_5052 9-1:2.0: missing endpoints
[  298.238438][   T24] usb 9-1: USB disconnect, device number 4
[  298.636912][T15345] Process accounting resumed
[  298.984818][T15366] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3859'.
[  299.447595][T15381] loop8: detected capacity change from 0 to 512
[  299.452152][T15381] EXT4-fs: Ignoring removed oldalloc option
[  299.463157][T15381] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  299.529133][T15381] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.3865: invalid indirect mapped block 83886080 (level 1)
[  299.533643][T15381] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  299.533964][T15381] EXT4-fs (loop8): Remounting filesystem read-only
[  299.538961][T15381] EXT4-fs (loop8): 1 orphan inode deleted
[  299.540791][T15381] EXT4-fs (loop8): 1 truncate cleaned up
[  299.542614][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  299.542623][    C1] EXT4-fs (loop8): initial error at time 6295560074: ext4_free_branches:1023: inode 16
[  299.542636][    C1] EXT4-fs (loop8): last error at time 6295560074: ext4_free_branches:1023: inode 16
[  299.551313][T15381] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.917147][T15399] loop5: detected capacity change from 0 to 164
[  299.942937][T15399] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  299.965349][T15399] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  299.969722][T15402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3874'.
[  299.986359][T15399] iso9660: Corrupted directory entry in block 4 of inode 1792
[  300.067819][T14307] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.235196][T15418] loop8: detected capacity change from 0 to 1024
[  300.257502][T15406] loop5: detected capacity change from 0 to 40427
[  300.257834][T15418] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.262894][T15406] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  300.275337][T15406] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  300.280627][T15406] F2FS-fs (loop5): invalid crc value
[  300.294720][T14307] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.364106][T15406] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  300.395139][T15406] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  300.399297][T15406] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  300.415895][T15406] fscrypt (loop5, inode 3): Error -61 getting encryption context
[  300.878451][T15458] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3898'.
[  300.957640][T15462] loop8: detected capacity change from 0 to 1024
[  300.970711][T15462] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  300.983350][T15462] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  300.988952][T15462] EXT4-fs (loop8): invalid journal inode
[  300.991314][T15462] EXT4-fs (loop8): can't get journal size
[  300.997780][T15462] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 17104912: comm syz.8.3900: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  301.005807][T15462] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  301.006163][T15462] EXT4-fs (loop8): failed to initialize system zone (-117)
[  301.012810][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  301.012825][    C1] EXT4-fs (loop8): initial error at time 6295560076: ext4_map_blocks:791: inode 3: block 17104912
[  301.012851][    C1] EXT4-fs (loop8): last error at time 6295560076: ext4_map_blocks:791: inode 3: block 17104912
[  301.040508][T15462] EXT4-fs (loop8): mount failed
[  301.357125][T15495] fuse: fd is not a fuse device
[  301.448613][T15502] ubi8: attaching mtd0
[  301.471148][T15502] ubi8: scanning is finished
[  301.487769][T15502] ubi8: empty MTD device detected
[  301.542001][ T5684] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  301.552292][T15510] netlink: 'syz.4.3923': attribute type 29 has an invalid length.
[  301.555406][T15510] netlink: 'syz.4.3923': attribute type 29 has an invalid length.
[  301.699799][T15502] ubi8: attached mtd0 (name "mtdram test device", size 0 MiB)
[  301.703204][T15502] ubi8: PEB size: 4096 bytes (4 KiB), LEB size: 385 bytes
[  301.705700][ T5684] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[  301.706228][T15502] ubi8: min./max. I/O unit sizes: 1/64, sub-page size 1
[  301.709551][ T5684] usb 6-1: config 0 has no interface number 0
[  301.712416][T15502] ubi8: VID header offset: 3647 (aligned 3647), data offset: 3711
[  301.712432][T15502] ubi8: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  301.712444][T15502] ubi8: user volume: 0, internal volumes: 1, max. volumes count: 2
[  301.712454][T15502] ubi8: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2433799616
[  301.712465][T15502] ubi8: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  301.724192][ T5684] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  301.724214][ T5684] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  301.730739][ T5684] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  301.736075][T15514] ubi8: background thread "ubi_bgt8d" started, PID 15514
[  301.736732][ T5684] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.754573][ T5684] usb 6-1: Product: syz
[  301.756228][ T5684] usb 6-1: Manufacturer: syz
[  301.758000][ T5684] usb 6-1: SerialNumber: syz
[  301.772175][ T5684] usb 6-1: config 0 descriptor??
