last executing test programs:

3m33.917038004s ago: executing program 2 (id=910):
syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

3m32.808059062s ago: executing program 2 (id=913):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x2})
capset(&(0x7f0000000c80)={0x20071026}, &(0x7f0000000cc0)={0x0, 0x6, 0x2, 0x8000, 0x6, 0x7})
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)

3m32.645073059s ago: executing program 2 (id=915):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x40000103, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61154400000000006113100000000000bfa000000000000007000000ee00160e5e0301000000000014050000000000006916320000000000bf07000000000000360507000fff0720670600001f000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)

3m31.6391979s ago: executing program 2 (id=925):
syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00af268263b121dc03d7d9b98b9cdb76841d31005b31fdfd141b652968fbeae7aac982a517703dc5950f6728aecf5ec337b119ffd66d0a02970718ba573db352906385cece74366e628b6a775c9a6f6fff046416c6240e39a647186c4cf0b360bd17d4cdbd912dc61fd24e6f17d8"], 0x1, 0x152, &(0x7f00000007c0)="$eJzs0E1LKnEUx/Hf3Bnlcq/eBzKwFia0aEjMacRatdBIEtKBwk0rwSYKFCOhXBrRrkXQ1oXlVnwLlrWxRgh7E23cBS0n/o7Rw67977MZ5nsOh2FWlnoqgoAMx3KpuLdvlsvmVnDdSCc3ntrtuOhuAD8/zZ39qziwI54KMDgCRL7xAtu7BXMuXyqI90EcUAEkfjtdg7P7SzSf0+YhSaKp00Bn3Gn6aO9ji47apAIk/r7fsy+AGXHv/9s94BlApRZquZCxbNu2xfeepEJTY5LTm3cZq5sKzwbMUz050fD4ZWTN20skhvPHSDf8EGk1+z0rvWakjV5U1xeimqJpsb5xb6Vi1TMoq54DYPPLPTf8ASULHEvA+XA2uJa8ADr1F6P4Z7E++tfVQzkISJVaPud3NXK+fz8gq5BARERERERERERERERERET0Xa8BAAD//wFeZcY=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000240)=ANY=[], 0x25, 0x2)

3m31.466335953s ago: executing program 2 (id=929):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x100)
ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f0000000040))

3m31.1483106s ago: executing program 2 (id=931):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9d}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)

3m30.879924115s ago: executing program 32 (id=931):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9d}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)

1m58.403715055s ago: executing program 1 (id=1785):
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='map_files\x00')
getdents64(r0, 0x0, 0x43)

1m58.329255429s ago: executing program 1 (id=1788):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$xfs(&(0x7f0000015a80), &(0x7f0000015ac0)='./file0\x00', 0x0, &(0x7f0000015b00), 0x1, 0x15a5b, &(0x7f0000015b40)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80000, 0x0, 0x1, 0x0, &(0x7f0000000000))

1m57.432212393s ago: executing program 1 (id=1795):
r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000300)=""/147, 0x93}], 0x2}, 0x0, 0x40000103})
io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000200)='~', 0x1)

1m56.60123096s ago: executing program 1 (id=1800):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x48, &(0x7f00000003c0), 0x20, 0x51c, &(0x7f0000001e40)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[])

1m56.512486329s ago: executing program 1 (id=1801):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc})
ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000080)={0x8})

1m56.261470552s ago: executing program 1 (id=1804):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000340)=0xb382, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @remote, 0x1}], 0x1c)

1m56.195631541s ago: executing program 33 (id=1804):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000340)=0xb382, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @remote, 0x1}], 0x1c)

35.282729753s ago: executing program 3 (id=2751):
syz_usb_connect(0x0, 0xe4, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb31ae201d0640c11dc1000000010902d20001180000000904"], 0x0)

34.829158916s ago: executing program 4 (id=2759):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000900000038000380140002006261746164763000000000000000000008000100020000000800030000000000"], 0x4c}}, 0x0)

34.709408149s ago: executing program 4 (id=2760):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x4f4c, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x80000000000020c, 0x0)

34.373080319s ago: executing program 4 (id=2763):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000500)={0x55, 0x0, 'client1\x00', 0x0, "2cd367818b4014ff", "859e92f118c4484604734b1d43209426c1bd711b936fc2c4d28f902e94f8e647"})

33.970007752s ago: executing program 3 (id=2764):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x3}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x30}, 0x1, 0x40030000000000}, 0x5044)

33.969732194s ago: executing program 4 (id=2765):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)

33.861113986s ago: executing program 4 (id=2766):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f55, &(0x7f000000efc0)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000000100))
mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0))

33.860729894s ago: executing program 3 (id=2767):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x42, 0x5c})

33.772969943s ago: executing program 3 (id=2768):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f00000000c0)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@norecovery}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
lstat(&(0x7f0000000300)='./file2\x00', 0x0)

33.590322718s ago: executing program 3 (id=2770):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

33.312705092s ago: executing program 4 (id=2771):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0xe, 0x2, 0x0, "4b9c39f88e56d5d98deee9080b0de7611ebfeef3cef83f51fdb40f0aeab9e862"})

31.541211674s ago: executing program 3 (id=2785):
add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38)
sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x70}, 0xc0)

31.4353987s ago: executing program 34 (id=2785):
add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38)
sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x70}, 0xc0)

18.274031335s ago: executing program 35 (id=2771):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0xe, 0x2, 0x0, "4b9c39f88e56d5d98deee9080b0de7611ebfeef3cef83f51fdb40f0aeab9e862"})

1.610101906s ago: executing program 5 (id=3090):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'geneve1\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000003c0)="02030e00d3fc02000000ab5d86dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)

1.581834676s ago: executing program 5 (id=3091):
prctl$PR_SET_MM_EXE_FILE(0x36, 0xd, 0xffffffffffffffff)

1.52647121s ago: executing program 5 (id=3094):
unshare(0x22020400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0)
sigaltstack(0x0, 0x0)

1.437869314s ago: executing program 5 (id=3096):
syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000280)={[{@umask}, {@umask={'umask', 0x3d, 0xad460ad}}, {@nls={'nls', 0x3d, 'maccyrillic'}}, {@uid={'uid', 0x3d, 0xee01}}, {@nobarrier}, {@uid}]}, 0x20, 0x6de, &(0x7f0000000840)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/85, 0x55)

1.348709768s ago: executing program 5 (id=3098):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'netdevsim0\x00', @ifru_hwaddr})

1.199243544s ago: executing program 5 (id=3099):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504", @ANYRESDEC], 0x0)

375.379162ms ago: executing program 0 (id=3111):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r1)

375.174572ms ago: executing program 6 (id=3112):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10})
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

222.259842ms ago: executing program 6 (id=3113):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xfe00, 0x0, 0x71, 0x10, 0x1f}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80)

220.052144ms ago: executing program 0 (id=3114):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000200)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {0x0, 0x3}, {0x0, 0x0, 0xfffffffd}, {0x6}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa})
ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0)

139.844868ms ago: executing program 0 (id=3115):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x7, 0xc, 0xffffffff, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

139.563358ms ago: executing program 6 (id=3116):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r0, 0x891d, 0x0)

139.263401ms ago: executing program 6 (id=3117):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x80000000, 0x2e03dc12573180ad}}, 0x20)

139.055356ms ago: executing program 0 (id=3118):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x11000, 0x12}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x60040050)

50.212995ms ago: executing program 0 (id=3119):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0)

49.975528ms ago: executing program 6 (id=3120):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETA(r0, 0x560a, &(0x7f0000001040)={0x20, 0x3, 0x0, 0x20, 0x2, "08000000f28f00"})

121.651µs ago: executing program 0 (id=3121):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000faffffffb703000008400000b70600000000feff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10)
r5 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}})

0s ago: executing program 6 (id=3122):
r0 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xabd0, 0x400, 0x2, 0x349})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1)
r1 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x40, 0x0, 0x89, 0x0, r0})
io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1)

kernel console output (not intermixed with test programs):

