last executing test programs:

5m38.757389373s ago: executing program 1 (id=337):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x221, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24080020}, 0x4000000)

5m38.673080787s ago: executing program 1 (id=338):
syz_usb_connect(0x3, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x1a, 0x58, 0x3e, 0x40, 0x16d0, 0x10a9, 0x10e4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0xc8, 0x10, 0x1, "", [{{0x9, 0x4, 0x6e, 0x3, 0x0, 0xff, 0xe2, 0x88, 0x1}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})

5m37.443331824s ago: executing program 1 (id=350):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16, 0x0, 0x0, 0x6e4}]}, 0x10)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1000, 0x8000}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9e5, 0x0, &(0x7f0000000f00)="a6e1938171721d1ad0ac4d39e2c6c0c509ccfe10864006f7d3bbef7882b4c66ff66cd9e387d9b87bd9d6428facd4d36d787b2aa5615801618d2562c4eb8058537f153fa36eb15497bf95792c4db08e287ca6917381050c7fc73299dc7f8e86dc54a105a4e46f48eb66e65821e2b3bc059cd63686dd406ac69e76f16881ad97c1944ff1313d231d280f2d174100285f4052ed8ac19475e74681397c32d526acf4ed9c27aeb69b2f6d11a563f0f2688181093bdfb4ded42348230a5faf3c16a8f3a10ce09a42d874927f940f6c9cc468dd393a94b9fb567b3d8f11ffeaaf1b550fb47992ca5502f5926d39cfdb0b9252bbc9ba0a3c782e84bd26341dadd75cc5f03b2b58c2c9385277b6a36c97911f2a69be20e5c51c7b3a224c95fd325a6c2fe5d9c9f0eb91ecfe467ba375490b51724ab040a74f65f108481ab7a2e8c4c92e768adb5a6fe04faa33c870917fbe3b83b14a7caa5ed44bc58f1bac3c5b674c29d6fe021d455fd7d0961cf80fc89f0ddfc2f138d450b6abaffaf2a0f75c44d55b304115023f8d7ccf53e74f5090c76bdf7d956c95e14023d2c020ca604c21fdd09bcbe8d0a1ef2c62b9bd85f11fd58286b603dc4dd433564ab6f547d0a17769263ee738972df1d3f6058c23451b64e58aa1b651fba7eb7f99dd5f22cd2e2c0254ec5aed36040fa6675f5e3e02f4c74ca41ee044b1136111b229f61dbdbf94cf1b7ec82df394538c90273a7519154cdb27ed77bba68671bdd2d2b5c04e884f66299983306586201b710c2607df26b86b9eb609a9ca82dfaeb9f6da3e230b52142c88a11e7bde7c9945567350025f03ba60177cc2c6155b0587c05d8b76c24e88332a93defd1bd1f266963c69e51e22271232a2fd12a38566cfa4520c70917c667cd62fca1b5c2a6e2689d13430a4301842d4ac6cba63978ede5c784a133b1020be5f93d50f049394ba915699f6adfdb0254c415c5c51a6fbac29eb576270ad5b5eda58098032447b41b19c4d69b355346ec3141dbf746d5c9a957c7d8cc6c8fba71ef1a88238ca08a8a90b7663ce578b43a6dae4aeca7af6ece998da71d81b734192bb07f268ae917ec4ce590db027155124b9a8e1d26977d4b3319a24552bf4cec8fa5856e95fe5505166c42deb4cb84363d418e961dd9b58001d25f18f410e7a532f9b742084d5412630aa1a2f9ea4cff543ab5af40d00576b8a91fdd9bbc9ab9b43d5858f4eae7c3d64ca2307e279f2f14a78a319960c14b22c3a9b408b520cecfc92e8a49084ac4b47c7567be3eeb12d17d61a814e32b74141731df56e5f8fcdaf07db9bb341c2a6cd09c9d27793d108db3d34e3505924d63d92f55dfa2687244f5fa2bb297791c922fb1f017d8d1e4f122c5a36def476335294aaae89b164b0d9165c4cf13caf82e4cc0d5432a8793d8a8689c35c9dc9c8736bc385cb27260e8faa869ef7ddb0aa6e89fa465aa12a456e09dc26bef947730c9ffb85194e53385d50d5d3a5607c60d777b5893bb5968519f5004268f8c3af7333f259eea1a59e500a1cf80745fab73f1f1ab8dbe62d5a97e0aed53137ff3743ed69aeffba2298233740ad809e2792e1a3a649b4e2b62357e95cf74d208031feb353736e0c137622b0ffc43507183bba0b6054ab29081595c715c852497b868a6bd3a88f1077524b92b5961b93892a9143d221b0ce770b90751c36a03a02203243cb185baabe64e6d95905d6b6ef613f23b117850c58292161022721f81be4d5928d9b67f9634d1a2e8984a5057d47688239dbc6cc85111c947af4dbcf9927ccf8081d74f0070d129a8b1d58162e20626a19c035f074686bebfc2c99a3079c01d1faa8a2b87c824eee3b20a2ffaae4c1755351b9871268561cc4422f3ff6f8dd633e7d85e3d4872d9c2eca4a11a1ce26d70149e531487f83fed597eff32e9391b1f7352c1c78e8628a485d66affcce91519d91c450dfdb400509aa255451592c06f9d13e83abb07baed2bbdd9d72e6f52b9f9f2bb26fe78e0c11dc5f8e083660ac9aa162267c37b109e79a9e9470ab30a49b724c5f05bafea686c39772ff13bb8e1c8eea5b6abae115056ae41d7866eb564bae924d9c08dd8af3ef12ea691b9bda633c6992f855bc0a0693abce4363ab2b0e708a19267b2434afd8b75c46bfbb8577a73b55993518f72f2e369e76663196ca7fb145f9e34b467edb767ced6cb257c813e6bd15c3c70da625a42b6c299721d27735c0088fafa82519141833fd796b23dd021e37ec7fb369b67fdec2dac5ebb77026ff205f0eb6608a6814d91539e95ccc710c40d729099ccc749f9e9d1c8bf752d65762e6f13eb00757ae23086e8dd6b6e018893c2b16d8af0aa1b528d1e18f3587d408c5a67bf03bb4a04de61ae8848d41d050bff2ab041922594548567b6576878f81141760df18d19dcbb3989a539a2d6ff829f23f530761bf04e1b762d8d171a17fc2a43d0c538a644f771a3ec9b9baa5c3beb8dc4f28f72b262427fb2f0e6571a88e1cd2d259dd2655cecf7fd49e81026b720dd9cbca6b4087d7028da62876b2612aaa342ed06938bea9aafdaf25296faae0bca54c549266dd2c8f636e4e1f3fe63625ca35c81ebf0f42bb24bc3a71990d22bd392dcb1e925f9b7fb247eaa9882f5480faa8448618068fd2cd092b612d0c33fa99d4b8a197343c8052aa92bde574abc2263536707b3b9f6e16339a0a52dab0d52c5f52070192e47ec1de8f3ef380df59f05808ef019a938c0f5f15185b5c3562d4463b4c566f73bd1c326abf8950d3bec742f40c50ecd7f94eb09293ff77e39f60bd45c8cd6c5d04352c17eb0c4a392efbe9785bb31830e7b03317551c52fa7076f9e9f0fd4b45a2b9def46b298d52cacab9aeb7ff6286d0c29c9134e2a85a97046c71ed4dd186726af120fd86bd6a18949d623d6b5343661f1c9183e16d423fb09e13eee29faafff6ab4173c578886baf945e3ffb817907f29fd8e01894a3412b5ee0966222bb6dca954753971431576d11e42865521a21f759824043bd474bb028dee2fc7f37259d4dba715b10587978754a358e03e7934866904fd3a83cb8694cda62dda4d3c1418e695a13e28959fb46746b3aff0b50a29fe1ad76dfff93c2a7d8e7b1db607e4380851438bb6becc25fae4f266ca95d19e9a376ff607adc5b93b794abee0963f1a087e9f5e669224f6714f3ebd6daeadbec0d2f7449764f07abf41a11dbea1277e5baeb5ee2f97661b2ae8a3de3652d27471fc5bce97ffdcfe3db07fd48b80235382421b5f7c0ba761c3d0eb9006a20c5041e90f6b0afa96c9bff21414c0ba53ff18d3303a311804c0329783d59b9e8c8af65e737843065bad88c8a6520a9743601054989a6b17613853b07ec30f13a41681649be09220b22387d25af3c54a8c820d034a16d687b7a809217a1a62a34d4c377291c3cccfdc5cd07b013bb934b029785d0360acd07ed326a99711f60f87d7bff0268359fc286c66407cbd67ebe978c486adcca5ffa3b072df0ed40ae2e876fe2b2216bb504c07b00458462ecfb07aca789eaaa23a012910432d04a5d20978babdac3a5bc9681a26e16", 0x3, 0x0, 0x6}, 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0)

5m37.315351659s ago: executing program 1 (id=351):
syz_usb_connect(0x1, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x3, 0x0, 0x0, 0x1f, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x100]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)

5m36.49307112s ago: executing program 1 (id=356):
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x84, @loopback, 0x0, 0x0, 'sh\x00', 0x3d, 0xffffffff, 0x1e}, 0x2c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0)

5m36.065546892s ago: executing program 1 (id=360):
rt_sigsuspend(0x0, 0x0)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7)

5m35.939510361s ago: executing program 32 (id=360):
rt_sigsuspend(0x0, 0x0)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7)