[  301.776636][ T5684] yurex 6-1:0.50: Could not submitting URB
[  301.779075][ T5684] yurex 6-1:0.50: probe with driver yurex failed with error -5
[  301.785908][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3925'.
[  301.994337][ T5684] usb 6-1: USB disconnect, device number 31
[  302.162357][ T5677] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  302.333281][ T5677] usb 9-1: unable to get BOS descriptor or descriptor too short
[  302.336948][ T5677] usb 9-1: config 2 has an invalid interface number: 170 but max is 0
[  302.339584][ T5677] usb 9-1: config 2 has no interface number 0
[  302.341886][ T5677] usb 9-1: config 2 interface 170 has no altsetting 0
[  302.346837][ T5677] usb 9-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=f8.56
[  302.350425][ T5677] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.354011][ T5677] usb 9-1: Product: syz
[  302.355847][ T5677] usb 9-1: Manufacturer: syz
[  302.357940][ T5677] usb 9-1: SerialNumber: syz
[  302.587706][ T5677] usb 9-1: USB disconnect, device number 5
[  302.871428][  T996] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  303.021329][  T996] usb 6-1: Using ep0 maxpacket: 8
[  303.024456][  T996] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  303.028076][  T996] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  303.032749][  T996] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  303.035929][  T996] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  303.039955][  T996] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  303.043180][  T996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.249970][  T996] usb 6-1: GET_CAPABILITIES returned 0
[  303.254234][  T996] usbtmc 6-1:16.0: can't read capabilities
[  303.552771][ T5684] usb 6-1: USB disconnect, device number 32
[  303.555461][   T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  303.733861][   T24] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  303.738142][   T24] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  303.743036][   T24] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  303.747144][   T24] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  303.752509][   T24] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  303.755985][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.758731][   T24] usb 9-1: Product: syz
[  303.760313][   T24] usb 9-1: Manufacturer: syz
[  303.762315][   T24] usb 9-1: SerialNumber: syz
[  303.767933][   T24] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected
[  303.775682][   T24] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  303.779791][   T24] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  303.970036][T15540] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90
[  303.978802][   T24] usb 9-1: USB disconnect, device number 6
[  303.994445][   T24] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  304.022887][   T24] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  304.036116][   T24] ti_usb_3410_5052 9-1:2.0: device disconnected
[  304.133030][T15548] batadv_slave_1: entered promiscuous mode
[  304.136667][T15547] batadv_slave_1: left promiscuous mode
[  304.529102][T15565] kAFS: unable to lookup cell '(,c'
[  304.781178][T15585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.825060][T15588] veth0: entered allmulticast mode
[  305.068755][T15603] loop5: detected capacity change from 0 to 256
[  305.102716][T15603] vfat filesystem being mounted at /747/w5T)`)YFnA@T<3ڂ$rcnH<pr>wC" -8 supports timestamps until 2107-12-31 (0x10391447e)
[  305.297935][T15615] openvswitch: netlink: IP tunnel dst address not specified
[  305.532318][T15639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3983'.
[  305.585368][T15643] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.3985'.
[  305.617539][   T33] audit: type=1326 audit(6295560080.616:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.5.3987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  305.633828][   T33] audit: type=1326 audit(6295560080.616:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.5.3987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  305.653984][   T33] audit: type=1326 audit(6295560080.616:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.5.3987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  305.668770][   T33] audit: type=1326 audit(6295560080.616:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.5.3987" exe="/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  305.687414][   T33] audit: type=1326 audit(6295560080.616:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.5.3987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  305.708551][   T33] audit: type=1326 audit(6295560080.616:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.5.3987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  305.723524][T15658] netlink: 'syz.8.3992': attribute type 4 has an invalid length.
[  305.726598][   T33] audit: type=1326 audit(6295560080.616:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.5.3987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  305.739668][   T33] audit: type=1326 audit(6295560080.616:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.5.3987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  305.749648][   T33] audit: type=1326 audit(6295560080.616:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.5.3987" exe="/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  305.758786][T15658] netlink: 'syz.8.3992': attribute type 4 has an invalid length.