1.197446][T10393] tipc: Resetting bearer <eth:syzkaller0>
[  241.217642][T10393] tipc: Disabling bearer <eth:syzkaller0>
[  241.271962][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  241.753394][    T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  241.757216][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.764451][    T9] usb 4-1: config 0 descriptor??
[  241.769204][    T9] cp210x 4-1:0.0: cp210x converter detected
[  242.113505][T10402] geneve2: entered promiscuous mode
[  242.115898][T10402] geneve2: entered allmulticast mode
[  242.186247][    T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  242.399232][    T9] usb 4-1: cp210x converter now attached to ttyUSB0
[  242.479184][T10408] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  242.594922][    T9] usb 4-1: USB disconnect, device number 11
[  242.608318][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  242.614847][    T9] cp210x 4-1:0.0: device disconnected
[  243.178489][T10430] loop3: detected capacity change from 0 to 256
[  243.183463][T10430] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  244.137786][   T33] kauditd_printk_skb: 102 callbacks suppressed
[  244.137836][   T33] audit: type=1326 audit(1755177369.787:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10431 comm="syz.3.1649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2718ebe9 code=0x7fc00000
[  244.708061][T10452] loop1: detected capacity change from 0 to 4096
[  245.409875][T10474] loop1: detected capacity change from 0 to 256
[  245.487015][ T5239] Bluetooth: hci1: unknown advertising packet type: 0x82
[  245.487048][ T5239] Bluetooth: hci1: Dropping invalid advertising data
[  245.494917][ T5239] Bluetooth: hci1: Malformed LE Event: 0x02
[  245.561354][T10480] loop1: detected capacity change from 0 to 1024
[  245.775127][T10484] loop1: detected capacity change from 0 to 256
[  245.785395][T10484] exfat: Deprecated parameter 'utf8'
[  245.795882][T10484] exfat: Deprecated parameter 'namecase'
[  245.798274][T10484] exfat: Deprecated parameter 'utf8'
[  245.810013][T10484] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x389a3796, utbl_chksum : 0xe619d30d)
[  246.439968][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1675'.
[  246.443714][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1675'.
[  247.040413][T10522] sctp: [Deprecated]: syz.0.1688 (pid 10522) Use of int in maxseg socket option.
[  247.040413][T10522] Use struct sctp_assoc_value instead
[  247.560877][T10528] bpf: Bad value for 'mode'
[  247.622735][T10530] loop3: detected capacity change from 0 to 2048
[  247.672446][T10533] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  247.685581][T10533] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  247.689582][T10533] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  247.698632][T10533] Remounting filesystem read-only
[  248.364103][T10545] loop3: detected capacity change from 0 to 131072
[  248.370282][T10545] F2FS-fs (loop3): Invalid log sectors per block(570425347) log sectorsize(9)
[  248.373700][T10545] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  248.381544][T10545] F2FS-fs (loop3): invalid crc value
[  248.429246][T10545] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix.
[  248.438436][T10545] F2FS-fs (loop3): Bad quota inode 2:50331648
[  248.440653][T10545] F2FS-fs (loop3): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix.
[  248.445396][T10545] F2FS-fs (loop3): Cannot turn on quotas: error -22
[  248.447984][T10545] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  248.454100][T10545] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  248.456854][T10545] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b
[  248.901462][T10571] loop1: detected capacity change from 0 to 1024
[  249.062956][T10574] hfsplus: xattr search failed
[  249.820779][T10588] batadv_slave_1: entered promiscuous mode
[  249.824346][T10587] batadv_slave_1: left promiscuous mode
[  251.690691][T10628] overlayfs: failed to clone upperpath
[  251.725981][T10630] loop3: detected capacity change from 0 to 256
[  251.821301][T10630] FAT-fs (loop3): Directory bread(block 64) failed
[  251.824410][T10630] FAT-fs (loop3): Directory bread(block 65) failed
[  251.832025][T10630] FAT-fs (loop3): Directory bread(block 66) failed
[  251.842546][T10630] FAT-fs (loop3): Directory bread(block 67) failed
[  251.845285][T10630] FAT-fs (loop3): Directory bread(block 68) failed
[  251.848129][T10630] FAT-fs (loop3): Directory bread(block 69) failed
[  251.858228][T10630] FAT-fs (loop3): Directory bread(block 70) failed
[  251.860932][T10630] FAT-fs (loop3): Directory bread(block 71) failed
[  251.871539][T10630] FAT-fs (loop3): Directory bread(block 72) failed
[  251.880207][T10630] FAT-fs (loop3): Directory bread(block 73) failed
[  252.082425][T10642] netlink: 'syz.3.1742': attribute type 10 has an invalid length.
[  252.085519][T10642] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1742'.
[  252.169284][T10652] 9pnet_fd: Insufficient options for proto=fd
[  252.174179][T10648] IPVS: Scheduler module ip_vs_sip not found
[  253.325350][T10665] 9pnet_fd: p9_fd_create_tcp (10665): problem connecting socket to 127.0.0.1
[  253.522511][ T5239] Bluetooth: hci0: unexpected cc 0x204b length: 9 > 3
[  253.525448][ T5239] Bluetooth: hci0: unexpected event for opcode 0x204b
[  253.685998][T10682] Bluetooth: hci0: service_discovery: too big uuid_count value 33022
[  254.063890][T10697] loop1: detected capacity change from 0 to 512
[  254.072930][T10697] EXT4-fs: Ignoring removed nobh option
[  254.126321][T10697] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1767: corrupted inode contents
[  254.161938][T10697] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.1767: mark_inode_dirty error
[  254.169924][T10697] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1767: corrupted inode contents
[  254.192385][T10697] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1767: mark_inode_dirty error
[  254.213277][T10697] Quota error (device loop1): write_blk: dquota write failed
[  254.216626][T10697] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  254.220715][T10697] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1767: Failed to acquire dquot type 0
[  254.244719][T10697] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1767: corrupted inode contents
[  254.265802][T10697] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.1767: mark_inode_dirty error
[  254.270600][T10697] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1767: corrupted inode contents
[  254.282237][T10697] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1767: mark_inode_dirty error
[  254.292045][T10697] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1767: corrupted inode contents
[  254.318931][T10697] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  254.342375][T10697] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1767: corrupted inode contents
[  254.349083][T10697] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.1767: mark_inode_dirty error
[  254.364636][T10697] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  254.372898][T10697] EXT4-fs (loop1): 1 truncate cleaned up
[  254.377002][T10697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.383430][T10697] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.428439][ T9028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.552380][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.555127][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.987158][T10753] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  255.991395][T10753] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.625088][T10751] loop1: detected capacity change from 0 to 131072
[  256.666426][T10751] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  256.706527][T10751] XFS (loop1): Starting recovery (logdev: internal)
[  256.725353][T10751] XFS (loop1): Ending recovery (logdev: internal)
[  256.777291][ T9028] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  257.648217][T10788] loop1: detected capacity change from 0 to 512
[  257.677073][T10788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.682876][T10788] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.736899][ T9028] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  257.762095][ T9028] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  257.918685][ T9909] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.109155][   T51] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  258.263503][   T51] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  258.271788][   T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  258.275964][   T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  258.295389][   T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 54, changing to 9
[  258.299610][   T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 8237, setting to 1024
[  258.314095][   T51] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  258.317717][   T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.320822][   T51] usb 4-1: Product: syz
[  258.327870][   T51] usb 4-1: Manufacturer: syz
[  258.329863][   T51] usb 4-1: SerialNumber: syz
[  258.340271][   T51] usb 4-1: config 0 descriptor??
[  258.354967][   T51] iguanair 4-1:0.0: failed to submit urb: -90
[  258.357610][   T51] iguanair 4-1:0.0: probe with driver iguanair failed with error -90
[  258.427829][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  258.434475][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  258.438845][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  258.447036][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  258.450465][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  258.579526][   T51] usb 4-1: USB disconnect, device number 12
[  258.976009][ T5883] bridge0: port 3(batadv0) entered disabled state
[  258.981205][ T5883] bridge_slave_1: left allmulticast mode
[  258.987027][ T5883] bridge_slave_1: left promiscuous mode
[  258.989680][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.018933][ T5883] bridge_slave_0: left allmulticast mode
[  259.021378][ T5883] bridge_slave_0: left promiscuous mode
[  259.039069][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.340161][   T33] audit: type=1326 audit(1755177384.987:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.0.1808" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f448cb8ebe9 code=0x0
[  259.525391][ T5883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.530499][ T5883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.535093][ T5883] bond0 (unregistering): Released all slaves
[  259.681107][ T5883] bond1 (unregistering): Released all slaves
[  259.723195][T10798] chnl_net:caif_netlink_parms(): no params data found
[  259.807228][ T5883] tipc: Left network mode
[  259.929994][T10798] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.935448][T10798] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.938474][T10798] bridge_slave_0: entered allmulticast mode
[  259.942894][T10798] bridge_slave_0: entered promiscuous mode
[  259.944398][T10822] loop3: detected capacity change from 0 to 4096
[  259.947352][T10798] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.950879][T10798] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.957735][T10822] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  259.967200][T10798] bridge_slave_1: entered allmulticast mode
[  259.980987][T10798] bridge_slave_1: entered promiscuous mode
[  259.992183][T10822] ntfs3(loop3): ino=5, mi_enum_attr
[  259.994727][T10822] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  260.089581][T10798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.108906][T10798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.140743][T10824] loop3: detected capacity change from 0 to 1024
[  260.176182][ T5883] hsr_slave_0: left promiscuous mode
[  260.202066][ T5883] hsr_slave_1: left promiscuous mode
[  260.206444][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.213049][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.239890][ T3578] hfsplus: b-tree write err: -5, ino 4
[  260.379590][T10837] loop3: detected capacity change from 0 to 512
[  260.452688][T10837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.457086][T10837] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.506695][ T5864] Bluetooth: hci2: command tx timeout
[  260.513640][ T8301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.610191][T10842] loop3: detected capacity change from 0 to 128
[  260.618391][T10842] hpfs: Unexpected value for 'help'
[  261.062513][ T5883] team_slave_1 (unregistering): left allmulticast mode
[  261.066665][ T5883] team0 (unregistering): Port device team_slave_1 removed
[  261.126175][ T5883] team_slave_0 (unregistering): left allmulticast mode
[  261.130157][ T5883] team0 (unregistering): Port device team_slave_0 removed
[  261.824322][T10798] team0: Port device team_slave_0 added
[  261.844731][T10798] team0: Port device team_slave_1 added
[  261.936154][T10798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.939086][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.969995][T10798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.988928][T10798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.992048][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.002367][T10798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  262.138023][T10798] hsr_slave_0: entered promiscuous mode
[  262.140580][T10798] hsr_slave_1: entered promiscuous mode
[  262.144000][T10798] debugfs: 'hsr0' already exists in 'hsr'
[  262.146212][T10798] Cannot create hsr debugfs directory
[  262.215912][ T5883] IPVS: stop unused estimator thread 0...
[  262.352545][   T51] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  262.429698][T10798] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  262.438788][T10798] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  262.451051][T10798] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  262.460594][T10798] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  262.513809][   T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  262.522231][   T51] usb 4-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00
[  262.529327][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.538240][   T51] usb 4-1: config 0 descriptor??
[  262.583777][ T5864] Bluetooth: hci2: command tx timeout
[  262.605099][T10798] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.654167][T10798] 8021q: adding VLAN 0 to HW filter on device team0
[  262.665008][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.667813][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.679009][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.682144][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.895924][T10798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.958914][   T51] wacom 0003:056A:00B2.000D: Unknown device_type for 'HID 056a:00b2'. Assuming pen.
[  262.978776][   T51] wacom 0003:056A:00B2.000D: hidraw0: USB HID v0.00 Device [HID 056a:00b2] on usb-dummy_hcd.3-1/input0
[  263.014961][   T51] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B2.000D/input/input13
[  263.158126][   T51] usb 4-1: USB disconnect, device number 13
[  263.309440][T10798] veth0_vlan: entered promiscuous mode
[  263.318250][T10798] veth1_vlan: entered promiscuous mode
[  263.359123][T10798] veth0_macvtap: entered promiscuous mode
[  263.367766][T10798] veth1_macvtap: entered promiscuous mode
[  263.380822][T10798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.392785][T10798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.403450][ T5884] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.425032][ T5884] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.428786][ T5884] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.439778][ T5719] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.555485][  T178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.558320][  T178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.621682][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.624295][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.833407][T10919] loop3: detected capacity change from 0 to 2048
[  263.849946][T10919] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  263.860193][ T6145] udevd[6145]: incorrect nilfs2 checksum on /dev/loop3
[  263.880190][T10919] NILFS (loop3): mounting unchecked fs