4m56.084302863s ago: executing program 0 (id=808):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@noblock_validity}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x10}}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x621, &(0x7f0000001700)="$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")

4m55.924758787s ago: executing program 0 (id=809):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xffe3}, {0xffff, 0xffff}, {0xc, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x2, 0xfffd, 0x5, 0x6, 0x8}, {0x74, 0x2, 0x8, 0x576, 0x8001, 0x2}, 0xa, 0xc0000, 0xb43}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PRATE64={0xc, 0x5, 0x67eb6bf12151d490}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

4m55.806625872s ago: executing program 0 (id=810):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0)

4m55.752632167s ago: executing program 0 (id=811):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7a5, &(0x7f00000007c0)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
chdir(&(0x7f0000000040)='./file0/../file0\x00')
mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x800, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20)

4m55.593528599s ago: executing program 0 (id=812):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)

4m55.090402774s ago: executing program 0 (id=815):
setreuid(0xffffffffffffffff, 0xee00)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1)

4m55.072907613s ago: executing program 33 (id=815):
setreuid(0xffffffffffffffff, 0xee00)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1)

2m33.610025768s ago: executing program 2 (id=2802):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x7)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000200)=0x8)

2m33.494087907s ago: executing program 2 (id=2804):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001300050026bd700000dcdf2507000000", @ANYRES32=r2, @ANYBLOB="500800000000000014001a80100004800c000880"], 0x34}}, 0x4004880)

2m33.419288811s ago: executing program 2 (id=2806):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000180))

2m32.489325597s ago: executing program 2 (id=2814):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYRES16, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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")
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x10010, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f00000009c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}, {@uuid_null}]})

2m32.28744253s ago: executing program 2 (id=2817):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f0000002a00))

2m31.849651723s ago: executing program 2 (id=2824):
prctl$PR_GET_IO_FLUSHER(0x3a)

2m31.747026143s ago: executing program 34 (id=2824):
prctl$PR_GET_IO_FLUSHER(0x3a)

2m29.466828787s ago: executing program 4 (id=2846):
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000080)="304d5a81431fae44", 0x8}], 0x1)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2ac}, {&(0x7f0000000bc0)="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", 0x1cb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6d5cca97", 0x47}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4264d4c1551", 0xc6}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

2m29.327921892s ago: executing program 4 (id=2847):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x660a}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

2m29.25313859s ago: executing program 4 (id=2849):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x3c, 0x4, 0x0, 0x2e00, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2m29.200322921s ago: executing program 4 (id=2851):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x2c020400)
mount$bind(&(0x7f0000002380)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x29101e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000002740)={0x2020}, 0x2020)

2m29.093347905s ago: executing program 4 (id=2852):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000840)={0x1, 0x7, 0x1, {0x2, @win={{0xc, 0x5, 0x2, 0x7}, 0x7, 0x9, 0x0, 0x1, 0x0, 0x3}}, 0x3})

2m28.752137961s ago: executing program 4 (id=2854):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff00080006"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

2m28.330948167s ago: executing program 35 (id=2854):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff00080006"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

1.891517733s ago: executing program 3 (id=4689):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}], 0x1, 0x10002, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)

1.75151781s ago: executing program 3 (id=4690):
r0 = socket(0x23, 0x805, 0x0)
write$cgroup_pid(r0, 0x0, 0x4000)

1.751368616s ago: executing program 3 (id=4691):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000002340)={0x0, 0x2, "517968031fab99584885c7bd3128656243409e35a475d8ad", {0x3, 0x3}, 0x3})

1.676499449s ago: executing program 3 (id=4692):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10008, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'})
sendmmsg$inet(r0, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r6 = fcntl$dupfd(r5, 0x406, r5)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xf1}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37)
sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYBLOB="00012bbd7000378f8668755269ed30e8d86f", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000880)
syz_open_dev$tty1(0xc, 0x4, 0x1)

1.335280223s ago: executing program 6 (id=4694):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0)

1.270866875s ago: executing program 6 (id=4695):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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")
truncate(&(0x7f0000002540)='./file2\x00', 0xe)

1.099896609s ago: executing program 6 (id=4696):
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f0000177000/0xc00000)=nil, 0xc00000)

992.803938ms ago: executing program 6 (id=4698):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x2000})

992.288136ms ago: executing program 5 (id=4699):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000000000, 0x2}, {0x0, 0x0, 0x800}, 0x200, 0x10000000, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0xc5}, 0x4000)

919.193117ms ago: executing program 6 (id=4700):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

918.906418ms ago: executing program 5 (id=4701):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0xc0, 0x30, 0x53b, 0x0, 0x0, {}, [{0xac, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x3, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x50, 0x2, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x5, 0x4, 0x8, 0x7fff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xc0}}, 0x0)

697.323085ms ago: executing program 6 (id=4702):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc6081, 0xcc)
mmap(&(0x7f0000afc000/0x1000)=nil, 0x1000, 0x2000001, 0x4010933, r0, 0xb4b40000)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x82200, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
io_uring_setup(0x423a, &(0x7f0000000000)={0x0, 0x6087, 0x40})
sendfile(r1, r2, 0x0, 0x20fffe85)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/bus/input/handlers\x00', 0x0, 0x0)

696.952831ms ago: executing program 5 (id=4703):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x4, {0xa, 0x4e23, 0x24051312, @mcast1, 0x7fffffff}}}, 0x3a)

691.477049ms ago: executing program 3 (id=4704):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000100)=@framed={{}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x3d}, 0x94)

255.841889ms ago: executing program 5 (id=4705):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
creat(0x0, 0xecf86c37d53049cc)
lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

130.768156ms ago: executing program 3 (id=4706):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0xd0)
write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0800080007000000000014000000456f0fc000660000401190"], 0xfce)

130.003298ms ago: executing program 5 (id=4707):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x4b4b, &(0x7f0000000040))

0s ago: executing program 5 (id=4708):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300012c9dff7f8cd913e90007"], 0x14}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