[  305.761384][   T33] audit: type=1326 audit(6295560080.616:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15646 comm="syz.5.3987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264259e019 code=0x7ffc0000
[  305.865726][T15675] loop8: detected capacity change from 0 to 256
[  305.868566][T15675] exfat: Deprecated parameter 'utf8'
[  305.870290][T15675] exfat: Deprecated parameter 'namecase'
[  305.877332][T15675] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0232f1a3, utbl_chksum : 0xe619d30d)
[  305.886378][T15675] exfat filesystem being mounted at /161/qY3aK supports timestamps until 2107-12-31 (0x10391447f)
[  306.087624][T15693] raw_sendmsg: syz.5.4009 forgot to set AF_INET. Fix it!
[  306.090830][T15691] overlayfs: failed to clone upperpath
[  306.995930][T15728] loop8: detected capacity change from 0 to 1024
[  307.002561][T15728] EXT4-fs: Ignoring removed orlov option
[  307.026261][T15728] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.082605][T14307] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.863925][T15756] loop8: detected capacity change from 0 to 2048
[  307.868307][T15756] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  307.887293][T15757] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  307.960546][ T5677] usb 6-1: new full-speed USB device number 33 using dummy_hcd
[  308.129401][ T5677] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  308.157696][ T5677] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  308.160615][ T5677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.163088][ T5677] usb 6-1: Product: syz
[  308.165902][ T5677] usb 6-1: Manufacturer: syz
[  308.167609][ T5677] usb 6-1: SerialNumber: syz
[  308.191993][ T5677] usb 6-1: config 0 descriptor??
[  308.198640][ T5677] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  308.412468][T15777] loop8: detected capacity change from 0 to 1024
[  308.430811][T15777] hfsplus: failed to load extents file
[  308.934234][ T5677] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  308.937164][ T5677] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  308.941292][ T5677] usb 6-1: USB disconnect, device number 33
[  309.491035][T15789] rpcbind: server 127.0.0.1 not responding, timed out
[  309.570400][T15798] loop5: detected capacity change from 0 to 2048
[  309.582955][T15798] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  309.621834][T15802] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4052'.
[  309.638930][T15802] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.643142][T15802] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.666112][T15802] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4052'.
[  310.037789][T15821] hugetlbfs: syz.4.4061 (15821): Using mlock ulimits for SHM_HUGETLB is obsolete
[  310.078199][T15823] IPv6: addrconf: prefix option has invalid lifetime
[  310.638571][T15827] loop5: detected capacity change from 0 to 128
[  310.722464][T15827] affs: No valid root block on device loop5
[  310.870853][T15841] netlink: 'syz.4.4071': attribute type 4 has an invalid length.
[  310.874186][T15841] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4071'.
[  310.880686][T15841] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  311.020576][T15847] loop5: detected capacity change from 0 to 4096
[  311.095889][T15847] ntfs3(loop5): Failed to load $Extend (-22).
[  311.098441][T15847] ntfs3(loop5): Failed to initialize $Extend.
[  311.143582][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  311.143596][   T33] audit: type=1800 audit(6295560086.147:139): pid=15847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4073" name="file1" dev="loop5" ino=30 res=0 errno=0
[  311.429257][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4080'.
[  311.462696][T15862] gretap0: entered promiscuous mode
[  311.492260][T15862] macvtap1: entered promiscuous mode
[  311.499609][T15862] macvtap1: entered allmulticast mode
[  311.515245][T15862] gretap0: entered allmulticast mode
[  311.721123][T15871] loop5: detected capacity change from 0 to 256
[  311.724859][T15871] exfat: Deprecated parameter 'utf8'
[  311.763699][T15871] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  311.770122][T15871] exfat filesystem being mounted at /794/file1 supports timestamps until 2107-12-31 (0x10391447f)
[  311.903531][T15875] netlink: 'syz.5.4087': attribute type 4 has an invalid length.
[  312.363075][T15891] netlink: 'syz.8.4095': attribute type 4 has an invalid length.