[  263.896386][ T6145] udevd[6145]: incorrect nilfs2 checksum on /dev/loop3
[  263.925850][T10919] NILFS (loop3): recovery complete
[  263.945659][T10923] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  264.336780][T10937] loop3: detected capacity change from 0 to 1024
[  264.405543][T10937] hfsplus: xattr searching failed
[  264.418848][T10937] hfsplus: xattr searching failed
[  264.465151][   T35] hfsplus: b-tree write err: -5, ino 3
[  264.506139][T10945] cgroup: Name too long
[  264.672631][ T5864] Bluetooth: hci2: command tx timeout
[  264.720057][T10957] loop3: detected capacity change from 0 to 512
[  264.786068][T10957] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1841: bg 0: block 248: padding at end of block bitmap is not set
[  264.802315][T10957] Quota error (device loop3): write_blk: dquota write failed
[  264.805291][T10957] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  264.809124][T10957] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1841: Failed to acquire dquot type 1
[  264.842190][T10957] EXT4-fs (loop3): 1 truncate cleaned up
[  264.859901][T10957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.884092][T10957] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.895327][T10957] EXT4-fs (loop3): shut down requested (2)
[  265.072777][ T8301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.565345][T10993] netlink: 'syz.0.1850': attribute type 3 has an invalid length.
[  265.569282][T10993] netlink: 'syz.0.1850': attribute type 3 has an invalid length.
[  265.577915][T10993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1850'.
[  266.688512][T11028] loop4: detected capacity change from 0 to 1024
[  266.705695][T11028] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  266.741432][T11028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.755830][ T5864] Bluetooth: hci2: command tx timeout
[  266.764249][T11028] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.1864: missing EA_INODE flag
[  266.775242][T11028] EXT4-fs (loop4): Remounting filesystem read-only
[  266.779842][T11028] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  266.850055][T10798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.908167][T11037] loop4: detected capacity change from 0 to 1024
[  266.912677][T11037] EXT4-fs: Ignoring removed oldalloc option
[  266.923782][T11037] EXT4-fs: Ignoring removed bh option
[  266.950455][T11037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.299100][T10798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.885861][T11066] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1879'.
[  267.888824][T11066] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.081827][T10807] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  268.384628][T10807] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  268.389461][T10807] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  268.395660][T10807] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  268.402187][T10807] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  268.405945][T10807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.414625][T11064] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  268.964096][T10807] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[  268.976222][T10807] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input16
[  269.008871][T10807] usb 5-1: USB disconnect, device number 2
[  269.011349][    C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  269.186140][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1888'.
[  269.311560][T11096] loop3: detected capacity change from 0 to 512
[  269.328134][T11096] EXT4-fs: Ignoring removed i_version option
[  269.333014][T11096] EXT4-fs: Ignoring removed nobh option
[  269.340641][T11096] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  269.349050][T11096] EXT4-fs (loop3): 1 truncate cleaned up
[  269.360009][T11096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.461003][ T8301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.608772][T11113] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  269.656812][T11113] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  270.806212][T11149] loop4: detected capacity change from 0 to 2048
[  270.827702][T11149] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  271.293596][   T33] audit: type=1326 audit(1755177396.887:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.4.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80b8ebe9 code=0x7ffc0000
[  271.359648][   T33] audit: type=1326 audit(1755177396.887:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.4.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fab80b8ebe9 code=0x7ffc0000
[  271.458143][   T33] audit: type=1326 audit(1755177396.887:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.4.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80b8ebe9 code=0x7ffc0000
[  271.468831][   T33] audit: type=1326 audit(1755177396.887:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.4.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fab80b8ebe9 code=0x7ffc0000
[  271.477823][   T33] audit: type=1326 audit(1755177396.887:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.4.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80b8ebe9 code=0x7ffc0000
[  271.487097][   T33] audit: type=1326 audit(1755177396.887:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.4.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fab80b8ebe9 code=0x7ffc0000
[  271.497402][   T33] audit: type=1326 audit(1755177396.897:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.4.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80b8ebe9 code=0x7ffc0000
[  271.509751][   T33] audit: type=1326 audit(1755177396.897:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.4.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fab80b8ebe9 code=0x7ffc0000
[  271.525585][   T33] audit: type=1326 audit(1755177396.907:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.4.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80b8ebe9 code=0x7ffc0000
[  271.535544][   T33] audit: type=1326 audit(1755177396.907:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.4.1915" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab80b8d550 code=0x7ffc0000
[  271.581799][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  271.733478][    T9] usb 5-1: Using ep0 maxpacket: 32
[  271.746497][    T9] usb 5-1: config 0 has an invalid interface number: 155 but max is 0
[  271.749841][    T9] usb 5-1: config 0 has no interface number 0
[  271.766416][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c
[  271.770000][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.785094][    T9] usb 5-1: Product: syz
[  271.786787][    T9] usb 5-1: Manufacturer: syz
[  271.788628][    T9] usb 5-1: SerialNumber: syz
[  271.802892][    T9] usb 5-1: config 0 descriptor??
[  273.337965][T11189] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  273.801421][T11214] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1937'.
[  273.902160][T11217] netlink: 'syz.0.1938': attribute type 4 has an invalid length.
[  273.928474][    T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.155/input/input17
[  273.958022][ T5284] bcm5974 5-1:0.155: could not read from device
[  274.002158][ T5284] bcm5974 5-1:0.155: could not read from device
[  274.005576][    T9] usb 5-1: USB disconnect, device number 3
[  274.015885][ T5284] bcm5974 5-1:0.155: could not read from device
[  274.022585][ T5284] bcm5974 5-1:0.155: could not read from device
[  274.049553][T11219] loop4: detected capacity change from 0 to 128
[  274.082608][T11219] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  274.121819][T11219] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  274.146548][T11219] EXT4-fs (loop4): shut down requested (1)
[  274.163973][T11219] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  274.219540][T11225] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  274.234235][T10798] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  274.781858][    T9] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  274.933539][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  274.936820][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  274.940370][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  274.948368][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.957479][    T9] usb 4-1: config 0 descriptor??
[  274.960746][T11244] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  275.155704][T11268] sctp: [Deprecated]: syz.0.1960 (pid 11268) Use of struct sctp_assoc_value in delayed_ack socket option.
[  275.155704][T11268] Use struct sctp_sack_info instead
[  275.177617][   T51] usb 4-1: USB disconnect, device number 14
[  275.217017][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1960'.
[  276.011918][T11292] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1967'.
[  276.095286][T11297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  276.818562][T11346] loop4: detected capacity change from 0 to 512
[  276.829708][T11345] loop3: detected capacity change from 0 to 2048
[  276.843948][T11345] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  276.853000][T11345] NILFS (loop3): mounting unchecked fs
[  276.890802][T11345] NILFS (loop3): recovery complete
[  276.917163][T11348] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  277.045502][T11351] loop4: detected capacity change from 0 to 128
[  277.061994][T11351] EXT4-fs (loop4): Test dummy encryption mode enabled
[  277.076166][T11351] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  277.113685][T11351] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  277.215172][T11356] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  277.230746][T11355] netlink: 'syz.3.1987': attribute type 32 has an invalid length.
[  277.291250][   T33] kauditd_printk_skb: 38 callbacks suppressed
[  277.291283][   T33] audit: type=1800 audit(1755177402.937:241): pid=11356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1986" name="file2" dev="loop4" ino=12 res=0 errno=0
[  277.312285][   T33] audit: type=1800 audit(1755177402.957:242): pid=11351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1986" name="file1" dev="loop4" ino=13 res=0 errno=0
[  277.323825][T11351] EXT4-fs (loop4): Online defrag not supported for encrypted files
[  277.760856][T10798] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  277.864105][   T33] audit: type=1326 audit(1755177403.517:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.4.1989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80b8ebe9 code=0x7ffc0000
[  277.871045][   T33] audit: type=1326 audit(1755177403.517:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.4.1989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80b8ebe9 code=0x7ffc0000
[  277.909038][T11383] netlink: 'syz.3.1993': attribute type 1 has an invalid length.
[  277.916462][   T33] audit: type=1326 audit(1755177403.537:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.4.1989" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab80b8ebe9 code=0x7ffc0000
[  277.936171][   T33] audit: type=1326 audit(1755177403.537:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.4.1989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80b8ebe9 code=0x7ffc0000
[  277.957021][   T33] audit: type=1326 audit(1755177403.537:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.4.1989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80b8ebe9 code=0x7ffc0000
[  277.987313][   T33] audit: type=1326 audit(1755177403.537:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.4.1989" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab80b8ebe9 code=0x7ffc0000
[  278.011546][   T33] audit: type=1326 audit(1755177403.537:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.4.1989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab80b8ebe9 code=0x7ffc0000
[  278.034687][   T33] audit: type=1326 audit(1755177403.547:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.4.1989" exe="/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fab80b8ebe9 code=0x7ffc0000
[  278.105048][T11392] loop3: detected capacity change from 0 to 256
[  278.130873][T11392] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  278.145459][T11392] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  278.149336][T11392] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  278.157007][T11392] UDF-fs: Scanning with blocksize 512 failed
[  278.161103][T11392] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  278.168864][T11392] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  278.402808][T11408] loop4: detected capacity change from 0 to 512
[  278.432004][T11408] EXT4-fs (loop4): Test dummy encryption mode enabled
[  278.436715][T11408] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  278.444129][T11408] EXT4-fs (loop4): 1 truncate cleaned up
[  278.448495][T11408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.481445][T10798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.533272][T11411] loop4: detected capacity change from 0 to 512
[  278.539143][T11411] EXT4-fs: Ignoring removed nomblk_io_submit option
[  278.544144][T11411] EXT4-fs: Ignoring removed nomblk_io_submit option
[  278.547711][T11411] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  278.559563][T11411] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  278.565318][T11411] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  278.579907][T11411] EXT4-fs (loop4): 1 truncate cleaned up
[  278.583994][T10807] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  278.592399][T11411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.615546][T11411] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  278.636089][T10798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.746464][T10807] usb 4-1: Using ep0 maxpacket: 8
[  278.754245][T10807] usb 4-1: config index 0 descriptor too short (expected 1821, got 853)
[  278.760759][T10807] usb 4-1: config 0 has an invalid interface number: 103 but max is 2
[  278.764406][T10807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  278.768690][T10807] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  278.774890][T10807] usb 4-1: config 0 has no interface number 1
[  278.777675][T10807] usb 4-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  278.782702][T10807] usb 4-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  278.787394][T10807] usb 4-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x8, skipping
[  278.792910][T10807] usb 4-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[  278.797834][T10807] usb 4-1: config 0 interface 103 has no altsetting 0
[  278.812102][T10807] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4
[  278.815819][T10807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.819017][T10807] usb 4-1: Product: syz
[  278.820751][T10807] usb 4-1: Manufacturer: syz
[  278.824782][T10807] usb 4-1: SerialNumber: syz
[  278.832223][T10807] usb 4-1: config 0 descriptor??
[  279.325093][T10807] videodev: could not get a free minor
[  279.327493][T10807] dsbr100 4-1:0.0: couldn't register video device
[  279.330392][T10807] dsbr100 4-1:0.0: probe with driver dsbr100 failed with error -23
[  279.337161][T10807] usb 4-1: USB disconnect, device number 15
[  279.605865][T11429] veth1_to_bond: entered allmulticast mode
[  279.610315][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2008'.
[  279.702804][T11429] bond0: (slave bond_slave_1): Releasing backup interface
[  279.732871][T11429] veth1_to_bond (unregistering): left allmulticast mode
[  279.919669][T11443] smb3: Unknown parameter 'acl!ῂeL	1bwVM_w9'
[  279.978967][T11448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2017'.
[  279.984888][T11448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2017'.
[  279.989109][T11448] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2017'.
[  280.153735][T11457] netlink: 'syz.0.2022': attribute type 16 has an invalid length.
[  280.156397][T11457] netlink: 'syz.0.2022': attribute type 17 has an invalid length.
[  280.182960][T11457] gretap0: entered promiscuous mode
[  280.196334][T11457] 8021q: adding VLAN 0 to HW filter on device team0
[  280.206389][T11457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  281.237060][T11493] veth0_to_bridge: entered promiscuous mode
[  281.240764][T11492] veth0_to_bridge: left promiscuous mode