 attributes in process `syz.6.2911'.
[  303.832682][T13101] netlink: 'syz.6.2917': attribute type 83 has an invalid length.
[  303.857866][T13102] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.911556][T13104] loop5: detected capacity change from 0 to 1024
[  303.920197][T13104] EXT4-fs: inline encryption not supported
[  303.922553][T13104] EXT4-fs: Ignoring removed bh option
[  303.940358][T13104] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  303.945516][T13104] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60515!=35945)
[  303.949180][T13104] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  303.964141][T13104] EXT4-fs (loop5): orphan cleanup on readonly fs
[  303.969125][T13104] EXT4-fs error (device loop5): ext4_quota_enable:7192: comm syz.5.2918: inode #2304: comm syz.5.2918: iget: illegal inode #
[  303.973900][T13104] loop5: lost filesystem error report for type 5 error -117
[  303.974466][T13104] EXT4-fs (loop5): Remounting filesystem read-only
[  303.977454][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  303.977476][    C0] EXT4-fs (loop5): initial error at time 1774162806: ext4_quota_enable:7192
[  303.977497][    C0] EXT4-fs (loop5): last error at time 1774162806: ext4_quota_enable:7192
[  303.992033][T13104] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix.
[  303.997232][T13104] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  304.001485][T13104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  304.023309][T13108] loop6: detected capacity change from 0 to 4096
[  304.075230][T12851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.331955][ T5813] Bluetooth: hci0: command tx timeout
[  305.174054][ T5813] Bluetooth: hci1: command tx timeout
[  305.509481][   T29] ntfs3(loop6): ino=5, mi_enum_attr
[  305.842766][T13146] loop5: detected capacity change from 0 to 32768
[  305.857179][T13146] find_entry called with index = 0
[  305.859257][T13146] find_entry called with index = 0
[  306.342835][T13178] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.347110][T13178] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.499680][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2949'.
[  306.503826][T13184] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.539967][ T5813] Bluetooth: hci0: command tx timeout
[  306.556269][T13184] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.775102][T13193] netlink: 'syz.3.2953': attribute type 12 has an invalid length.
[  307.213481][T13187] loop6: detected capacity change from 0 to 32768
[  307.288722][ T5811]  loop6: p1 p3 < p5 p6 p7 >
[  307.342727][ T5811] loop6: p6 start 117448704 is beyond EOD, truncated
[  307.386806][T13187]  loop6: p1 p3 < p5 p6 p7 >
[  307.419344][T13187] loop6: p6 start 117448704 is beyond EOD, truncated
[  307.747248][ T5822] udevd[5822]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  307.750827][ T5811] udevd[5811]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  307.758061][T13204] loop6: detected capacity change from 0 to 2048
[  307.760908][ T6188] udevd[6188]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory
[  307.765665][ T5935] udevd[5935]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  307.794467][T13205] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  307.814883][   T33] audit: type=1800 audit(1774162810.212:659): pid=13204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2958" name="file1" dev="loop6" ino=15 res=0 errno=0
[  307.845671][ T5811] udevd[5811]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  307.856996][ T5822] udevd[5822]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  307.857205][ T6188] udevd[6188]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory
[  307.872455][ T5935] udevd[5935]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  308.169496][T13211] openvswitch: netlink: Multiple metadata blocks provided
[  308.260354][T13215] loop5: detected capacity change from 0 to 256
[  308.268841][T13215] exfat: Deprecated parameter 'utf8'
[  308.274968][T13215] exfat: Deprecated parameter 'utf8'
[  308.287492][T13215] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  308.762464][ T5813] Bluetooth: hci0: command tx timeout
[  308.901836][T13247] loop5: detected capacity change from 0 to 2048
[  308.922450][T13247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.014786][T12851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.181104][T13260] loop5: detected capacity change from 0 to 512
[  309.195308][T13260] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  309.353835][T13260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.379224][T13260] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  309.423268][T13267] syz.3.2982 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  309.714702][T13260] EXT4-fs warning (device loop5): ext4_group_extend:1890: can't read last block, resize aborted
[  309.815084][T12851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.112583][T13276] loop5: detected capacity change from 0 to 2048
[  310.120732][T13276] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  310.155578][   T33] audit: type=1800 audit(1774162812.403:660): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2987" name="file2" dev="loop5" ino=1347 res=0 errno=0
[  310.369669][T13288] 9p: Bad value for 'wfdno'
[  310.508909][T13300] loop6: detected capacity change from 0 to 164
[  310.522413][T13300] Unable to read rock-ridge attributes
[  311.718966][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3011'.
[  312.230974][ T5813] Bluetooth: hci2: unknown advertising packet type: 0x17
[  312.231020][ T5813] Bluetooth: hci2: Dropping invalid advertising data
[  312.238414][ T5813] Bluetooth: hci2: Malformed LE Event: 0x02
[  312.285507][T13348] overlayfs: upper fs does not support file handles, falling back to index=off.
[  312.454685][T13353] loop6: detected capacity change from 0 to 4096
[  313.229650][T13379] xt_CT: You must specify a L4 protocol and not use inversions on it
[  313.322721][T13378] loop6: detected capacity change from 0 to 512
[  313.360581][T13378] EXT4-fs (loop6): invalid first ino: 0
[  313.527808][T13388] IPv6: sit1: Disabled Multicast RS
[  313.533704][T13388] sit1: entered allmulticast mode
[  314.127801][   T36] Bluetooth: hci3: Frame reassembly failed (-84)
[  315.254299][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3048'.
[  315.273142][T13412] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3048'.
[  315.538275][T13425] loop6: detected capacity change from 0 to 8
[  315.559439][T13425] SQUASHFS error: lzo decompression failed, data probably corrupt
[  315.562991][T13425] SQUASHFS error: Failed to read block 0x1dd: -5
[  315.575820][T13425] SQUASHFS error: Unable to read metadata cache entry [1db]
[  315.582161][T13425] SQUASHFS error: Unable to read inode 0xa7
[  316.032392][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3067'.
[  316.035140][T13452] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3067'.
[  316.180533][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  316.186570][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.275069][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  316.278627][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.292472][ T5813] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  316.488729][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  316.493078][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.599844][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode
[  316.606797][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  316.610912][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.886799][   T12] bridge_slave_1: left allmulticast mode
[  316.889981][   T12] bridge_slave_1: left promiscuous mode
[  316.892379][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.908098][   T12] bridge_slave_0: left allmulticast mode
[  316.915088][   T12] bridge_slave_0: left promiscuous mode
[  316.918488][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.932691][   T12] veth0_to_bond: left allmulticast mode
[  316.936836][   T12] veth0_to_bond: left promiscuous mode
[  316.939838][   T12] bridge3: port 2(veth0_to_bond) entered disabled state
[  316.947267][   T12] veth3: left allmulticast mode
[  316.957022][   T12] veth3: left promiscuous mode
[  316.972846][   T12] bridge3: port 1(veth3) entered disabled state
[  317.411029][ T5880] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  317.587614][ T5880] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  317.592272][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  317.811192][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  317.814965][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  317.821442][ T5880] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  317.824331][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.827125][ T5880] usb 6-1: Product: syz
[  317.828518][ T5880] usb 6-1: Manufacturer: syz
[  317.830088][ T5880] usb 6-1: SerialNumber: syz
[  317.834082][ T5880] usb 6-1: config 0 descriptor??
[  317.849242][   T12] geneve1 (unregistering): left promiscuous mode
[  317.860297][ T5880] iguanair 6-1:0.0: failed to get version
[  317.862628][ T5880] iguanair 6-1:0.0: probe with driver iguanair failed with error -90
[  317.912366][   T12] bond3 (unregistering): (slave vlan0): Releasing backup interface
[  317.972027][   T12] bond2 (unregistering): (slave bridge1): Releasing backup interface
[  317.975036][   T12] bridge1 (unregistering): left promiscuous mode
[  317.977210][   T12] bridge1 (unregistering): left allmulticast mode
[  318.062380][ T5880] usb 6-1: USB disconnect, device number 2
[  318.106179][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  318.112277][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  318.116281][   T12] bond0 (unregistering): Released all slaves
[  318.122544][   T12] bond1 (unregistering): Released all slaves
[  318.132115][   T12] bond2 (unregistering): Released all slaves
[  318.141683][   T12] bond3 (unregistering): Released all slaves
[  318.782832][T13500] tipc: Started in network mode
[  318.788722][T13500] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  318.792359][T13500] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  318.839794][T13500] loop6: detected capacity change from 0 to 256
[  318.852996][T13500] exfat: Deprecated parameter 'namecase'
[  318.855916][T13500] exfat: Deprecated parameter 'namecase'
[  318.857813][T13500] exfat: Deprecated parameter 'utf8'
[  318.859678][T13500] exfat: Deprecated parameter 'namecase'
[  318.871805][T13500] /dev/loop6: Can't open blockdev
[  319.641598][T13527] netlink: 'syz.6.3090': attribute type 10 has an invalid length.
[  319.649677][T13527] veth1_macvtap: left promiscuous mode
[  319.821781][   T12] hsr_slave_0: left promiscuous mode
[  319.829963][   T12] hsr_slave_1: left promiscuous mode
[  319.837675][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  319.840225][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  319.867208][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  319.871800][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  319.877067][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3094'.
[  319.897434][   T12] dummy0: left allmulticast mode
[  319.900668][   T12] veth1_macvtap: left allmulticast mode
[  319.906519][   T12] veth1_macvtap: left promiscuous mode
[  319.908839][   T12] veth0_macvtap: left promiscuous mode
[  319.911129][   T12] veth1_vlan: left promiscuous mode
[  319.914119][   T12] veth0_vlan: left promiscuous mode
[  319.941112][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3094'.
[  320.235614][   T12] team0 (unregistering): Port device team_slave_1 removed
[  320.249090][   T12] team0 (unregistering): Port device team_slave_0 removed
[  320.343811][   T12] batadv0 (unregistering): left allmulticast mode
[  320.414275][T13547] batadv_slave_1: entered promiscuous mode
[  320.416508][ T5880] tipc: Node number set to 10136234
[  320.421079][T13546] batadv_slave_1: left promiscuous mode
[  320.619614][T13559] ALSA: mixer_oss: invalid OSS volume 'arp_rcv'
[  320.621578][T13559] ALSA: mixer_oss: invalid OSS volume '8847'
[  320.623376][T13559] ALSA: mixer_oss: invalid OSS volume '00f7'
[  320.817849][   T12] IPVS: stop unused estimator thread 0...
[  322.234348][T13618] overlayfs: failed to resolve './file0': -2
[  322.748395][T13644] loop5: detected capacity change from 0 to 4096
[  323.160938][T13655] libceph: resolve '0' (ret=-3): failed
[  323.267284][T13661] netlink: 'syz.5.3144': attribute type 1 has an invalid length.
[  323.270289][T13661] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3144'.
[  323.663670][T13668] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  323.669724][T13668] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  323.794388][   T12] netdevsim netdevsim5 : unset [1, 0] type 2 family 0 port 6081 - 0