[  312.387651][T15881] loop5: detected capacity change from 0 to 32768
[  312.397072][T15881] *** Log Format Error ! ***
[  312.402366][T15881] lmLogInit: exit(-22)
[  312.406107][T15881] lmLogOpen: exit(-22)
[  312.407466][T15881] jfs_mount_rw failed, return code = -22
[  312.593986][T15913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4105'.
[  312.597728][T15913] openvswitch: netlink: IPv4 frag type 32 is out of range max 2
[  312.722538][T15919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4108'.
[  312.778575][T15921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4109'.
[  312.809583][   T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  312.982147][   T24] usb 9-1: unable to get BOS descriptor or descriptor too short
[  312.986621][   T24] usb 9-1: config 1 interface 0 altsetting 35 endpoint 0x81 has an invalid bInterval 21, changing to 8
[  312.991495][   T24] usb 9-1: config 1 interface 0 has no altsetting 0
[  312.996577][   T24] usb 9-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40
[  313.002041][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.005251][   T24] usb 9-1: Product: syz
[  313.006892][   T24] usb 9-1: Manufacturer: syz
[  313.008804][   T24] usb 9-1: SerialNumber: syz
[  313.223231][   T24] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input18
[  313.232337][ T5043] bcm5974 9-1:1.0: could not read from device
[  313.244413][ T5043] bcm5974 9-1:1.0: could not read from device
[  313.250169][   T24] usb 9-1: USB disconnect, device number 7
[  313.252654][ T5043] bcm5974 9-1:1.0: could not read from device
[  313.496794][T15941] loop5: detected capacity change from 0 to 512
[  313.500096][T15941] EXT4-fs: Ignoring removed nomblk_io_submit option
[  313.528791][T15941] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  313.549910][T15941] EXT4-fs (loop5): 1 truncate cleaned up
[  313.554344][T15941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.616259][ T9734] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.761865][T15951] sock: sock_timestamping_bind_phc: sock not bind to device
[  313.797664][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4125'.
[  313.807966][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4125'.
[  313.812593][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4125'.
[  317.082506][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  317.084606][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  378.519866][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  378.522397][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  401.066169][ T5626] Bluetooth: hci0: command 0x0406 tx timeout
[  439.941600][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  439.943672][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  501.376877][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  501.379788][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[  562.799109][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[  562.801825][ T1383] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
02:47:32  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000535913 RBX=ffffffff819b3f4c RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8e22dd4d RDI=ffffffff8c4be180 RBP=ffffffff8e807eb8 RSP=ffffffff8e807de0
R8 =ffff8881210338db R9 =1ffff1102420671b R10=dffffc0000000000 R11=ffffed102420671c
R12=0000000000000000 R13=1ffffffff1d11de8 R14=1ffffffff1d00fc4 R15=dffffc0000000000
RIP=ffffffff8bd1912f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818d94d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c6fa483680 CR3=000000000e946000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000080000010015 0000000c00000028 XMM01=0000000e00000001 0000000000000006
XMM02=0043004400010015 0000000000000040 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0000000000000051 0000000000000000
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=00326e6170772f74 656e2f307968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000441585 RBX=ffffffff819b4060 RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8e22dd4d RDI=ffffffff8c4be180 RBP=ffffc90000197f10 RSP=ffffc90000197e40
R8 =ffff88823c6338db R9 =1ffff110478c671b R10=dffffc0000000000 R11=ffffed10478c671c
R12=0000000000000000 R13=1ffff1102c096000 R14=1ffff92000032fd0 R15=dffffc0000000000
RIP=ffffffff8bd1912f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a8f4d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffca1644eac CR3=00000001768d4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=1080800800018003 0008000610005810
XMM02=010810000180040c 080004b608000100 XMM03=000008060a016ee8 1080800800018003
XMM04=0102de0008001790 0301080017880301 XMM05=0118100017800414 1000060102de0008
XMM06=0017900301080017 8803010000020806 XMM07=17800302a8100013 80040a1000060202
XMM08=e000080015a00300 0800159803000800 XMM09=6f666e69646f6d5f 44495f455551494e
XMM10=3966666666666666 660a37343533315f XMM11=51494e555f5f2072 2062303163326561
XMM12=4e555f5f20722063 3932643265613966 XMM13=5f6f666e69646f6d 5f44495f45555149
XMM14=6139666666666666 66660a3833363331 XMM15=5551494e555f5f20 7220356432643265