[  281.399499][T11503] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  281.702812][T10807] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  281.851790][T10807] usb 5-1: Using ep0 maxpacket: 16
[  281.858321][T10807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  281.866077][T10807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  281.871297][T10807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  281.881579][T10807] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  281.885468][T10807] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  281.895418][T10807] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  281.899015][T10807] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  281.903814][T10807] usb 5-1: Manufacturer: syz
[  281.908957][T10807] usb 5-1: config 0 descriptor??
[  282.162737][T10807] rc_core: IR keymap rc-hauppauge not found
[  282.164796][T10807] Registered IR keymap rc-empty
[  282.167093][T10807] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  282.181989][T10807] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  282.208378][T10807] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  282.214066][T10807] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18
[  282.222172][T10807] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  282.245977][T10807] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  282.271884][T10807] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  282.293386][T10807] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  282.312719][T10807] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  282.332304][T10807] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  282.355010][T10807] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  282.371959][T10807] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  282.394570][T10807] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  282.421841][T10807] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  282.443135][T10807] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  282.471273][T10807] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  282.474377][T10807] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  282.566798][   T10] usb 5-1: USB disconnect, device number 4
[  283.377644][T11545] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2057'.
[  283.382027][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2057'.
[  284.614103][T11572] overlayfs: statfs failed on './file0'
[  284.994444][T11591] loop3: detected capacity change from 0 to 4096
[  285.038218][T11592] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  285.177684][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'.
[  285.181280][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'.
[  285.801770][   T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  285.809951][T11645] loop4: detected capacity change from 0 to 256
[  285.918860][T11647] (syz.4.2107,11647,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  285.924095][T11647] (syz.4.2107,11647,0):ocfs2_fill_super:1177 ERROR: status = -22
[  285.936784][T11649] overlayfs: failed to clone upperpath
[  285.957085][   T10] usb 4-1: Using ep0 maxpacket: 32
[  285.964090][   T10] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  285.968509][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  285.970977][   T10] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  285.976003][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.976124][T11651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2109'.
[  285.980931][   T10] usb 4-1: config 0 descriptor??
[  286.094180][T11651] team0: Port device team_slave_0 removed
[  286.567985][   T10] hid-retrode 0003:0403:97C1.000E: unknown main item tag 0x1
[  286.584201][   T10] hid-retrode 0003:0403:97C1.000E: item fetching failed at offset 4/5
[  286.622629][   T10] hid-retrode 0003:0403:97C1.000E: probe with driver hid-retrode failed with error -22
[  286.743019][   T10] usb 4-1: USB disconnect, device number 16
[  286.945586][T11685] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  286.955975][T11685] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  286.991446][T11687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2122'.
[  286.995480][T11687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2122'.
[  287.428547][T11703] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2130'.
[  287.739846][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'.
[  287.777805][T11705] loop4: detected capacity change from 0 to 32768
[  287.803151][T11705] (syz.4.2131,11705,1):ocfs2_verify_userspace_stack:858 ERROR: cluster stack passed to mount, but this filesystem does not support it
[  287.810257][T11705] (syz.4.2131,11705,1):ocfs2_fill_super:1177 ERROR: status = -22
[  288.348287][ T5239] Bluetooth: hci1: command 0x0406 tx timeout
[  288.401954][   T51] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  288.554091][   T51] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  288.561682][   T51] usb 5-1: config 0 interface 0 has no altsetting 0
[  288.564345][   T51] usb 5-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00
[  288.568012][   T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.591505][   T51] usb 5-1: config 0 descriptor??
[  288.599120][T11729] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  288.868883][T11752] loop3: detected capacity change from 0 to 32768
[  288.893035][T11752] jfs_mount: Mount Failure: File System Dirty.
[  288.896055][T11752] Mount JFS Failure: -22
[  288.914992][T11752] jfs_mount failed w/return code = -22
[  288.969863][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2154'.
[  289.014878][   T51] thrustmaster 0003:044F:B323.000F: unknown main item tag 0x2
[  289.017716][   T51] thrustmaster 0003:044F:B323.000F: item fetching failed at offset 4/5
[  289.021527][   T51] thrustmaster 0003:044F:B323.000F: parse failed
[  289.040102][   T51] thrustmaster 0003:044F:B323.000F: probe with driver thrustmaster failed with error -22
[  289.229514][   T10] usb 5-1: USB disconnect, device number 5
[  289.531909][    T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  289.682587][    T9] usb 4-1: Using ep0 maxpacket: 32
[  289.690947][    T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  289.694469][    T9] usb 4-1: config 0 has no interface number 0
[  289.699705][    T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  289.703802][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.706916][    T9] usb 4-1: Product: syz
[  289.708785][    T9] usb 4-1: Manufacturer: syz
[  289.710620][    T9] usb 4-1: SerialNumber: syz
[  289.717172][    T9] usb 4-1: config 0 descriptor??
[  289.724702][    T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  289.929456][    T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  289.957564][    T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  290.122435][T11787] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2168'.
[  290.133871][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 97
[  290.137281][T11787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  290.339526][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  290.341892][T10911] usb 4-1: USB disconnect, device number 17
[  290.372137][T10911] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  290.406313][T10911] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  290.440551][T10911] quatech2 4-1:0.51: device disconnected
[  291.393437][ T2397] pvrusb2: request_firmware fatal error with code=-110
[  291.395710][ T2397] pvrusb2: Failure uploading firmware1
[  291.397514][ T2397] pvrusb2: Device initialization was not successful.
[  291.416467][ T2397] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  291.419925][ T2397] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  291.428601][ T2397] pvrusb2: Failed to submit write-control URB status=-19
[  291.430629][ T6487] pvrusb2: Device being rendered inoperable
[  291.433967][ T2397] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  291.437399][ T2397] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  291.947720][T11831] ubi31: attaching mtd0
[  291.958710][T11831] ubi31: scanning is finished
[  291.960889][T11831] ubi31: empty MTD device detected
[  292.088237][T11831] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  292.091099][T11831] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  292.095777][T11831] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  292.103210][T11831] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  292.106147][T11831] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  292.110641][T11831] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  292.117633][T11831] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 657389150
[  292.121114][T11831] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  292.125218][T11838] ubi31: background thread "ubi_bgt31d" started, PID 11838
[  292.283174][T11842] overlayfs: failed to clone upperpath
[  292.397245][T11844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2196'.
[  293.225862][T11859] fuse: Bad value for 'fd'
[  293.256946][T11862] Invalid ELF header magic: != ELF
[  293.314465][T11854] loop4: detected capacity change from 0 to 40427
[  293.334224][T11854] F2FS-fs (loop4): Image doesn't support compression
[  293.336410][T11854] F2FS-fs (loop4): build fault injection rate: 690
[  293.347849][T11854] F2FS-fs (loop4): invalid crc value
[  293.437979][T11854] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  293.444905][T11854] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  293.467457][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  293.467476][   T33] audit: type=1800 audit(1755177419.117:255): pid=11854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2200" name="file1" dev="loop4" ino=10 res=0 errno=0
[  293.500916][T10798] syz-executor: attempt to access beyond end of device
[  293.500916][T10798] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  293.510247][T10798] CPU: 0 UID: 0 PID: 10798 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  293.510273][T10798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  293.510283][T10798] Call Trace:
[  293.510289][T10798]  <TASK>
[  293.510296][T10798]  dump_stack_lvl+0x189/0x250
[  293.510324][T10798]  ? __pfx_dump_stack_lvl+0x10/0x10
[  293.510339][T10798]  ? __pfx_queue_work_on+0x10/0x10
[  293.510353][T10798]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  293.510370][T10798]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  293.510392][T10798]  f2fs_handle_critical_error+0x37c/0x540
[  293.510414][T10798]  f2fs_write_end_io+0x886/0xb60
[  293.510442][T10798]  __submit_merged_bio+0x27a/0x6a0
[  293.510469][T10798]  __submit_merged_write_cond+0x255/0x530
[  293.510496][T10798]  f2fs_write_data_pages+0x261d/0x3000
[  293.510552][T10798]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  293.510629][T10798]  ? folios_put_refs+0x559/0x640
[  293.510657][T10798]  ? __lock_acquire+0xab9/0xd20
[  293.510684][T10798]  ? do_raw_spin_lock+0x121/0x290
[  293.510710][T10798]  ? do_raw_spin_unlock+0x4d/0x240
[  293.510727][T10798]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  293.510748][T10798]  do_writepages+0x32e/0x550
[  293.510779][T10798]  ? do_raw_spin_unlock+0x4d/0x240
[  293.510801][T10798]  filemap_fdatawrite+0x199/0x240
[  293.510822][T10798]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  293.510889][T10798]  ? do_raw_spin_unlock+0x4d/0x240
[  293.510911][T10798]  f2fs_sync_dirty_inodes+0x31f/0x830
[  293.510941][T10798]  f2fs_write_checkpoint+0x95a/0x1df0
[  293.511007][T10798]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  293.511070][T10798]  ? kill_f2fs_super+0x298/0x6c0
[  293.511091][T10798]  kill_f2fs_super+0x2c3/0x6c0
[  293.511112][T10798]  ? __pfx_kill_f2fs_super+0x10/0x10
[  293.511124][T10798]  ? radix_tree_delete_item+0x2b6/0x400
[  293.511151][T10798]  ? shrinker_free+0x2ce/0x3e0
[  293.511170][T10798]  deactivate_locked_super+0xbc/0x130
[  293.511191][T10798]  cleanup_mnt+0x425/0x4c0
[  293.511208][T10798]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.511231][T10798]  task_work_run+0x1d4/0x260
[  293.511259][T10798]  ? __pfx_task_work_run+0x10/0x10
[  293.511275][T10798]  ? __x64_sys_umount+0x122/0x160
[  293.511300][T10798]  ? exit_to_user_mode_loop+0x40/0x110
[  293.511324][T10798]  exit_to_user_mode_loop+0xec/0x110
[  293.511344][T10798]  do_syscall_64+0x2bd/0x3b0
[  293.511364][T10798]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.511381][T10798]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.511396][T10798]  ? exc_page_fault+0x9f/0xf0
[  293.511417][T10798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.511430][T10798] RIP: 0033:0x7fab80b8ff17
[  293.511446][T10798] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  293.511458][T10798] RSP: 002b:00007ffc7ac34138 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  293.511474][T10798] RAX: 0000000000000000 RBX: 00007fab80c11c05 RCX: 00007fab80b8ff17
[  293.511484][T10798] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7ac341f0
[  293.511493][T10798] RBP: 00007ffc7ac341f0 R08: 0000000000000000 R09: 0000000000000000
[  293.511502][T10798] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7ac35280
[  293.511511][T10798] R13: 00007fab80c11c05 R14: 00000000000479e2 R15: 00007ffc7ac352c0
[  293.511538][T10798]  </TASK>
[  293.511545][T10798] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  294.214565][T11897] loop3: detected capacity change from 0 to 256
[  294.476748][T11906] loop4: detected capacity change from 0 to 8192
[  294.749803][T11920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2230'.
[  294.842764][T11922] netlink: 'syz.4.2231': attribute type 4 has an invalid length.
[  294.852028][T11922] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2231'.
[  294.869339][T11922] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  294.879583][T11924] loop3: detected capacity change from 0 to 2048
[  294.887805][T11924] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  294.897785][ T6145] udevd[6145]: incorrect nilfs2 checksum on /dev/loop3
[  294.909607][ T6145] udevd[6145]: incorrect nilfs2 checksum on /dev/loop3
[  294.945606][T11926] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  294.949608][T11924] NILFS (loop3): corrupt root inode
[  295.111542][T11935] loop3: detected capacity change from 0 to 512
[  295.138075][T11935] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2237: casefold flag without casefold feature
[  295.143465][T11935] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2237: couldn't read orphan inode 15 (err -117)
[  295.148843][T11935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.265185][ T8301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.879613][T11958] loop3: detected capacity change from 0 to 40427
[  295.884298][T11958] F2FS-fs (loop3): Corrupted extension count (720933 + 1 > 64)
[  295.887492][T11958] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  295.894560][T11958] F2FS-fs (loop3): Image doesn't support compression
[  295.897412][T11958] F2FS-fs (loop3): build fault injection rate: 690
[  295.905527][T11958] F2FS-fs (loop3): invalid crc value
[  295.966862][T11958] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  295.973504][T11958] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  295.976404][T11958] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  296.204487][T11976] syz.4.2255: attempt to access beyond end of device
[  296.204487][T11976] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0
[  296.209924][T11976] syz.4.2255: attempt to access beyond end of device
[  296.209924][T11976] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0
[  296.250450][T11978] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2256'.
[  296.332680][T11983] netlink: 'syz.3.2252': attribute type 5 has an invalid length.
[  297.268550][T12030] loop4: detected capacity change from 0 to 1024
[  297.271240][T12030] hfsplus: Bad value for 'session'
[  297.312405][T12032] loop4: detected capacity change from 0 to 2048
[  297.317084][T12032] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  297.319578][T12032] UDF-fs: Scanning with blocksize 512 failed
[  297.329047][T12032] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  298.000889][T12052] loop3: detected capacity change from 0 to 1024
[  298.091403][T12052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.201757][T12052] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.2286: Abort forced by user