[  323.797264][   T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.809964][   T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.812866][   T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.845513][   T33] audit: type=1800 audit(1774162825.202:661): pid=13672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3149" name="bus" dev="ramfs" ino=33365 res=0 errno=0
[  323.981475][T13679] netlink: 'syz.3.3152': attribute type 11 has an invalid length.
[  324.093490][T13670] loop6: detected capacity change from 0 to 40427
[  324.103006][T13670] F2FS-fs: inline encryption not supported
[  324.105440][T13670] F2FS-fs (loop6): Image doesn't support compression
[  324.107828][T13670] F2FS-fs (loop6): build fault injection rate: 690
[  324.110914][T13670] F2FS-fs (loop6): invalid crc value
[  324.161099][T13670] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  324.174823][T13670] F2FS-fs (loop6): Start checkpoint disabled!
[  324.176688][T13683] netlink: 'syz.3.3154': attribute type 13 has an invalid length.
[  324.181222][T13670] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[  324.192833][T13670] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  324.230009][T13670] syz.6.3148: attempt to access beyond end of device
[  324.230009][T13670] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  324.264577][T13677] loop5: detected capacity change from 0 to 32768
[  324.284137][T13677] read_mapping_page failed!
[  324.286295][T13677] jfs_mount: dbMount failed w/rc = -5
[  324.318553][T13677] Mount JFS Failure: -5
[  324.319850][T13677] jfs_mount failed w/return code = -5
[  324.572656][T13699] netlink: 'syz.5.3162': attribute type 58 has an invalid length.
[  324.576088][T13699] netlink: 'syz.5.3162': attribute type 58 has an invalid length.
[  324.614523][T13703] netlink: 'syz.5.3164': attribute type 6 has an invalid length.
[  324.617233][T13703] netlink: 'syz.5.3164': attribute type 4 has an invalid length.
[  324.619617][T13703] netlink: 'syz.5.3164': attribute type 5 has an invalid length.
[  324.623580][T13703] netlink: 'syz.5.3164': attribute type 6 has an invalid length.
[  324.625954][T13703] netlink: 1068 bytes leftover after parsing attributes in process `syz.5.3164'.
[  325.238328][T13729] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3174'.
[  326.003363][T13765] loop6: detected capacity change from 0 to 1024
[  326.017156][T13765] EXT4-fs error (device loop6): ext4_quota_enable:7192: inode #3: comm syz.6.3190: iget: bad i_size value: -123145302304768
[  326.032204][T13765] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  326.032548][T13765] EXT4-fs error (device loop6): ext4_quota_enable:7195: comm syz.6.3190: Bad quota inode: 3, type: 0
[  326.041993][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  326.044607][    C1] EXT4-fs (loop6): initial error at time 1774162827: ext4_quota_enable:7192: inode 3
[  326.048107][    C1] EXT4-fs (loop6): last error at time 1774162827: ext4_quota_enable:7192: inode 3
[  326.057547][T13765] loop6: lost filesystem error report for type 5 error -117
[  326.059365][T13765] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  326.072997][T13765] EXT4-fs (loop6): mount failed
[  326.162252][T13771] loop6: detected capacity change from 0 to 256
[  326.190958][T13771] FAT-fs (loop6): Directory bread(block 64) failed
[  326.194548][T13771] FAT-fs (loop6): Directory bread(block 65) failed
[  326.197523][T13771] FAT-fs (loop6): Directory bread(block 66) failed
[  326.199960][T13771] FAT-fs (loop6): Directory bread(block 67) failed
[  326.203672][T13771] FAT-fs (loop6): Directory bread(block 68) failed
[  326.205891][T13771] FAT-fs (loop6): Directory bread(block 69) failed
[  326.207997][T13771] FAT-fs (loop6): Directory bread(block 70) failed
[  326.210159][T13771] FAT-fs (loop6): Directory bread(block 71) failed
[  326.212311][T13771] FAT-fs (loop6): Directory bread(block 72) failed
[  326.216699][T13771] FAT-fs (loop6): Directory bread(block 73) failed
[  326.282013][T13774] ieee802154 phy0 wpan0: encryption failed: -22
[  326.663439][ T5862] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  326.855916][ T5862] usb 7-1: unable to get BOS descriptor or descriptor too short
[  326.859542][ T5862] usb 7-1: config 129 has an invalid interface number: 135 but max is 0
[  326.861972][ T5862] usb 7-1: config 129 has an invalid interface number: 5 but max is 0
[  326.864632][ T5862] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  326.867224][ T5862] usb 7-1: config 129 has no interface number 0
[  326.869034][ T5862] usb 7-1: config 129 has no interface number 1
[  326.875157][ T5862] usb 7-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  326.878847][ T5862] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  326.881994][ T5862] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  326.886977][ T5862] usb 7-1: config 129 interface 135 has no altsetting 0
[  326.889621][ T5862] usb 7-1: config 129 interface 5 has no altsetting 0
[  326.941038][ T5862] usb 7-1: string descriptor 0 read error: -22
[  326.944411][ T5862] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  326.948059][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.100694][ T5862] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  327.106492][ T5862] usb 7-1: MIDIStreaming interface descriptor not found
[  327.174367][ T5877] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  327.307970][ T5880] usb 7-1: USB disconnect, device number 2
[  327.336491][ T5877] usb 6-1: Using ep0 maxpacket: 32
[  327.343216][ T5877] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  327.359102][ T5877] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  327.365107][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  327.372000][ T5877] usb 6-1: Product: syz
[  327.373901][ T5877] usb 6-1: Manufacturer: syz
[  327.375992][ T5877] usb 6-1: SerialNumber: syz
[  327.382357][ T5877] usb 6-1: config 0 descriptor??
[  327.604231][ T5877] usb 6-1: USB disconnect, device number 3
[  327.885193][T13805] loop6: detected capacity change from 0 to 512
[  327.916320][T13805] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  327.918896][T13805] EXT4-fs (loop6): orphan cleanup on readonly fs
[  327.939844][T13805] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.3205: corrupted inode contents
[  327.944923][T13805] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  327.947962][T13805] EXT4-fs (loop6): Remounting filesystem read-only
[  327.953335][T13805] EXT4-fs (loop6): 1 truncate cleaned up
[  327.955217][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  327.955232][    C1] EXT4-fs (loop6): initial error at time 1774162829: ext4_do_update_inode:5569: inode 16
[  327.955248][    C1] EXT4-fs (loop6): last error at time 1774162829: ext4_do_update_inode:5569: inode 16
[  327.965950][ T1094] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  327.969791][ T1094] Quota error (device loop6): write_blk: dquota write failed
[  327.971919][ T1094] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries
[  327.975349][ T1094] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  327.978476][ T1094] Quota error (device loop6): write_blk: dquota write failed
[  327.980756][ T1094] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list
[  327.983671][ T1094] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  327.987579][ T1094] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  327.994065][ T1094] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  327.999268][T13805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  328.016746][T12952] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.434915][ T5849] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  328.605352][ T5849] usb 7-1: Using ep0 maxpacket: 32
[  328.609726][ T5849] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  328.613229][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.620509][ T5849] usb 7-1: config 0 descriptor??
[  328.855943][ T5849] gspca_main: sunplus-2.14.0 probing 041e:400b
[  329.108650][ T5849] gspca_sunplus: reg_w_riv err -71
[  329.111478][ T5849] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  329.115726][ T5849] usb 7-1: USB disconnect, device number 3
[  331.027989][ T5849] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  331.195435][ T5849] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  331.197821][ T5849] usb 7-1: config 0 has no interface number 0
[  331.199699][ T5849] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  331.215530][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.235982][ T5849] usb 7-1: config 0 descriptor??
[  331.246517][ T5849] usb 7-1: selecting invalid altsetting 1
[  331.251150][ T5849] dvb_ttusb_budget: ttusb_init_controller: error
[  331.253159][ T5849] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  331.336523][ T5849] DVB: Unable to find symbol cx22700_attach()
[  331.375691][ T5849] DVB: Unable to find symbol tda10046_attach()
[  331.377744][ T5849] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  331.469597][ T5868] usb 7-1: USB disconnect, device number 4
[  331.500793][T13895] loop5: detected capacity change from 0 to 32768
[  332.153426][T13942] kAFS: Can only specify source 'none' with -o dyn
[  332.746553][ T5880] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  332.920677][ T5880] usb 6-1: Using ep0 maxpacket: 32
[  332.925127][ T5880] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  332.934698][ T5880] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  332.937566][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.942280][ T5880] usb 6-1: Product: syz
[  332.943579][ T5880] usb 6-1: Manufacturer: syz
[  332.946176][ T5880] usb 6-1: SerialNumber: syz
[  332.951964][ T5880] usb 6-1: config 0 descriptor??
[  332.972235][ T5880] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  333.184406][ T5868] usb 6-1: USB disconnect, device number 4
[  333.186834][   T13] usb 6-1: Failed to submit usb control message: -71
[  333.189858][   T13] usb 6-1: unable to send the bmi data to the device: -71
[  333.191900][   T13] usb 6-1: unable to get target info from device
[  333.193961][   T13] usb 6-1: could not get target info (-71)
[  333.195627][   T13] usb 6-1: could not probe fw (-71)
[  333.271043][T13992] loop6: detected capacity change from 0 to 2048
[  333.287718][T13992] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  333.294796][T13992] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  333.304031][T13992] UDF-fs: Scanning with blocksize 512 failed
[  333.320260][T13992] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  333.322514][T13992] UDF-fs: Scanning with blocksize 1024 failed
[  333.340024][T13992] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  333.344237][T13992] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  333.346460][T13992] UDF-fs: Scanning with blocksize 2048 failed
[  333.356083][T13992] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  333.360585][T13992] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  333.364546][T13992] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  333.367223][T13992] UDF-fs: Scanning with blocksize 4096 failed
[  333.369410][T13992] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1)
[  333.439327][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3272'.
[  333.442033][T13995] openvswitch: netlink: Missing key (keys=40, expected=80)
[  333.445216][T13996] program syz.6.3273 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  333.502650][   T33] audit: type=1326 audit(1774162834.256:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13998 comm="syz.3.3275" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f252e79c799 code=0x0
[  334.668853][T14053] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3300'.
[  334.796536][T14060] validate_nla: 2 callbacks suppressed
[  334.796557][T14060] netlink: 'syz.6.3303': attribute type 12 has an invalid length.
[  334.802230][T14060] netlink: 'syz.6.3303': attribute type 29 has an invalid length.
[  334.805395][T14060] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3303'.
[  334.808911][T14060] netlink: 'syz.6.3303': attribute type 1 has an invalid length.
[  334.811649][T14060] netlink: 'syz.6.3303': attribute type 2 has an invalid length.
[  334.814274][T14060] netlink: 39 bytes leftover after parsing attributes in process `syz.6.3303'.
[  334.832093][ T5868] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  334.991929][T14062] loop6: detected capacity change from 0 to 32768
[  335.009219][ T5868] usb 6-1: Using ep0 maxpacket: 16
[  335.009261][T14062] JBD2: Ignoring recovery information on journal
[  335.019838][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  335.023685][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  335.034638][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  335.040706][ T5868] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  335.044660][T14062] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  335.060337][ T5868] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  335.066461][ T5868] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  335.069992][ T5868] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  335.073073][ T5868] usb 6-1: Manufacturer: syz
[  335.076276][ T5868] usb 6-1: config 0 descriptor??
[  335.118679][T12952] ocfs2: Unmounting device (7,6) on (node local)
[  335.344766][ T5868] rc_core: IR keymap rc-hauppauge not found
[  335.347254][ T5868] Registered IR keymap rc-empty
[  335.349965][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  335.366229][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  335.388758][ T5868] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  335.393805][ T5868] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input20
[  335.399868][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  335.430413][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  335.451577][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  335.473291][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  335.495853][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  335.516719][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  335.538080][ T5877] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  335.541103][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  335.558462][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  335.582414][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  335.600985][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  335.622423][ T5868] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  335.656880][ T5868] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  335.659466][ T5868] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  335.698350][ T5877] usb 7-1: Using ep0 maxpacket: 8
[  335.709938][ T5877] usb 7-1: config 1 has too many interfaces: 239, using maximum allowed: 32
[  335.712804][ T5877] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 239
[  335.715716][ T5877] usb 7-1: config 1 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.729705][ T5877] usb 7-1: config 1 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.732817][ T5877] usb 7-1: config 1 interface 0 has no altsetting 0
[  335.738647][ T5877] usb 7-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  335.754454][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.788801][ T5880] usb 6-1: USB disconnect, device number 5
[  336.234167][ T5877] elo 0003:04E7:0009.0006: item fetching failed at offset 4/5
[  336.237630][ T5877] elo 0003:04E7:0009.0006: parse failed
[  336.239866][ T5877] elo 0003:04E7:0009.0006: probe with driver elo failed with error -22
[  336.435470][T14098] loop5: detected capacity change from 0 to 4096
[  336.438648][T14098] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  336.450833][T14098] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  336.451428][ T5877] usb 7-1: USB disconnect, device number 5
[  336.532710][T14102] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  337.054388][T14114] loop5: detected capacity change from 0 to 16
[  337.087225][T14114] erofs (device loop5): mounted with root inode @ nid 36.
[  337.450970][T14115] xt_connbytes: Forcing CT accounting to be enabled
[  337.453367][T14115] xt_NFQUEUE: number of total queues is 0
[  337.985681][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  337.988365][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  339.036898][T14167] loop5: detected capacity change from 0 to 128
[  339.048325][T14167] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  339.064090][T14167] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  339.098511][T12851] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  339.153695][T14174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3353'.
[  340.520760][T14203] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3364'.
[  340.670548][T14207] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3366'.
[  340.686344][T14209] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3367'.
[  340.689067][T14209] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3367'.
[  340.692126][T14209] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3367'.
[  340.694840][T14209] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3367'.
[  341.072062][T14224] : renamed from bond_slave_0
[  341.397784][T14232] l2tp_ppp: sess 2/0: no socket in recv
[  341.581939][ T5849] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  341.783510][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  341.787926][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  341.800122][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  341.805433][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  341.814265][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  341.818764][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  341.841396][ T5849] usb 7-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9
[  341.844398][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.847940][ T5849] usb 7-1: Product: syz
[  341.851138][ T5849] usb 7-1: Manufacturer: syz
[  341.857711][ T5849] usb 7-1: SerialNumber: syz
[  341.889920][ T5849] usb 7-1: config 0 descriptor??
[  341.896344][ T5849] ti_usb_3410_5052 7-1:0.0: TI USB 5052 2 port adapter converter detected
[  341.899561][ T5849] ti_usb_3410_5052 7-1:0.0: missing endpoints
[  342.129086][ T5849] usb 7-1: USB disconnect, device number 6
[  342.301937][T14245] Bluetooth: MGMT ver 1.23
[  342.441649][   T33] audit: type=1326 audit(1774162842.627:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14248 comm="syz.5.3381" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffbe579c799 code=0x0
[  342.981125][ T5849] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  343.141352][ T5849] usb 7-1: Using ep0 maxpacket: 8
[  343.146028][ T5849] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  343.149011][ T5849] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  343.153136][ T5849] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  343.157637][ T5849] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  343.163270][ T5849] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  343.169322][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.472587][ T5849] usb 7-1: GET_CAPABILITIES returned 0
[  343.474884][ T5849] usbtmc 7-1:16.0: can't read capabilities
[  343.489989][T14276] overlayfs: failed to clone upperpath
[  343.734722][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  343.738769][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  343.742103][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  343.745553][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  343.752636][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  343.756063][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  343.759491][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  343.768322][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  343.771928][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  343.775361][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  343.778785][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  343.782219][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  343.793144][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  343.796621][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  343.800054][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  343.803412][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  343.819650][ T5849] usb 7-1: USB disconnect, device number 7
[  344.055285][T14285] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  344.388211][T14287] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  344.667895][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3401'.
[  344.675094][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3401'.
[  344.894603][T14303] loop5: detected capacity change from 0 to 32768
[  345.022183][T14303] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  345.113057][T14303] XFS (loop5): Ending clean mount
[  345.123738][T14303] XFS (loop5): Quotacheck needed: Please wait.
[  345.181581][T14303] XFS (loop5): Quotacheck: Done.
[  345.271813][T12851] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  346.438809][T14336] tipc: Failed to remove unknown binding: 66,0,0/0:136614412/136614413
[  346.449314][T14336] tipc: Failed to remove unknown binding: 66,0,0/0:136614412/136614413
[  347.138388][ T5877] IPVS: starting estimator thread 0...
[  347.232091][T14347] IPVS: using max 52 ests per chain, 124800 per kthread
[  347.244096][T14351] loop5: detected capacity change from 0 to 4096
[  347.262460][T14352] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  347.303411][T14351] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12
[  347.321556][T14351] Remounting filesystem read-only
[  347.351769][T12851] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  347.631083][T14360] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3425'.
[  347.650043][T14360] macsec1: entered promiscuous mode
[  347.652131][T14360] geneve1: entered promiscuous mode
[  347.664040][T14360] macsec1: entered allmulticast mode
[  347.666869][T14360] geneve1: entered allmulticast mode
[  347.685723][T14360] geneve1: left allmulticast mode
[  347.687711][T14360] geneve1: left promiscuous mode
[  347.703416][T14363] loop6: detected capacity change from 0 to 256
[  347.716987][T14363] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d)
[  347.899598][T14375] loop5: detected capacity change from 0 to 256
[  347.905229][T14375] exfat: Deprecated parameter 'utf8'
[  347.909577][T14375] exfat: Deprecated parameter 'namecase'
[  347.911445][T14375] exfat: Deprecated parameter 'namecase'
[  347.913161][T14375] exfat: Deprecated parameter 'utf8'
[  347.922596][T14375] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  347.926811][T14375] exFAT-fs (loop5): failed to test first cluster bit of root dir(5)
[  347.934701][   T33] audit: type=1800 audit(1774162847.767:664): pid=14375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3432" name="file1" dev="loop5" ino=1048665 res=0 errno=0
[  350.924339][T14438] overlayfs: failed to clone upperpath
[  351.528422][T14456] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3465'.
[  351.594837][T14460] netlink: 'syz.3.3468': attribute type 9 has an invalid length.
[  351.599376][T14460] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3468'.
[  351.705171][T14465] loop5: detected capacity change from 0 to 4096
[  351.744052][T14470] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  351.797813][T14465] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[  351.821708][T14465] Remounting filesystem read-only
[  351.823412][T14465] NILFS error (device loop5): nilfs_readdir: bad page in #2
[  351.829021][T14465] NILFS error (device loop5): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[  352.060837][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3479'.
[  352.067215][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3479'.
[  352.083765][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3479'.
[  352.083945][T10937] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  352.089699][T10937] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  352.089963][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3479'.
[  352.096785][T10937] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  352.115811][T10937] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  352.508057][   T33] audit: type=1800 audit(1774162852.046:665): pid=14496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3485" name="file0" dev="tmpfs" ino=6065 res=0 errno=0
[  354.197281][T14549] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3508'.
[  354.204763][T14549] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3508'.
[  354.680260][ T5868] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  354.838262][ T5868] usb 7-1: Using ep0 maxpacket: 32
[  354.851668][ T5868] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  354.855142][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.872628][ T5868] usb 7-1: config 0 descriptor??
[  355.025506][T14582] AppArmor: change_hat: Invalid input '='
[  355.091269][ T5868] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  355.098336][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  355.111294][ T5868] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  355.113532][ T5868] usb 7-1: media controller created
[  355.127667][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  355.161851][ T5868] DVB: Unable to find symbol dib7000p_attach()
[  355.163772][ T5868] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  355.210022][ T5868] rc_core: IR keymap rc-dib0700-rc5 not found
[  355.212085][ T5868] Registered IR keymap rc-empty
[  355.214161][ T5868] dvb-usb: could not initialize remote control.
[  355.216147][ T5868] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  355.312750][ T5868] usb 7-1: USB disconnect, device number 8
[  355.334062][ T5868] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  356.898407][T14621] netlink: 480 bytes leftover after parsing attributes in process `syz.6.3540'.