[  298.229220][T12052] EXT4-fs (loop3): Remounting filesystem read-only
[  298.242811][T12052] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  298.366824][ T8301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.449452][T12064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2289'.
[  298.541885][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  298.695378][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.699589][    T9] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  298.704865][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.716009][    T9] usb 5-1: config 0 descriptor??
[  298.734514][T12082] netlink: 'syz.3.2299': attribute type 1 has an invalid length.
[  298.737394][T12082] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2299'.
[  298.740999][T12082] NCSI netlink: No device for ifindex 0
[  299.120703][T12101] loop3: detected capacity change from 0 to 512
[  299.126734][T12101] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  299.131060][    T9] prodikeys 0003:041E:2801.0010: unknown main item tag 0x2
[  299.138388][    T9] prodikeys 0003:041E:2801.0010: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input0
[  299.153873][T12101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.158796][T12101] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  299.179521][T12101] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  299.191123][T12101] Quota error (device loop3): write_blk: dquota write failed
[  299.194090][T12101] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  299.197177][T12101] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2308: Failed to acquire dquot type 0
[  299.218935][ T8301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.326976][    T9] usb 5-1: USB disconnect, device number 6
[  299.532887][T12117] IPv6: Can't replace route, no match found
[  299.595383][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2316'.
[  299.599083][T12120] netlink: 'syz.3.2316': attribute type 2 has an invalid length.
[  299.606130][T12120] netlink: 'syz.3.2316': attribute type 2 has an invalid length.
[  299.608605][T12120] netlink: 'syz.3.2316': attribute type 1 has an invalid length.
[  299.611129][T12120] netlink: 'syz.3.2316': attribute type 2 has an invalid length.
[  299.616044][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2316'.
[  299.891110][T12123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2317'.
[  300.033620][T12130] loop3: detected capacity change from 0 to 512
[  300.038017][T12130] EXT4-fs: Ignoring removed mblk_io_submit option
[  300.040722][T12130] EXT4-fs: inline encryption not supported
[  300.043703][T12130] EXT4-fs: Ignoring removed mblk_io_submit option
[  300.046365][T12130] EXT4-fs: Ignoring removed nomblk_io_submit option
[  300.049888][T12130] EXT4-fs (loop3): Test dummy encryption mode enabled
[  300.054961][T12130] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  300.064351][T12130] EXT4-fs (loop3): 1 truncate cleaned up
[  300.068275][T12130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.201518][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2319'.
[  302.226636][T12142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2323'.
[  302.457201][ T8301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.847123][ T5864] Bluetooth: Unexpected continuation frame (len 16)
[  303.407315][T12150] block device autoloading is deprecated and will be removed.
[  303.409893][T12154] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2328'.
[  303.415166][T12154] 0X: renamed from caif0
[  303.431312][T12154] 0X: entered allmulticast mode
[  303.441889][T12154] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  304.064008][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2335'.
[  304.460762][T12183] loop4: detected capacity change from 0 to 2048
[  304.475144][T12183] EXT4-fs: Ignoring removed bh option
[  304.506334][T12185] kernel read not supported for file / lhOb~h3JyxvL=QRnFGrqςû~QV7"qHd0%NnyD (pid: 12185 comm: syz.0.2343)
[  304.527434][T12183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.533521][   T33] audit: type=1800 audit(1755177430.177:256): pid=12185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2343" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B746477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E11197C964309DFA86F888B989FD254E6E79B503831CDD4402 dev="mqueue" ino=27146 res=0 errno=0
[  304.571794][   T33] audit: type=1800 audit(1755177430.217:257): pid=12183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2340" name="file1" dev="loop4" ino=15 res=0 errno=0
[  304.630308][T10798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.707542][T12192] netlink: 'syz.4.2345': attribute type 7 has an invalid length.
[  305.224042][   T33] audit: type=1326 audit(1755177430.867:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12197 comm="syz.3.2347" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf2718ebe9 code=0x0
[  305.821089][T12203] loop4: detected capacity change from 0 to 128
[  305.841357][T12203] syz.4.2349: attempt to access beyond end of device
[  305.841357][T12203] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128
[  305.851448][T12203] syz.4.2349: attempt to access beyond end of device
[  305.851448][T12203] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128
[  306.196494][T12211] overlayfs: failed lookup in lower (newroot/443, name='file1', err=-40): overlapping layers
[  306.312964][T12205] loop4: detected capacity change from 0 to 32768
[  306.323690][T12205] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2350 (12205)
[  306.345194][T12205] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  306.349268][T12205] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  306.361811][T12205] BTRFS info (device loop4): using free-space-tree
[  306.364379][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2355'.
[  306.368368][T12216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2355'.
[  306.542413][T12238] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2357'.
[  306.590493][T10798] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  306.695436][T12246] syz_tun: entered allmulticast mode
[  306.715578][   T33] audit: type=1326 audit(1755177432.367:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.0.2363" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f448cb8ebe9 code=0x0
[  306.826021][T12249] syz_tun: left allmulticast mode
[  306.973827][T12253] loop4: detected capacity change from 0 to 8192
[  307.125418][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2367'.
[  307.133794][T10807] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  307.291956][T10807] usb 4-1: Using ep0 maxpacket: 32
[  307.307876][T10807] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  307.313866][T10807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.318038][T10807] usb 4-1: Product: syz
[  307.320011][T10807] usb 4-1: Manufacturer: syz
[  307.322236][T10807] usb 4-1: SerialNumber: syz
[  307.331383][T10807] usb 4-1: config 0 descriptor??
[  307.436721][T12267] loop4: detected capacity change from 0 to 8192
[  307.549591][T10807] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device:
[  307.558228][T10807] 13 57 c4 36 7e 4b e4 0d 
[  307.560189][T10807] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  307.749245][T12279] veth2: entered promiscuous mode
[  307.751420][T12279] veth2: entered allmulticast mode
[  307.761890][T10807] usb 4-1: USB disconnect, device number 18
[  307.894276][T12287] netlink: 'syz.4.2382': attribute type 34 has an invalid length.
[  307.967203][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2384'.
[  308.095563][T12303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.133571][T12305] loop4: detected capacity change from 0 to 512
[  308.147534][T12305] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  308.153852][T12305] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  308.159704][T12305] EXT4-fs (loop4): 1 truncate cleaned up
[  308.165072][T12305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.176805][T12305] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  308.199147][T10798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.302882][T12308] loop4: detected capacity change from 0 to 2048
[  308.307366][T12308] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  308.311304][T12308] NILFS (loop4): mounting unchecked fs
[  308.316526][T12308] NILFS (loop4): recovery required for readonly filesystem
[  308.319572][T12308] NILFS (loop4): write access will be enabled during recovery
[  308.323175][ T6145] udevd[6145]: incorrect nilfs2 checksum on /dev/loop4
[  308.326133][T12308] NILFS (loop4): norecovery option specified, skipping roll-forward recovery
[  308.335788][T12308] NILFS (loop4): couldn't remount because the filesystem is in an incomplete recovery state
[  308.343872][ T6145] udevd[6145]: incorrect nilfs2 checksum on /dev/loop4
[  309.134223][T12310] loop3: detected capacity change from 0 to 32768
[  309.162490][T12310] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section replicas: invalid device 1 in entry (unknown data_type 122): 119/246 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 4 5 5 6 8 8 9 9 10 11 14 24 27 31 35 37 43 47 47 51 56 65 80 89 96 102 128 132 172 173 174 179 205 222 235 245]
[  309.162490][T12310] replicas (size 64):
[  309.162490][T12310] (unknown data_type 122): 119/246 [43 0 222 65 89 132 205 31 174 173 5 172 235 128 0 0 0 0 0 0 0 0 0 0 1 8 0 0 0 179 245 51 102 0 0 0 0 0 0 14 96 0 0 0 0 0 0 0 0 0 0 0 0 5 0 0 0 9 0 0 0 9 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 24 0 0 0 0 0 0 0 37 0 0 0 0 0 0 0 80 0 0 0 10 0 0 0 0 0 0 0 0 0 0 0 56 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 
[  309.165381][T12310] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  309.647429][T12329] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  309.666265][T12329] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  309.917133][T12335] netlink: 'syz.3.2405': attribute type 1 has an invalid length.
[  309.919981][T12335] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2405'.
[  309.941973][T12335] netlink: 'syz.3.2405': attribute type 2 has an invalid length.
[  309.949410][T12337] loop4: detected capacity change from 0 to 164
[  309.956966][T12335] netlink: 'syz.3.2405': attribute type 1 has an invalid length.
[  310.317841][T12357] loop3: detected capacity change from 0 to 4096
[  310.326528][T12357] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  310.331180][T12357] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  310.343930][T12357] ntfs3(loop3): volume is dirty and "force" flag is not set!
[  310.544761][T12375] loop3: detected capacity change from 0 to 256
[  310.573119][T12375] FAT-fs (loop3): Directory bread(block 64) failed
[  310.582799][T12375] FAT-fs (loop3): Directory bread(block 65) failed
[  310.585854][T12375] FAT-fs (loop3): Directory bread(block 66) failed
[  310.597591][T12375] FAT-fs (loop3): Directory bread(block 67) failed
[  310.600327][T12375] FAT-fs (loop3): Directory bread(block 68) failed
[  310.629291][T12375] FAT-fs (loop3): Directory bread(block 69) failed
[  310.634032][T12375] FAT-fs (loop3): Directory bread(block 70) failed
[  310.639043][T12375] FAT-fs (loop3): Directory bread(block 71) failed
[  310.643826][T12375] FAT-fs (loop3): Directory bread(block 72) failed
[  310.646822][T12375] FAT-fs (loop3): Directory bread(block 73) failed
[  312.047236][T12416] loop4: detected capacity change from 0 to 1024
[  312.118189][   T26] hfsplus: b-tree write err: -5, ino 8
[  312.313388][T12432] netlink: 'syz.4.2449': attribute type 10 has an invalid length.
[  312.349863][T12432] veth0_macvtap: left promiscuous mode
[  312.375243][T12438] loop3: detected capacity change from 0 to 512
[  312.403600][T12438] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2452: iget: bad extended attribute block 1
[  312.406772][T12432] batman_adv: batadv0: Adding interface: macvtap0
[  312.411223][T12432] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.416080][T12438] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2452: couldn't read orphan inode 15 (err -117)
[  312.429167][T12438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.455927][T12432] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  312.490992][T12438] EXT4-fs warning (device loop3): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed
[  312.576561][ T8301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.599451][T12446] netlink: 'syz.4.2455': attribute type 3 has an invalid length.
[  312.603163][T12446] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2455'.
[  312.981062][T12452] loop3: detected capacity change from 0 to 32768
[  313.042447][T12465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2464'.
[  313.050125][T12465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2464'.
[  313.177847][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2468'.
[  313.464435][T12484] loop4: detected capacity change from 0 to 1024
[  313.504932][T12482] syzkaller0: entered promiscuous mode
[  313.509856][T12482] syzkaller0: entered allmulticast mode
[  313.519652][ T1092] hfsplus: b-tree write err: -5, ino 4
[  313.591441][T12491] loop4: detected capacity change from 0 to 1024
[  313.710493][ T3445] hfsplus: b-tree write err: -5, ino 8
[  316.996838][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.999428][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.215306][T12510] netlink: 'syz.3.2482': attribute type 10 has an invalid length.
[  317.239390][T12512] loop4: detected capacity change from 0 to 128
[  317.270558][T12512] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  317.276151][T12512] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  317.279226][T12510] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  318.061305][T12530] fuse: root generation should be zero
[  318.168067][T10798] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  318.247789][T12534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2491'.
[  318.556658][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2497'.
[  319.676739][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2514'.
[  319.680574][T12585] netlink: 'syz.3.2514': attribute type 3 has an invalid length.
[  321.452199][T10911] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  321.617159][T10911] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82
[  321.631752][T10911] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  321.636227][T10911] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  321.646794][T10911] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice= 0.06
[  321.650448][T10911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16
[  321.654418][T10911] usb 4-1: SerialNumber: syz
[  321.880676][T10911] yealink 4-1:36.0: invalid payload size 0, expected 16
[  321.888584][T10911] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input19
[  321.900138][    C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[  321.903169][    C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[  321.906111][    C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[  321.909090][    C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[  321.912090][    C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[  321.914689][    C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[  321.916943][    C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[  321.919568][    C1] yealink 4-1:36.0: urb_ctl_callback - urb status -71
[  321.922332][    C1] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90
[  321.936954][T10911] usb 4-1: USB disconnect, device number 19
[  323.346582][T12708] macvlan0: entered promiscuous mode
[  323.373726][T12708] bond0: entered promiscuous mode
[  323.375888][T12708] bond_slave_0: entered promiscuous mode
[  323.378441][T12708] bond_slave_1: entered promiscuous mode
[  323.395348][T12708] bond0: left promiscuous mode
[  323.408963][T12708] bond_slave_0: left promiscuous mode
[  323.419337][T12708] bond_slave_1: left promiscuous mode
[  323.442714][T12708] macvlan0: left promiscuous mode
[  323.821081][T12718] loop4: detected capacity change from 0 to 32768
[  323.963175][T12718] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  323.963193][T12718]   allowing incompatible features above 0.0: (unknown version)
[  323.963198][T12718]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  323.978330][T12718] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  323.981733][T12718] bcachefs (loop4): initializing new filesystem
[  323.991843][T12718] bcachefs (loop4): going read-write
[  324.024077][T12718] bcachefs (loop4): marking superblocks
[  324.043173][T12718] bcachefs (loop4): initializing freespace
[  324.048266][T12718] bcachefs (loop4): done initializing freespace
[  324.054930][T12718] bcachefs (loop4): reading snapshots table
[  324.057208][T12718] bcachefs (loop4): reading snapshots done
[  324.077325][T12739] bridge3: entered allmulticast mode
[  324.102098][T12718] bcachefs (loop4): done starting filesystem
[  324.134725][T12741] netlink: 'syz.3.2581': attribute type 10 has an invalid length.
[  324.162328][T12741] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.165565][T12741] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.178272][T12741] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.182869][T12741] bridge0: port 2(bridge_slave_1) entered forwarding state
[  324.185895][T12741] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.188618][T12741] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.218560][T12741] team0: Port device bridge0 added
[  324.243176][   T33] audit: type=1800 audit(1755177449.887:260): pid=12718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2575" name="file1" dev="loop4" ino=4098 res=0 errno=0
[  324.615660][T12718] syz.4.2575 (12718) used greatest stack depth: 16312 bytes left
[  324.644097][T10798] bcachefs (loop4): shutting down
[  324.647464][T10798] bcachefs (loop4): going read-only
[  324.655705][T10798] bcachefs (loop4): finished waiting for writes to stop
[  324.667340][T10798] bcachefs (loop4): flushing journal and stopping allocators, journal seq 121
[  324.783855][T10798] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 123
[  324.795783][T10798] bcachefs (loop4): clean shutdown complete, journal seq 124
[  324.799993][T10798] bcachefs (loop4): marking filesystem clean
[  324.847275][T10798] bcachefs (loop4): shutdown complete
[  325.055101][T12764] syz.0.2590 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  325.931853][T12792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2602'.
[  325.938831][T12792] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  326.846764][   T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  326.979627][T12843] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2625'.
[  326.982691][T12843] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2625'.
[  327.026561][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.030705][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.035688][   T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  327.039150][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.077608][   T10] usb 4-1: config 0 descriptor??
[  327.608491][   T10] pyra 0003:1E7D:2CF6.0011: ignoring exceeding usage max
[  327.619327][   T10] pyra 0003:1E7D:2CF6.0011: ignoring exceeding usage max
[  327.627961][   T10] pyra 0003:1E7D:2CF6.0011: usage index exceeded
[  327.630569][   T10] pyra 0003:1E7D:2CF6.0011: item 0 1 2 2 parsing failed
[  327.636563][   T10] pyra 0003:1E7D:2CF6.0011: parse failed
[  327.638652][   T10] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -22
[  327.845944][   T10] usb 4-1: USB disconnect, device number 20
[  328.503951][T12899] overlayfs: failed to clone upperpath
[  328.522437][T12897] loop3: detected capacity change from 0 to 4096
[  328.528957][T12897] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  328.547819][T12897] ntfs3(loop3): ino=19, mi_enum_attr
[  328.550059][T12897] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  328.576416][T12897] ntfs3(loop3): failed to convert "c46c" to macromanian
[  328.579769][T12897] ntfs3(loop3): ino=20, mi_enum_attr
[  330.655127][T12970] loop3: detected capacity change from 0 to 256
[  330.712170][T12969] vlan2: entered promiscuous mode
[  330.714392][T12969] bond0: entered promiscuous mode
[  330.716409][T12969] bond_slave_0: entered promiscuous mode
[  330.718875][T12969] bond_slave_1: entered promiscuous mode
[  330.870251][T12972] fuse: Bad value for 'fd'
[  330.886986][T12972] loop4: detected capacity change from 0 to 16
[  330.903707][T12972] erofs (device loop4): mounted with root inode @ nid 36.
[  330.944163][T12972] erofs (device loop4): readahead error at folio 87 @ nid 36
[  330.947411][T12972] erofs (device loop4): readahead error at folio 86 @ nid 36
[  330.951173][T12972] erofs (device loop4): bogus lookback distance 363 @ lcn 82 of nid 36
[  330.954615][T12972] erofs (device loop4): readahead error at folio 83 @ nid 36
[  330.957639][T12972] erofs (device loop4): bogus lookback distance 363 @ lcn 82 of nid 36
[  330.960915][T12972] erofs (device loop4): readahead error at folio 82 @ nid 36
[  330.966190][T12972] erofs (device loop4): readahead error at folio 79 @ nid 36
[  330.969263][T12972] erofs (device loop4): readahead error at folio 78 @ nid 36
[  330.972280][T12972] erofs (device loop4): bogus lookback distance 1485 @ lcn 75 of nid 36
[  330.975647][T12972] erofs (device loop4): readahead error at folio 76 @ nid 36
[  330.978607][T12972] erofs (device loop4): bogus lookback distance 1485 @ lcn 75 of nid 36
[  330.981983][T12972] erofs (device loop4): readahead error at folio 75 @ nid 36
[  330.985683][T12972] erofs (device loop4): readahead error at folio 74 @ nid 36
[  330.988839][T12972] erofs (device loop4): readahead error at folio 72 @ nid 36
[  330.991857][T12972] erofs (device loop4): readahead error at folio 71 @ nid 36
[  330.995066][T12972] erofs (device loop4): readahead error at folio 70 @ nid 36
[  330.999977][T12972] erofs (device loop4): readahead error at folio 63 @ nid 36
[  331.003659][T12972] erofs (device loop4): readahead error at folio 61 @ nid 36
[  331.006845][T12972] erofs (device loop4): bogus lookback distance 1024 @ lcn 58 of nid 36
[  331.010066][T12972] erofs (device loop4): readahead error at folio 59 @ nid 36
[  331.013131][T12972] erofs (device loop4): bogus lookback distance 1024 @ lcn 58 of nid 36
[  331.016634][T12972] erofs (device loop4): readahead error at folio 58 @ nid 36
[  331.019898][T12972] erofs (device loop4): readahead error at folio 56 @ nid 36
[  331.024212][T12972] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36
[  331.027942][T12972] erofs (device loop4): readahead error at folio 47 @ nid 36
[  331.030841][T12972] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36
[  331.034168][T12972] erofs (device loop4): readahead error at folio 46 @ nid 36
[  331.037088][T12972] erofs (device loop4): readahead error at folio 45 @ nid 36
[  331.039967][T12972] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36
[  331.043441][T12972] erofs (device loop4): readahead error at folio 43 @ nid 36
[  331.046345][T12972] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36
[  331.049605][T12972] erofs (device loop4): readahead error at folio 42 @ nid 36
[  331.052554][T12972] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36
[  331.055933][T12972] erofs (device loop4): readahead error at folio 41 @ nid 36
[  331.058933][T12972] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36
[  331.062246][T12972] erofs (device loop4): readahead error at folio 40 @ nid 36
[  331.065278][T12972] erofs (device loop4): readahead error at folio 39 @ nid 36
[  331.069297][T12972] erofs (device loop4): readahead error at folio 38 @ nid 36
[  331.072839][T12972] erofs (device loop4): readahead error at folio 36 @ nid 36
[  331.076147][T12972] erofs (device loop4): bogus lookback distance 1468 @ lcn 31 of nid 36
[  331.079412][T12972] erofs (device loop4): readahead error at folio 31 @ nid 36
[  331.082564][T12972] erofs (device loop4): readahead error at folio 25 @ nid 36
[  331.085764][T12972] erofs (device loop4): readahead error at folio 24 @ nid 36
[  331.089061][T12972] erofs (device loop4): readahead error at folio 19 @ nid 36
[  331.092529][T12972] syz.4.2678: attempt to access beyond end of device
[  331.092529][T12972] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16
[  331.098524][T12972] syz.4.2678: attempt to access beyond end of device
[  331.098524][T12972] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  331.104502][T12972] syz.4.2678: attempt to access beyond end of device
[  331.104502][T12972] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  331.110338][T12972] syz.4.2678: attempt to access beyond end of device
[  331.110338][T12972] loop4: rw=524288, sector=32, nr_sectors = 64 limit=16
[  331.115943][T12972] syz.4.2678: attempt to access beyond end of device
[  331.115943][T12972] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16
[  331.121413][T12972] syz.4.2678: attempt to access beyond end of device
[  331.121413][T12972] loop4: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  332.372354][T12982] netlink: 'syz.0.2686': attribute type 75 has an invalid length.
[  332.550617][T12984] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  332.555707][T12984] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  333.162549][T12988] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2688'.
[  333.457900][T12994] vcan0: tx drop: invalid da for name 0x0000000000000002
[  334.451688][   T33] audit: type=1800 audit(1755177461.116:261): pid=13004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.2696" name="/" dev="tmpfs" ino=234 res=0 errno=0
[  334.699257][T13015] Device name not specified.
[  334.699257][T13015] 
[  334.908738][T13009] loop3: detected capacity change from 0 to 32768
[  334.921091][T13009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2698 (13009)
[  334.937915][T13009] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  334.944019][T13009] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  334.946892][T13009] BTRFS info (device loop3): using free-space-tree
[  334.966042][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'.
[  334.970193][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'.
[  335.096630][T13050] netlink: 'syz.4.2707': attribute type 46 has an invalid length.
[  335.166752][ T8301] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  335.830732][T13060] loop3: detected capacity change from 0 to 32768
[  335.866590][T13060] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  335.866590][T13060] clean (size 2912):
[  335.866590][T13060] flags:          0
[  335.866590][T13060] journal_seq:    10
[  335.866590][T13060] usage: type=inodes v=8
[  335.866590][T13060] write_buffer_keys: btree=dirents level=0 u64s 5 type deleted 0:21491613697:0 len 0 ver 4294967296
[  335.866590][T13060] usage: type=reserved v=0
[  335.866590][T13060] usage: type=reserved v=0
[  335.866590][T13060] usage: type=reserved v=0
[  335.866590][T13060] usage: type=reserved v=0
[  335.866590][T13060] data_usage: free: 0/0 []=83888896
[  335.866590][T13060] data_usage: journal: 1/1 [0]=0
[  335.866590][T13060] data_usage: user: 1/1 [0]=32
[  335.866590][T13060] dev_usage: dev=0  
[  335.866590][T13060]   free: buckets=83 sectors=0 fragmented=0
[  335.866590][T13060]   sb: buckets=25 sectors=6152 fragmented=248
[  335.866590][T13060]   journal: buckets=8 sectors=2048 fragmented=0
[  335.866590][T13060]   btree: buckets=11 sectors=2816 fragmented=0
[  335.866590][T13060]   user: buckets=1 sectors=32 fragmented=224
[  335.866590][T13060]   cached: buckets=0 sectors=0 fragmented=0
[  335.866590][T13060]   parity: buckets=0 sectors=0 fragmented=0
[  335.866590][T13060]   stripe: buckets=0 sectors=0 fragmented=0
[  335.866590][T13060]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  335.866590][T13060]   need_discard: buckets=0 sectors=0 fragmented=0
[  335.866590][T13060] clock: read=0
[  335.866590][T13060] clock: write=1336
[  335.866590][T13060] btree_root: btre
[  335.869211][T13060] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  336.460570][T13078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2721'.
[  336.620403][T13082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2722'.
[  336.774441][T13085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2722'.
[  336.782492][T13084] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  336.803341][ T5883] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  336.820773][T13085] 8021q: adding VLAN 0 to HW filter on device bond1
[  336.830631][ T5883] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  336.836099][ T5883] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  336.839813][ T5883] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  337.194072][T13095] overlayfs: failed to resolve 'W': -2
[  337.265462][T13099] loop3: detected capacity change from 0 to 4096
[  337.277977][T13099] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  337.315561][T13099] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  337.609509][T13114] loop4: detected capacity change from 0 to 4096
[  337.613964][T13114] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  337.635879][T13114] ntfs3(loop4): ino=1a, mi_enum_attr
[  337.638024][T13114] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  337.641074][T13114] ntfs3(loop4): ino=1a, mi_enum_attr
[  337.646597][T13114] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  337.688068][   T33] audit: type=1800 audit(1755177464.356:262): pid=13114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2736" name="file1" dev="loop4" ino=24 res=0 errno=0
[  337.968082][T13133] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2744'.
[  338.653610][T13135] ceph: No mds server is up or the cluster is laggy
[  338.718728][T13144] loop4: detected capacity change from 0 to 1024
[  338.722381][T13144] EXT4-fs: Ignoring removed bh option
[  338.783726][T13144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.853604][   T33] audit: type=1800 audit(1755177465.516:263): pid=13144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2745" name="file1" dev="loop4" ino=15 res=0 errno=0
[  338.871873][T10798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.142891][T13167] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  339.232488][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  339.383504][   T10] usb 4-1: Using ep0 maxpacket: 32
[  339.391594][   T10] usb 4-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config
[  339.403421][   T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d
[  339.407328][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.432358][   T10] quatech2 4-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected
[  339.442716][T13175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2759'.
[  339.456122][T13176] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  339.634643][   T10] usb 4-1: qt2_attach - failed to power on unit: -71
[  339.637528][   T10] quatech2 4-1:24.0: probe with driver quatech2 failed with error -71
[  339.653663][   T10] usb 4-1: USB disconnect, device number 21
[  340.441518][T13198] loop3: detected capacity change from 0 to 512
[  340.445139][T13198] EXT4-fs: Ignoring removed nomblk_io_submit option
[  340.451840][T13198] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  340.456811][T13198] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002]
[  340.459670][T13198] EXT4-fs (loop3): orphan cleanup on readonly fs
[  340.461740][T13198] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  340.466014][T13198] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  340.471311][T13198] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  340.476202][T13198] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2768: bg 0: block 40: padding at end of block bitmap is not set
[  340.482450][T13198] EXT4-fs (loop3): Remounting filesystem read-only
[  340.486152][T13198] EXT4-fs (loop3): 1 truncate cleaned up
[  340.490127][T13198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  340.729593][T13194] loop4: detected capacity change from 0 to 32768
[  340.769479][T13194] ERROR: (device loop4): duplicateIXtree: 
[  340.769479][T13194] 
[  340.784012][T13194] ERROR: (device loop4): remounting filesystem as read-only
[  340.805770][T13194] ERROR: (device loop4): dtSearch: stack overrun!
[  340.805770][T13194] 
[  340.810744][T13194] ERROR: (device loop4): remounting filesystem as read-only
[  340.813115][T13194] btstack dump:
[  340.823475][T13194] bn = 0, index = 0
[  340.825052][T13194] bn = 2d, index = 0