[  356.901364][T14621] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.3540'.
[  357.152805][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3543'.
[  357.397480][T14637] loop6: detected capacity change from 0 to 4096
[  357.813598][T14651] loop6: detected capacity change from 0 to 32768
[  357.828114][T14675] loop5: detected capacity change from 0 to 512
[  357.843501][T14651] 
[  357.843501][T14651]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  357.843501][T14651] 
[  357.857781][T14675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.869743][T14675] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  357.873617][T14651] ERROR: (device loop6): dbReAlloc: the block is outside the filesystem
[  357.873617][T14651] 
[  357.894387][T14651] ERROR: (device loop6): remounting filesystem as read-only
[  357.900921][T12851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.723885][  T782] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  358.825770][T14699] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3575'.
[  358.937584][  T782] usb 7-1: Using ep0 maxpacket: 32
[  358.942774][  T782] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  358.946377][  T782] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.960033][  T782] usb 7-1: config 0 descriptor??
[  358.997994][T14706] batman_adv: batadv0: Adding interface: macvtap1
[  359.000227][T14706] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  359.009793][T14706] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  359.135167][T14715] overlayfs: failed to resolve './cgroup': -2
[  359.180053][  T782] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  359.185494][  T782] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  359.193446][  T782] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  359.198125][  T782] usb 7-1: media controller created
[  359.210235][  T782] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  359.375507][ T5880] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  359.401515][  T782] az6027: usb out operation failed. (-71)
[  359.408629][  T782] az6027: usb out operation failed. (-71)
[  359.410373][  T782] stb0899_attach: Driver disabled by Kconfig
[  359.412388][  T782] az6027: no front-end attached
[  359.412388][  T782] 
[  359.415363][  T782] az6027: usb out operation failed. (-71)
[  359.417388][  T782] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  359.423736][  T782] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input22
[  359.429721][  T782] dvb-usb: schedule remote query interval to 400 msecs.
[  359.431987][  T782] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  359.438207][  T782] usb 7-1: USB disconnect, device number 9
[  359.472995][  T782] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  359.548364][ T5880] usb 6-1: config 1 interface 0 has no altsetting 0
[  359.553051][ T5880] usb 6-1: string descriptor 0 read error: -22
[  359.555169][ T5880] usb 6-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.40
[  359.558080][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.010136][T14720] loop6: detected capacity change from 0 to 2048
[  360.019457][T14720] EXT4-fs: Ignoring removed i_version option
[  360.041307][ T5880] nzxt-kraken2 0003:1E71:170E.0007: collection stack underflow
[  360.043688][ T5880] nzxt-kraken2 0003:1E71:170E.0007: item 0 4 0 12 parsing failed
[  360.046869][ T5880] nzxt-kraken2 0003:1E71:170E.0007: hid parse failed with -22
[  360.049830][ T5880] nzxt-kraken2 0003:1E71:170E.0007: probe with driver nzxt-kraken2 failed with error -22
[  360.063329][T14720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  360.070121][T14720] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  360.109336][T12952] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.204013][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3588'.
[  360.218274][ T5862] usb 6-1: USB disconnect, device number 6
[  360.271836][T14736] loop6: detected capacity change from 0 to 24
[  360.275228][T14736] romfs: bad initial checksum on dev loop6.
[  360.666242][T14748] loop6: detected capacity change from 0 to 32768
[  360.684000][T14748] (syz.6.3597,14748,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  360.691061][T14748] (syz.6.3597,14748,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  360.722566][T14748] JBD2: Ignoring recovery information on journal
[  360.749641][T14748] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  360.847756][T12952] ocfs2: Unmounting device (7,6) on (node local)
[  360.973940][T14769] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3603'.
[  362.282181][T14830] netlink: 'syz.6.3617': attribute type 15 has an invalid length.
[  362.286063][T14830] netlink: 'syz.6.3617': attribute type 7 has an invalid length.
[  362.452231][T14837] loop6: detected capacity change from 0 to 32768
[  362.456956][T14837] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3620 (14837)
[  362.470950][T14837] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  362.474909][T14837] BTRFS info (device loop6): using crc32c checksum algorithm
[  362.477604][T14837] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  362.551959][T14849] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3624'.
[  362.619553][T14837] BTRFS info (device loop6): rebuilding free space tree
[  362.632328][T14837] BTRFS info (device loop6): disabling free space tree
[  362.634929][T14837] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  362.637843][T14837] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  362.643382][T14837] BTRFS info (device loop6): enabling ssd optimizations
[  362.645614][T14837] BTRFS info (device loop6): turning on async discard
[  362.647650][T14837] BTRFS info (device loop6): enabling disk space caching
[  362.649822][T14837] BTRFS info (device loop6): force clearing of disk cache
[  362.651870][T14837] BTRFS info (device loop6): use zstd compression, level 3
[  362.698325][T12952] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  362.720804][T14867] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3627'.
[  363.023176][T14886] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3637'.
[  363.138224][T14895] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3640'.
[  363.246823][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3644'.
[  363.307477][ T5862] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  363.478235][ T5862] usb 7-1: Using ep0 maxpacket: 8
[  363.518557][T14910] loop5: detected capacity change from 0 to 1024
[  363.523292][T14910] EXT4-fs: inline encryption not supported
[  363.553140][ T5862] usb 7-1: config 1 interface 0 has no altsetting 0
[  363.586431][ T5862] usb 7-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40
[  363.594777][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.601482][ T5862] usb 7-1: Product: syz
[  363.607715][ T5862] usb 7-1: Manufacturer: syz
[  363.612059][ T5862] usb 7-1: SerialNumber: syz
[  363.654408][T14910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.692211][   T33] audit: type=1326 audit(1774162862.532:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.5.3644" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  363.699889][   T33] audit: type=1326 audit(1774162862.532:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.5.3644" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffbe575cfce code=0x7ffc0000
[  363.708182][   T33] audit: type=1326 audit(1774162862.532:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.5.3644" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  363.716523][   T33] audit: type=1326 audit(1774162862.532:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.5.3644" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  363.724946][   T33] audit: type=1326 audit(1774162862.532:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.5.3644" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  363.733101][   T33] audit: type=1326 audit(1774162862.551:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.5.3644" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffbe575cfce code=0x7ffc0000
[  363.744951][   T33] audit: type=1326 audit(1774162862.551:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.5.3644" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffbe575cfce code=0x7ffc0000
[  363.753125][   T33] audit: type=1326 audit(1774162862.551:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.5.3644" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffbe575cfce code=0x7ffc0000
[  363.761417][   T33] audit: type=1326 audit(1774162862.551:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.5.3644" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffbe575cfce code=0x7ffc0000
[  363.768068][   T33] audit: type=1326 audit(1774162862.551:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.5.3644" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffbe575cfce code=0x7ffc0000
[  363.974912][ T5862] usbhid 7-1:1.0: can't add hid device: -71
[  363.977467][ T5862] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[  363.986454][ T5862] usb 7-1: USB disconnect, device number 10
[  364.221053][T12851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.604493][T14939] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3658'.
[  364.860768][T14942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3660'.
[  365.142802][ T5849] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  365.304976][ T5849] usb 7-1: config 1 has an invalid interface number: 7 but max is 0
[  365.308307][ T5849] usb 7-1: config 1 has no interface number 0
[  365.310784][ T5849] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  365.315291][ T5849] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  365.319098][ T5849] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.327548][ T5849] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  365.333555][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.336727][ T5849] usb 7-1: Product: syz
[  365.338448][ T5849] usb 7-1: Manufacturer: syz
[  365.340297][ T5849] usb 7-1: SerialNumber: syz
[  365.345750][T14944] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  365.593591][T14944] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  365.819284][ T5849] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07
[  366.044799][ T5849] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71
[  366.047669][ T5849] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71
[  366.060567][ T5849] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71
[  366.063251][ T5849] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71
[  366.073715][ T5849] usb 7-1: USB disconnect, device number 11
[  366.078882][ T5849] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem
[  366.157890][ T5849] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  366.616621][ T5813] Bluetooth: hci1: command 0x0406 tx timeout
[  367.608827][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3687'.
[  368.903841][T15018] loop6: detected capacity change from 0 to 32768
[  368.913932][T15018] (syz.6.3694,15018,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  368.919244][T15018] (syz.6.3694,15018,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  368.947632][T15014] loop5: detected capacity change from 0 to 32768
[  369.002261][T15018] JBD2: Ignoring recovery information on journal
[  369.031522][T15018] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  369.392815][T15032] loop5: detected capacity change from 0 to 512
[  369.414923][T15032] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  369.424637][T15032] EXT4-fs (loop5): 1 truncate cleaned up
[  369.428107][T15032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  369.438518][   T33] kauditd_printk_skb: 304 callbacks suppressed
[  369.438528][   T33] audit: type=1800 audit(1774162867.907:980): pid=15032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3696" name="file1" dev="loop5" ino=15 res=0 errno=0
[  369.486221][   T33] audit: type=1800 audit(1774162867.907:981): pid=15032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3696" name="file1" dev="loop5" ino=15 res=0 errno=0
[  370.012362][T12851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.031715][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3702'.
[  370.530430][T12952] ocfs2: Unmounting device (7,6) on (node local)
[  370.776543][T15068] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3712'.
[  370.790541][T15072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3714'.
[  371.023676][T15093] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3724'.
[  371.026616][T15093] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3724'.
[  371.188299][T15091] loop6: detected capacity change from 0 to 32768
[  371.191266][T15091] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3721 (15091)
[  371.196627][T15091] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  371.199601][T15091] BTRFS info (device loop6): using sha256 checksum algorithm
[  371.348385][T15091] BTRFS info (device loop6): enabling ssd optimizations
[  371.350411][T15091] BTRFS info (device loop6): turning on async discard
[  371.352347][T15091] BTRFS info (device loop6): enabling free space tree
[  371.429992][T15125] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.3721'.
[  371.818535][T15132] overlayfs: metacopy with no lower data found - abort lookup (/file1)
[  372.662873][T12952] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  372.868808][T15141] loop6: detected capacity change from 0 to 1024
[  372.921908][T15141] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  372.926534][T15141] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  372.938836][T15141] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3737: bg 0: block 112: padding at end of block bitmap is not set
[  372.953484][T15141] EXT4-fs (loop6): Remounting filesystem read-only
[  372.956592][T15141] EXT4-fs warning (device loop6): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.6.3737: cleanup dec ref error -28
[  372.980531][T12952] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  373.043758][T15150] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  373.247099][T15162] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3746'.
[  373.252089][T15162] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  373.370158][T15170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3750'.
[  373.393576][T15172] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3752'.
[  373.496078][T15180] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3755'.
[  373.584920][T15186] vlan2: entered allmulticast mode
[  373.586522][T15186] team0: entered allmulticast mode
[  373.588007][T15186] team_slave_0: entered allmulticast mode
[  373.590028][T15186] team_slave_1: entered allmulticast mode
[  373.806391][T15200] vlan3: entered promiscuous mode
[  373.808478][T15200] bridge0: entered promiscuous mode
[  375.568621][T15247] openvswitch: netlink: Actions may not be safe on all matching packets
[  375.603671][T15250] loop5: detected capacity change from 0 to 1024
[  375.610054][T15250] EXT4-fs: inline encryption not supported
[  375.615141][T15250] EXT4-fs: Ignoring removed i_version option
[  375.623388][T15250] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  375.647438][T15250] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.3786: lblock 2 mapped to illegal pblock 2 (length 1)
[  375.659063][T15250] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  375.659317][T15250] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  375.665238][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  375.665253][    C0] EXT4-fs (loop5): initial error at time 1774162873: ext4_map_blocks:776: inode 3: block 2
[  375.665270][    C0] EXT4-fs (loop5): last error at time 1774162873: ext4_map_blocks:776: inode 3: block 2
[  375.674803][T15250] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 48: comm syz.5.3786: lblock 0 mapped to illegal pblock 48 (length 1)
[  375.679961][T15250] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  375.680270][T15250] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  375.690596][T15250] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.3786: Failed to acquire dquot type 0
[  375.694542][T15250] loop5: lost filesystem error report for type 5 error -117
[  375.695540][T15250] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  375.700821][T15250] loop5: lost filesystem error report for type 5 error -117
[  375.701173][T15250] EXT4-fs error (device loop5): ext4_evict_inode:255: inode #11: comm syz.5.3786: mark_inode_dirty error
[  375.708237][T15250] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  375.708551][T15250] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -117)
[  375.727061][T15250] EXT4-fs (loop5): 1 orphan inode deleted
[  375.735842][T15250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  375.750343][T15250] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.3786: Invalid inode table block 1 in block_group 0
[  375.762206][T15250] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  375.770414][T15259] __nla_validate_parse: 4 callbacks suppressed
[  375.770429][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3789'.
[  375.812019][T12851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.816192][   T26] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u9:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  375.821297][   T26] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  375.829832][   T26] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  375.841762][   T26] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u9:0: Failed to release dquot type 0
[  375.847124][   T26] loop5: lost filesystem error report for type 5 error -117
[  375.853239][T12851] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0
[  375.864103][T12851] loop5: lost filesystem error report for type 5 error -117
[  375.867793][T12851] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  375.873677][T12851] loop5: lost filesystem error report for type 5 error -117
[  375.874021][T12851] EXT4-fs error (device loop5): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error
[  375.880887][T12851] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  376.051218][T15267] netlink: 'syz.5.3793': attribute type 16 has an invalid length.
[  376.084342][T15267] netlink: 'syz.5.3793': attribute type 17 has an invalid length.
[  376.132552][T15267] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.138059][T15267] 8021q: adding VLAN 0 to HW filter on device team0
[  376.142574][T15267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  376.219600][ T5813] Bluetooth: hci2: unexpected event for opcode 0x0c14
[  376.426680][T15289] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3804'.
[  376.558228][T15299] netlink: 'syz.5.3807': attribute type 21 has an invalid length.
[  376.847833][T15321] xt_hashlimit: size too large, truncated to 1048576
[  377.969122][T15344] netlink: 'syz.5.3829': attribute type 1 has an invalid length.
[  378.178103][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3837'.
[  378.246850][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3836'.
[  378.262281][T15363] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3838'.
[  378.348887][T15360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3836'.
[  378.365032][T15366] loop6: detected capacity change from 0 to 2048
[  378.368163][T15366] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  378.376203][T15368] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  378.416497][T15366] NILFS (loop6): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  378.423662][T15366] NILFS error (device loop6): nilfs_bmap_last_key: broken bmap (inode number=16)
[  378.486763][T15366] Remounting filesystem read-only
[  378.530546][T15366] NILFS (loop6): error -5 truncating bmap (ino=16)
[  378.738332][T12952] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer
[  379.212321][T15383] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  379.215592][T15383] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  379.218825][T15383] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  379.222067][T15383] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  379.225154][T15383] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  379.228281][T15383] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  379.231473][T15383] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  379.234472][T15383] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  379.237385][T15383] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  379.240424][T15383] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  379.523959][T15385] batman_adv: batadv0: Removing interface: batadv_slave_0
[  379.535481][T15385] batman_adv: batadv0: Removing interface: batadv_slave_1
[  379.538458][T15385] batman_adv: batadv0: Removing interface: macvtap1
[  380.073925][ T5880] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  380.240018][ T5880] usb 7-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  380.243213][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.246759][ T5880] usb 7-1: Product: syz
[  380.248255][ T5880] usb 7-1: Manufacturer: syz
[  380.250052][ T5880] usb 7-1: SerialNumber: syz
[  380.254931][ T5880] usb 7-1: config 0 descriptor??
[  380.261248][ T5880] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  380.661411][  T782] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  380.695512][ T5880] sonixb 7-1:0.0: Error writing register 01: -71
[  380.697619][ T5880] sonixb 7-1:0.0: probe with driver sonixb failed with error -71
[  380.707152][ T5880] usb 7-1: USB disconnect, device number 12
[  380.822944][  T782] usb 6-1: config 0 has no interfaces?
[  380.824602][  T782] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba
[  380.827135][  T782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.830999][  T782] usb 6-1: config 0 descriptor??
[  381.053357][ T5862] usb 6-1: USB disconnect, device number 7
[  381.409550][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3869'.
[  381.520763][T15446] loop6: detected capacity change from 0 to 256
[  381.702415][T15459] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3879'.
[  382.798551][T15480] bridge0: port 3(syz_tun) entered blocking state
[  382.807106][T15480] bridge0: port 3(syz_tun) entered disabled state
[  382.815695][T15480] syz_tun: entered allmulticast mode
[  382.823306][T15480] syz_tun: entered promiscuous mode
[  382.825332][T15480] bridge0: port 3(syz_tun) entered blocking state
[  382.827780][T15480] bridge0: port 3(syz_tun) entered forwarding state
[  382.838815][T15480] netlink: 'syz.5.3887': attribute type 10 has an invalid length.
[  382.847333][T15484] team0 (unregistering): Port device team_slave_0 removed
[  382.852607][T15484] team0 (unregistering): Port device team_slave_1 removed
[  382.857546][T15480] bridge0: port 3(syz_tun) entered disabled state
[  382.861827][T15480] bridge0: port 3(syz_tun) entered blocking state
[  382.863819][T15480] bridge0: port 3(syz_tun) entered forwarding state
[  382.867961][T15480] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  384.160760][T15514] loop6: detected capacity change from 0 to 128
[  384.316892][T15516] loop6: detected capacity change from 0 to 4096
[  384.324230][T15516] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  384.340808][T15516] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  384.363225][T15516] ntfs3(loop6): volume is dirty and "force" flag is not set!
[  384.388874][ T5880] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  384.482928][T15520] loop6: detected capacity change from 0 to 1156
[  384.497569][T15520] ISOFS: unable to read i-node block
[  384.499801][T15520] isofs_fill_super: get root inode failed
[  384.559610][ T5880] usb 6-1: Using ep0 maxpacket: 8
[  384.569254][ T5880] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  384.580060][ T5880] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  384.589707][ T5880] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  384.600594][ T5880] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  384.611676][ T5880] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  384.622640][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.877161][ T5880] usb 6-1: GET_CAPABILITIES returned 0
[  384.878953][ T5880] usbtmc 6-1:16.0: can't read capabilities
[  385.016350][T15530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3908'.
[  385.118811][ T5862] usb 6-1: USB disconnect, device number 8
[  386.281531][T15568] loop5: detected capacity change from 0 to 128
[  386.392590][   T33] audit: type=1326 audit(1774162883.777:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15570 comm="syz.5.3927" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbe579c799 code=0x0
[  386.811086][   T33] audit: type=1326 audit(1774162884.170:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15592 comm="syz.5.3937" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  386.821281][   T33] audit: type=1326 audit(1774162884.180:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15592 comm="syz.5.3937" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  386.847586][   T33] audit: type=1326 audit(1774162884.189:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15592 comm="syz.5.3937" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  386.866951][   T33] audit: type=1326 audit(1774162884.189:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15592 comm="syz.5.3937" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  386.875974][   T33] audit: type=1326 audit(1774162884.189:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15592 comm="syz.5.3937" exe="/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  386.907849][   T33] audit: type=1326 audit(1774162884.189:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15592 comm="syz.5.3937" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  386.940427][   T33] audit: type=1326 audit(1774162884.189:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15592 comm="syz.5.3937" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  386.976794][   T33] audit: type=1326 audit(1774162884.208:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15592 comm="syz.5.3937" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  386.983576][   T33] audit: type=1326 audit(1774162884.208:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15592 comm="syz.5.3937" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  387.037469][T15606] lo: entered promiscuous mode