[  340.828846][T13194] bn = 0, index = 0
[  340.830433][T13194] bn = 2d, index = 0
[  340.832008][T13194] bn = 0, index = 0
[  340.845143][T13194] bn = 2d, index = 0
[  340.853277][T13194] bn = 0, index = 0
[  340.854774][T13194] bn = 0, index = 0
[  340.856388][T13194] jfs_lookup: dtSearch returned -5
[  341.068873][T13203] overlayfs: failed to clone lowerpath
[  341.257129][T13213] netlink: 'syz.0.2777': attribute type 2 has an invalid length.
[  342.644725][ T8584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.881291][   T33] audit: type=1326 audit(1755177469.546:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13236 comm="syz.0.2789" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448cb8ebe9 code=0x7ffc0000
[  342.900467][   T33] audit: type=1326 audit(1755177469.546:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13236 comm="syz.0.2789" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448cb8ebe9 code=0x7ffc0000
[  342.920098][   T33] audit: type=1326 audit(1755177469.556:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13236 comm="syz.0.2789" exe="/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f448cb8ebe9 code=0x7ffc0000
[  342.931699][   T33] audit: type=1326 audit(1755177469.556:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13236 comm="syz.0.2789" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448cb8ebe9 code=0x7ffc0000
[  342.942164][   T33] audit: type=1326 audit(1755177469.556:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13236 comm="syz.0.2789" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448cb8ebe9 code=0x7ffc0000
[  343.067649][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  343.078706][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  343.083671][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  343.088158][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  343.091471][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  343.340823][T13246] chnl_net:caif_netlink_parms(): no params data found
[  343.453088][T13246] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.459010][T13246] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.462285][T13246] bridge_slave_0: entered allmulticast mode
[  343.467516][T13246] bridge_slave_0: entered promiscuous mode
[  343.474648][T13246] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.477787][T13246] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.481137][T13246] bridge_slave_1: entered allmulticast mode
[  343.485259][T13246] bridge_slave_1: entered promiscuous mode
[  343.522369][T13246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.530439][T13246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.577643][T13246] team0: Port device team_slave_0 added
[  343.586127][T13246] team0: Port device team_slave_1 added
[  343.619810][T13246] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.622617][T13246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.632958][T13246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.639445][T13246] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.642332][T13246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.652727][T13246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  343.709112][T13246] hsr_slave_0: entered promiscuous mode
[  343.712425][T13246] hsr_slave_1: entered promiscuous mode
[  343.718951][T13246] debugfs: 'hsr0' already exists in 'hsr'
[  343.721456][T13246] Cannot create hsr debugfs directory
[  343.977645][T13246] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  343.989396][T13246] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  343.998308][T13246] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  344.011086][T13246] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  344.046913][T13246] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.049243][T13246] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.052264][T13246] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.055041][T13246] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.117303][T13246] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.131166][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.135977][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.151520][T13246] 8021q: adding VLAN 0 to HW filter on device team0
[  344.165617][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.168529][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.178877][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.181868][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.361545][T13246] 8021q: adding VLAN 0 to HW filter on device batadv0
[  345.026562][T13246] veth0_vlan: entered promiscuous mode
[  345.032564][T13246] veth1_vlan: entered promiscuous mode
[  345.075754][T13246] veth0_macvtap: entered promiscuous mode
[  345.081891][T13246] veth1_macvtap: entered promiscuous mode
[  345.098222][T13246] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.115516][T13246] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.124378][ T5239] Bluetooth: hci1: command tx timeout
[  345.131922][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.136959][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.142441][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.147527][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.303687][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.307249][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.432988][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.436972][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.562764][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2812'.
[  345.669253][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2816'.
[  345.698194][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2815'.
[  345.703512][T13323] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  345.752607][T13323] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.556710][T13342] 9pnet_virtio: no channels available for device syz
[  347.309947][ T5239] Bluetooth: hci1: command tx timeout
[  347.646407][T13363] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2833'.
[  348.211615][T13388] gfs2: not a GFS2 filesystem
[  348.450654][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2851'.
[  348.455129][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2851'.
[  348.623513][ T5904] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  348.843567][ T5904] usb 6-1: Using ep0 maxpacket: 8
[  348.847336][ T5904] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  348.851302][ T5904] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  348.863482][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.868361][ T5904] usb 6-1: config 0 descriptor??
[  348.877339][ T5904] gspca_main: vc032x-2.14.0 probing 046d:0892
[  349.374426][ T5239] Bluetooth: hci1: command tx timeout
[  350.111795][ T5904] gspca_vc032x: reg_w err -71
[  350.119709][ T5904] vc032x 6-1:0.0: probe with driver vc032x failed with error -71
[  350.124524][ T5904] usb 6-1: USB disconnect, device number 2
[  350.964084][T13434] usb usb1: usbfs: process 13434 (syz.5.2862) did not claim interface 0 before use
[  351.443679][ T5239] Bluetooth: hci1: command tx timeout
[  351.733599][T13447] futex_wake_op: syz.5.2869 tries to shift op by 144; fix this program
[  352.312397][T13471] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2881'.
[  352.388738][T13475] loop5: detected capacity change from 0 to 1024
[  352.392000][T13475] EXT4-fs: Ignoring removed orlov option
[  352.397638][T13475] EXT4-fs: Ignoring removed nomblk_io_submit option
[  352.429114][T13475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  352.441873][T13475] IPVS: length: 8 != 171493831088
[  352.466717][T13246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.685246][T13482] netdevsim netdevsim0: Direct firmware load for @ failed with error -2
[  352.688634][T13482] netdevsim netdevsim0: Falling back to sysfs fallback for: @
[  352.808477][ T2397] pvrusb2: request_firmware fatal error with code=-110
[  352.811484][ T2397] pvrusb2: Failure uploading firmware1
[  352.816381][ T2397] pvrusb2: Device initialization was not successful.
[  352.819239][ T2397] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  352.824216][ T2397] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  352.827990][ T6487] pvrusb2: Device being rendered inoperable
[  353.417390][T13486] loop5: detected capacity change from 0 to 16
[  353.440385][T13486] erofs (device loop5): mounted with root inode @ nid 36.
[  353.523915][T13490] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.2888' sets config #1
[  354.035870][T13508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2896'.
[  355.521202][T13542] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  355.664190][T13549] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2913'.
[  355.772834][T13556] loop5: detected capacity change from 0 to 8
[  356.331324][ T5864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  356.339752][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  356.345245][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  356.355843][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  356.362508][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  356.469551][T13595] (syz.0.2933,13595,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[  356.682453][T13587] chnl_net:caif_netlink_parms(): no params data found
[  356.742652][T13587] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.745393][T13587] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.748232][T13587] bridge_slave_0: entered allmulticast mode
[  356.751574][T13587] bridge_slave_0: entered promiscuous mode
[  356.755520][T13587] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.757839][T13587] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.760565][T13587] bridge_slave_1: entered allmulticast mode
[  356.764683][T13587] bridge_slave_1: entered promiscuous mode
[  356.845261][T13587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.852475][T13587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.913062][T13587] team0: Port device team_slave_0 added
[  356.917312][T13587] team0: Port device team_slave_1 added
[  356.994085][T13587] batman_adv: batadv0: Adding interface: batadv_slave_0
[  356.996925][T13587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.019325][T13624] loop5: detected capacity change from 0 to 256
[  357.020675][T13587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.022569][T13624] exfat: Deprecated parameter 'utf8'
[  357.040683][T13624] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e3e, chksum : 0x38c882e6, utbl_chksum : 0xe619d30d)
[  357.054571][T13587] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.057408][T13587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.070422][T13587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.201062][T13587] hsr_slave_0: entered promiscuous mode
[  357.227385][T13587] hsr_slave_1: entered promiscuous mode
[  357.236627][T13587] debugfs: 'hsr0' already exists in 'hsr'
[  357.238475][T13587] Cannot create hsr debugfs directory
[  357.779102][T13587] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  357.818552][T13587] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  357.848001][T13587] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  357.871346][T13587] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  357.987810][ T5864] Bluetooth: hci0: unexpected subevent 0x03 length: 244 > 9
[  358.282961][T13587] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.327884][T13587] 8021q: adding VLAN 0 to HW filter on device team0
[  358.352779][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.355988][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.393250][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.395918][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.420007][ T5864] Bluetooth: hci3: command tx timeout
[  358.868463][T13587] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.519049][T13587] veth0_vlan: entered promiscuous mode
[  359.526867][T13587] veth1_vlan: entered promiscuous mode
[  359.555257][T13587] veth0_macvtap: entered promiscuous mode
[  359.560091][T13587] veth1_macvtap: entered promiscuous mode
[  359.571908][T13587] batman_adv: batadv0: Interface activated: batadv_slave_0
[  359.579362][T13587] batman_adv: batadv0: Interface activated: batadv_slave_1
[  359.588218][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.601020][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  359.612819][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  359.617924][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.710164][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.731105][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.878319][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.886145][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.913109][T13683] [U] 
[  359.914610][T13683] [U] 
[  359.915613][T13683] [U] 
[  359.916602][T13683] [U] 
[  359.922900][T13683] [U] 
[  359.923833][T13683] [U] 
[  359.924718][T13683] [U] 
[  359.925752][T13683] [U] 
[  359.927770][T13683] [U] 
[  359.928769][T13683] [U] 
[  359.929603][T13683] [U] 
[  359.930404][T13683] [U] 
[  359.931472][T13683] [U] 
[  359.932396][T13683] [U] 
[  359.933429][T13683] [U] 
[  359.934564][T13683] [U] 
[  359.935937][T13683] [U] 
[  359.937048][T13683] [U] 
[  359.938186][T13683] [U] 
[  359.939338][T13683] [U] 
[  359.940858][T13683] [U] 
[  359.941955][T13683] [U] 
[  359.943099][T13683] [U] 
[  359.944168][T13683] [U] 
[  359.945600][T13683] [U] 
[  359.946555][T13683] [U] 
[  359.947694][T13683] [U] 
[  359.948739][T13683] [U] 
[  359.950587][T13683] [U] 
[  359.951636][T13683] [U] 
[  359.952433][T13683] [U] 
[  359.953260][T13683] [U] 
[  359.960235][T13683] [U] 
[  359.961551][T13683] [U] 
[  359.962689][T13683] [U] 
[  359.963846][T13683] [U] 
[  359.965551][T13683] [U] 
[  359.966480][T13683] [U] 
[  359.967411][T13683] [U] 
[  359.968319][T13683] [U] 
[  359.969573][T13683] [U] 
[  359.970473][T13683] [U] 
[  359.971509][T13683] [U] 
[  359.972333][T13683] [U] 
[  359.979649][T13682] [U] 
[  360.484332][ T5864] Bluetooth: hci3: command tx timeout
[  360.622536][T13703] loop6: detected capacity change from 0 to 512
[  360.635208][T13703] EXT4-fs: Ignoring removed nobh option
[  360.656306][T13703] fscrypt (loop6, inode 2): Error -61 getting encryption context
[  360.662766][T13703] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61
[  360.666580][T13703] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #13: comm syz.6.2966: casefold flag without casefold feature
[  360.670808][T13703] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2966: couldn't read orphan inode 13 (err -117)
[  360.676845][T13703] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.705215][T13703] syz_tun: entered promiscuous mode
[  360.710294][T13703] syz_tun: left promiscuous mode
[  360.851668][T13701] loop5: detected capacity change from 0 to 32768
[  360.854870][T13701] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2967 (13701)
[  360.903622][T13587] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.975306][T13701] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  360.980128][T13701] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  361.004410][T13701] BTRFS info (device loop5): disk space caching is enabled
[  361.015105][T13701] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  361.193076][T13701] BTRFS info (device loop5): rebuilding free space tree
[  361.260244][T13701] BTRFS info (device loop5): disabling free space tree
[  361.264002][T13701] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  361.267795][T13701] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  361.326124][T13246] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  361.426178][T13740] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2976'.
[  362.319498][T13745] loop5: detected capacity change from 0 to 131072
[  362.405385][T13745] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  362.409145][T13745] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  362.429170][T13745] F2FS-fs (loop5): invalid crc value
[  362.573410][ T5864] Bluetooth: hci3: command tx timeout
[  362.679263][T13745] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  362.707220][T13757] loop6: detected capacity change from 0 to 512
[  362.725786][T13745] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  362.728592][T13745] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  362.736718][T13757] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  362.740318][T13757] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  362.773987][T13757] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended
[  362.787548][T13757] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  362.790716][T13757] System zones: 0-2, 18-18, 34-34
[  362.822106][T13757] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2982: iget: bad i_size value: 360287970189639680
[  362.832685][T13757] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2982: couldn't read orphan inode 15 (err -117)
[  362.850116][T13757] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  362.862439][T13757] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.2982: iget: bad i_size value: 360287970189639680
[  362.975870][T13587] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.369644][T13779] loop6: detected capacity change from 0 to 512
[  363.380066][T13779] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  363.404387][T13779] EXT4-fs (loop6): 1 truncate cleaned up
[  363.408116][T13779] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  363.645436][T13587] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.684456][T13787] loop5: detected capacity change from 0 to 128
[  363.695067][T13787] EXT4-fs: Ignoring removed nobh option
[  363.731628][T13787] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  363.745451][T13787] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  363.785907][T13792] loop6: detected capacity change from 0 to 256
[  363.816363][T13246] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  363.826471][T13792] FAT-fs (loop6): Directory bread(block 64) failed
[  363.831112][T13792] FAT-fs (loop6): Directory bread(block 65) failed
[  363.835705][T13792] FAT-fs (loop6): Directory bread(block 66) failed
[  363.838500][T13792] FAT-fs (loop6): Directory bread(block 67) failed
[  363.841168][T13792] FAT-fs (loop6): Directory bread(block 68) failed
[  363.847353][T13792] FAT-fs (loop6): Directory bread(block 69) failed
[  363.852369][T13792] FAT-fs (loop6): Directory bread(block 70) failed
[  363.859352][T13792] FAT-fs (loop6): Directory bread(block 71) failed
[  363.865716][T13792] FAT-fs (loop6): Directory bread(block 72) failed
[  363.871922][T13792] FAT-fs (loop6): Directory bread(block 73) failed
[  363.899686][T13792] syz.6.2994: attempt to access beyond end of device
[  363.899686][T13792] loop6: rw=0, sector=1160, nr_sectors = 4 limit=256
[  363.944032][T13796] loop5: detected capacity change from 0 to 1024
[  363.959693][T13796] EXT4-fs: Ignoring removed nobh option
[  363.982046][T13796] EXT4-fs: Ignoring removed bh option
[  364.017883][T13796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.046226][T13796] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  364.096695][T13246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.230680][T13821] cgroup: name respecified
[  364.480363][T13838] loop5: detected capacity change from 0 to 512
[  364.499144][T13838] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3014: casefold flag without casefold feature
[  364.509783][T13838] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3014: couldn't read orphan inode 15 (err -117)
[  364.530471][T13838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.646117][ T5864] Bluetooth: hci3: command tx timeout
[  364.789702][T13246] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.984365][T13850] netlink: 'syz.5.3017': attribute type 1 has an invalid length.
[  364.998534][T13850] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3017'.
[  365.011666][T13850] netlink: 'syz.5.3017': attribute type 1 has an invalid length.
[  365.171835][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3020'.
[  365.991752][T13866] loop6: detected capacity change from 0 to 1024
[  365.997292][T13856] loop5: detected capacity change from 0 to 32768
[  366.021235][T13856] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3021 (13856)
[  366.036453][   T33] audit: type=1800 audit(1755177492.696:269): pid=13866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3025" name="file1" dev="loop6" ino=20 res=0 errno=0
[  366.084134][T13856] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  366.090506][T13856] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  366.103371][T13856] BTRFS info (device loop5): using free-space-tree
[  366.516944][T13246] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  367.109571][T13899] netlink: 'syz.0.3031': attribute type 11 has an invalid length.
[  367.800510][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3036'.
[  367.835809][T13914] loop6: detected capacity change from 0 to 512
[  367.863843][T13914] EXT4-fs: Ignoring removed i_version option
[  367.886255][T13914] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  367.907106][T13914] EXT4-fs (loop6): 1 truncate cleaned up
[  367.910922][T13914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  367.916260][T13920] batadv_slave_0: entered promiscuous mode
[  367.929344][T13917] batadv_slave_0: left promiscuous mode
[  368.141330][T13931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3045'.
[  368.753135][T13587] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.931613][T13944] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3051'.
[  370.037642][T13962] netlink: 'syz.5.3058': attribute type 1 has an invalid length.
[  370.041147][T13962] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3058'.
[  370.762748][T13987] loop5: detected capacity change from 0 to 128
[  370.778666][T13987] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  370.787476][T13987] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  370.828985][T13246] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  371.200111][T14007] ref_ctr_offset mismatch. inode: 0x1856 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4
[  371.737149][T14021] overlayfs: failed to clone lowerpath
[  372.530651][T14036] sch_tbf: burst 19869 is lower than device lo mtu (65550) !
[  372.762026][   T33] audit: type=1326 audit(1755177499.426:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.0.3095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448cb8ebe9 code=0x7ffc0000
[  372.770125][   T33] audit: type=1326 audit(1755177499.436:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.0.3095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448cb8ebe9 code=0x7ffc0000
[  372.790208][   T33] audit: type=1326 audit(1755177499.446:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.0.3095" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f448cb8ebe9 code=0x7ffc0000
[  372.801293][T14050] loop5: detected capacity change from 0 to 1024
[  372.805659][   T33] audit: type=1326 audit(1755177499.456:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.0.3095" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f448cb8ec23 code=0x7ffc0000
[  372.823637][   T33] audit: type=1326 audit(1755177499.456:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.0.3095" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f448cb8d69f code=0x7ffc0000
[  372.835837][   T33] audit: type=1326 audit(1755177499.456:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.0.3095" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f448cb8ec77 code=0x7ffc0000
[  372.847463][   T33] audit: type=1326 audit(1755177499.456:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.0.3095" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f448cb8d550 code=0x7ffc0000
[  372.859808][   T33] audit: type=1326 audit(1755177499.456:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.0.3095" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f448cb8d84a code=0x7ffc0000
[  372.868963][   T33] audit: type=1326 audit(1755177499.456:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.0.3095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448cb8ebe9 code=0x7ffc0000
[  372.869824][ T1091] hfsplus: b-tree write err: -5, ino 4
[  372.896539][   T33] audit: type=1326 audit(1755177499.456:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14047 comm="syz.0.3095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448cb8ebe9 code=0x7ffc0000
[  373.287373][ T5904] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  373.410727][T14072] loop6: detected capacity change from 0 to 512
[  373.421478][T14072] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  373.431364][T14072] EXT4-fs (loop6): orphan cleanup on readonly fs
[  373.440694][ T5904] usb 6-1: Using ep0 maxpacket: 32
[  373.452723][T14072] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  373.466029][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7
[  373.467131][T14072] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  373.470851][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024
[  373.475158][T14072] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #16: comm syz.6.3106: iget: immutable or append flags not allowed on symlinks
[  373.486925][ T5904] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  373.489725][T14072] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3106: couldn't read orphan inode 16 (err -117)
[  373.490747][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.496984][T14072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  373.501291][ T5904] usb 6-1: Product: syz
[  373.506119][ T5904] usb 6-1: Manufacturer: syz
[  373.513792][ T5904] usb 6-1: SerialNumber: syz
[  373.518354][ T5904] usb 6-1: config 0 descriptor??
[  373.550579][ T5904] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  373.600849][T13587] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.702399][T14082] loop6: detected capacity change from 0 to 512
[  373.733780][T14082] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  373.751900][ T5884] usb 6-1: Failed to submit usb control message: -71
[  373.752142][ T5904] usb 6-1: USB disconnect, device number 3
[  373.756233][ T5884] usb 6-1: unable to send the bmi data to the device: -71
[  373.761224][ T5884] usb 6-1: unable to get target info from device
[  373.766724][ T5884] usb 6-1: could not get target info (-71)
[  373.770941][ T5884] usb 6-1: could not probe fw (-71)
[  373.875901][T14086] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3111'.
[  373.879245][T14088] input: syz1 as /devices/virtual/input/input20
[  374.295997][T14112] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  374.299892][T14112] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  374.302587][T14112] CPU: 1 UID: 0 PID: 14112 Comm: syz.6.3123 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  374.308696][T14112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  374.312645][T14112] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  374.314838][T14112] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e9 59 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c8 59 36 f9 4d 8b 24 24 48 83 c3
[  374.322455][T14112] RSP: 0018:ffffc90002d2fa60 EFLAGS: 00010206
[  374.324861][T14112] RAX: 0000000000000005 RBX: ffff888111315800 RCX: 0000000000080000
[  374.327918][T14112] RDX: ffffc9002bc06000 RSI: 00000000000003bc RDI: 00000000000003bd
[  374.330930][T14112] RBP: 0000000000000001 R08: ffff88801b39712f R09: 1ffff11003672e25
[  374.334101][T14112] R10: dffffc0000000000 R11: ffffffff88ec9bf0 R12: 0000000000000028
[  374.337290][T14112] R13: dffffc0000000000 R14: ffff88801b397000 R15: dffffc0000000000
[  374.340510][T14112] FS:  00007f6ac17f66c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  374.343973][T14112] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  374.346563][T14112] CR2: 0000001b34e23ffc CR3: 000000010dbd6000 CR4: 00000000000006f0
[  374.349636][T14112] Call Trace:
[  374.350998][T14112]  <TASK>
[  374.352184][T14112]  pcl818_detach+0x66/0xd0
[  374.353955][T14112]  comedi_device_detach_locked+0x178/0x750
[  374.356226][T14112]  comedi_unlocked_ioctl+0xcde/0x1020
[  374.358319][T14112]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  374.360744][T14112]  ? __lock_acquire+0xab9/0xd20
[  374.362724][T14112]  ? __fget_files+0x2a/0x420
[  374.364615][T14112]  ? __fget_files+0x2a/0x420
[  374.366484][T14112]  ? __fget_files+0x3a0/0x420
[  374.368321][T14112]  ? __fget_files+0x2a/0x420
[  374.370110][T14112]  ? bpf_lsm_file_ioctl+0x9/0x20
[  374.372112][T14112]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  374.374535][T14112]  __se_sys_ioctl+0xfc/0x170
[  374.376432][T14112]  do_syscall_64+0xfa/0x3b0
[  374.378281][T14112]  ? lockdep_hardirqs_on+0x9c/0x150
[  374.380283][T14112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.382744][T14112]  ? exc_page_fault+0x9f/0xf0
[  374.384732][T14112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.387119][T14112] RIP: 0033:0x7f6ac358ebe9
[  374.388954][T14112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.396878][T14112] RSP: 002b:00007f6ac17f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  374.400214][T14112] RAX: ffffffffffffffda RBX: 00007f6ac37b5fa0 RCX: 00007f6ac358ebe9
[  374.403382][T14112] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003
[  374.406428][T14112] RBP: 00007f6ac3611e19 R08: 0000000000000000 R09: 0000000000000000
[  374.409597][T14112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  374.412840][T14112] R13: 00007f6ac37b6038 R14: 00007f6ac37b5fa0 R15: 00007ffecce07bd8
[  374.416066][T14112]  </TASK>
[  374.417342][T14112] Modules linked in:
[  374.419142][    C1] vkms_vblank_simulate: vblank timer overrun
[  374.422807][T14112] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  374.484950][T14112] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  374.487425][T14112] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 e9 59 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c8 59 36 f9 4d 8b 24 24 48 83 c3
[  374.521473][T14112] RSP: 0018:ffffc90002d2fa60 EFLAGS: 00010206
[  374.526078][T14112] RAX: 0000000000000005 RBX: ffff888111315800 RCX: 0000000000080000
[  374.529124][T14112] RDX: ffffc9002bc06000 RSI: 00000000000003bc RDI: 00000000000003bd
[  374.532173][T14112] RBP: 0000000000000001 R08: ffff88801b39712f R09: 1ffff11003672e25
[  374.545888][T14112] R10: dffffc0000000000 R11: ffffffff88ec9bf0 R12: 0000000000000028
[  374.548422][T14112] R13: dffffc0000000000 R14: ffff88801b397000 R15: dffffc0000000000
[  374.551401][T14112] FS:  00007f6ac17f66c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  374.566836][T14112] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  374.569639][T14112] CR2: 0000001b3280dff8 CR3: 000000010dbd6000 CR4: 00000000000006f0
[  374.572647][T14112] Kernel panic - not syncing: Fatal exception
[  374.575864][T14112] Kernel Offset: disabled
[  374.577586][T14112] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:18:20  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44d4b RBX=1ffff11026cc7f61 RCX=ffff888022da8000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002dcf8e0 RSP=ffffc90002dcf760
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44d33 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556f852500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3280dff8 CR3=00000000296aa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c57e ffffffff8133c57e
XMM02=00004008000003b7 ffffffff8133c57e XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=b700004008000003 b7fffffffa000002
XMM06=07000000000000a2 bf00000000fff88a XMM07=7b00000010000008 b700000000000000
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f448cc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000169e RDI=000000000000169f RBP=00000000000003f8 RSP=ffffc90002d2f1f0
R8 =ffff8880212c8237 R9 =1ffff11004259046 R10=dffffc0000000000 R11=ffffffff854f0970
R12=dffffc0000000000 R13=ffffffff99af9904 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f09ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6ac17f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34e23ffc CR3=000000010dbd6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6ac3787498 00007f6ac3787470 XMM03=00007f6ac37874a8 00007f6ac37874a0
XMM04=00007f6ac42ed100 00007f6ac3787460 XMM05=00007f6ac3787478 00007f6ac37874c0
XMM06=00007f6ac37874b8 00007f6ac37874b0 XMM07=00007f6ac37874a8 00007f6ac37874a0
XMM08=0000000000000000 00007f6ac3612ee7 XMM09=0000000000000000 00007f6ac3612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