[  387.066487][T15606] net_ratelimit: 44 callbacks suppressed
[  387.066502][T15606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  387.235643][T15624] loop6: detected capacity change from 0 to 256
[  387.258270][T15624] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  387.963486][T15644] loop5: detected capacity change from 0 to 32768
[  387.974354][T15644] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3961 (15644)
[  387.983255][T15644] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  387.987487][T15644] BTRFS info (device loop5): using sha256 checksum algorithm
[  388.049001][T15644] BTRFS info (device loop5): enabling ssd optimizations
[  388.051735][T15644] BTRFS info (device loop5): turning on async discard
[  388.063181][T15644] BTRFS info (device loop5): enabling free space tree
[  388.110591][T12851] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  388.875278][ T5880] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[  389.061967][ T5880] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  389.065067][ T5880] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  389.111777][ T5880] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  389.114876][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.117560][ T5880] usb 7-1: Product: syz
[  389.119089][ T5880] usb 7-1: Manufacturer: syz
[  389.123199][ T5880] usb 7-1: SerialNumber: syz
[  389.852477][ T5880] usb 7-1: 0:2 : does not exist
[  389.864546][ T5880] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  389.920082][ T5880] usb 7-1: USB disconnect, device number 13
[  389.989638][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  390.332525][T15716] loop5: detected capacity change from 0 to 32768
[  390.340815][T15716] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  390.363707][T15716] XFS (loop5): Ending clean mount
[  390.368617][T15716] XFS (loop5): Quotacheck needed: Please wait.
[  390.433897][T15716] XFS (loop5): Quotacheck: Done.
[  390.461067][T12851] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  390.759016][T15730] loop5: detected capacity change from 0 to 128
[  390.765215][ T5880] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  390.769985][T15730] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  390.777088][T15730] ext4 filesystem being mounted at /359/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  390.833259][T12851] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  390.936648][ T5880] usb 7-1: Using ep0 maxpacket: 32
[  390.939957][ T5880] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  390.942647][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.948940][ T5880] usb 7-1: config 0 descriptor??
[  391.181953][ T5880] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  391.185746][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  391.190082][ T5880] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  391.199312][ T5880] usb 7-1: media controller created
[  391.222676][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  391.399571][ T5880] az6027: usb out operation failed. (-71)
[  391.407020][ T5880] az6027: usb out operation failed. (-71)
[  391.411453][ T5880] stb0899_attach: Driver disabled by Kconfig
[  391.418968][ T5880] az6027: no front-end attached
[  391.418968][ T5880] 
[  391.422556][ T5880] az6027: usb out operation failed. (-71)
[  391.425550][ T5880] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  391.432746][ T5880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input24
[  391.442451][ T5880] dvb-usb: schedule remote query interval to 400 msecs.
[  391.446602][ T5880] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  391.452417][ T5880] usb 7-1: USB disconnect, device number 14
[  391.479922][ T5880] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  391.508755][T15764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4004'.
[  391.540427][T15766] overlayfs: workdir and upperdir must reside under the same mount
[  391.581603][T15768] loop5: detected capacity change from 0 to 512
[  391.608417][T15768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.612770][T15768] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  391.635026][T12851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.702810][T15772] netlink: 232 bytes leftover after parsing attributes in process `syz.5.4007'.
[  391.707472][T15772] netlink: 232 bytes leftover after parsing attributes in process `syz.5.4007'.
[  392.055879][T15782] loop5: detected capacity change from 0 to 4096
[  392.175421][T15782] loop4: detected capacity change from 0 to 524287936
[  393.707762][T15833] vti0: entered promiscuous mode
[  393.709249][T15833] vti0: entered allmulticast mode
[  393.926367][T15826] mmap: syz.6.4031 (15826) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  394.572495][T15857] Invalid source name
[  394.605407][T15859] SET target dimension over the limit!
[  394.727300][ T5880] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  394.887940][ T5880] usb 7-1: Using ep0 maxpacket: 32
[  394.897741][ T5880] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  394.907270][ T5880] usb 7-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  394.914695][ T5880] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  394.919240][ T5880] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0
[  394.925867][ T5880] usb 7-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  394.932437][ T5880] usb 7-1: config 0 interface 0 has no altsetting 0
[  394.936347][ T5880] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  394.943482][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.952868][ T5880] usb 7-1: config 0 descriptor??
[  395.003722][T15867] loop5: detected capacity change from 0 to 128
[  395.012434][T15867] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  395.025340][T15867] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  395.158808][T15871] binder: 15870:15871 ioctl c0306201 200000000680 returned -14
[  395.314207][T15875] loop5: detected capacity change from 0 to 1024
[  395.407121][ T5880] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0
[  395.410143][ T5880] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0
[  395.422241][ T5880] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0
[  395.426661][ T5880] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0
[  395.433499][ T5880] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0
[  395.445314][ T5880] hid-thrustmaster 0003:044F:B65D.0008: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0
[  395.451357][ T5880] hid-thrustmaster 0003:044F:B65D.0008: setup data couldn't be sent
[  395.625860][    C0] hid-thrustmaster 0003:044F:B65D.0008: URB to get model id failed with error -71
[  395.629853][ T5880] usb 7-1: USB disconnect, device number 15
[  395.645072][T15885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4058'.
[  395.742278][ T5849] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  395.905031][ T5849] usb 6-1: unable to get BOS descriptor or descriptor too short
[  395.908582][ T5849] usb 6-1: not running at top speed; connect to a high speed hub
[  395.913227][ T5849] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  395.917169][ T5849] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  395.924439][ T5849] usb 6-1: string descriptor 0 read error: -22
[  395.926937][ T5849] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  395.930474][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.944049][ T5849] usb 6-1: 0:2 : does not exist
[  396.046405][T15894] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  396.194831][T15900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4065'.
[  397.395468][T15928] loop6: detected capacity change from 0 to 32768
[  397.403166][T15928] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  397.409647][T15928] JBD2: Ignoring recovery information on journal
[  397.448192][ T5849] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  397.455352][ T5849] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[  397.458137][T15928] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  397.503544][ T5849] usb 6-1: USB disconnect, device number 9
[  397.518395][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  397.639037][T12952] ocfs2: Unmounting device (7,6) on (node local)
[  397.761197][T15934] netlink: 'syz.6.4079': attribute type 1 has an invalid length.
[  397.764063][T15934] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4079'.
[  397.900569][T15938] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  397.900625][ T5849] IPVS: starting estimator thread 0...
[  398.017484][T15940] IPVS: using max 43 ests per chain, 103200 per kthread
[  398.129965][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4084'.
[  398.436620][ T5877] libceph: connect (1)[c::]:6789 error -97
[  398.439799][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  398.449407][ T5877] libceph: connect (1)[c::]:6789 error -97
[  398.451352][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  398.493494][ T5877] libceph: connect (1)[c::]:6789 error -97
[  398.495727][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  398.727018][ T5877] libceph: connect (1)[c::]:6789 error -97
[  398.729499][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  398.786083][ T5877] libceph: connect (1)[c::]:6789 error -97
[  398.788050][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  399.266843][ T5877] libceph: connect (1)[c::]:6789 error -97
[  399.274487][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  399.278470][T15957] ceph: No mds server is up or the cluster is laggy
[  399.278651][T15952] ceph: No mds server is up or the cluster is laggy
[  399.371981][ T5877] libceph: connect (1)[c::]:6789 error -97
[  399.374638][ T5877] libceph: mon0 (1)[c::]:6789 connect error
[  399.487735][T15974] loop6: detected capacity change from 0 to 32768
[  399.512722][T15974] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  399.536594][T15974] XFS (loop6): Ending clean mount
[  399.549009][T15974] XFS (loop6): Quotacheck needed: Please wait.
[  399.637033][T15974] XFS (loop6): Quotacheck: Done.
[  399.709864][T12952] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  399.801167][T15990] netlink: 'syz.3.4098': attribute type 83 has an invalid length.
[  399.911596][ T5849] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  400.093397][ T5849] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  400.097062][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.103521][ T5849] usb 6-1: Product: syz
[  400.105192][ T5849] usb 6-1: Manufacturer: syz
[  400.107026][ T5849] usb 6-1: SerialNumber: syz
[  400.463744][T16004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4103'.
[  400.578025][T16012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4106'.
[  400.585325][T16012] bond0: entered promiscuous mode
[  400.587161][T16012] bond_slave_0: entered promiscuous mode
[  400.589840][ T5849] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  400.590064][T16012] bond_slave_1: entered promiscuous mode
[  400.595510][ T5849] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  400.604041][T16012] bond0: left promiscuous mode
[  400.606116][T16012] bond_slave_0: left promiscuous mode
[  400.608281][T16012] bond_slave_1: left promiscuous mode
[  401.099377][T16031] bond1 (unregistering): Released all slaves
[  401.381638][T16039] netlink: 'syz.6.4117': attribute type 1 has an invalid length.
[  401.383942][T16039] netlink: 'syz.6.4117': attribute type 3 has an invalid length.
[  401.388193][T16039] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4117'.
[  401.474484][ T5849] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO
[  402.068310][ T5849] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  402.072642][ T5849] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  402.263254][ T5849] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  402.285192][ T5849] usb 6-1: USB disconnect, device number 10
[  402.404319][T16050] loop5: detected capacity change from 0 to 32768
[  402.429343][T16050] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  402.456609][T16050] XFS (loop5): Ending clean mount
[  402.627755][T12851] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  403.078423][T16080] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  403.085105][T16080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.440485][T16084] loop5: detected capacity change from 0 to 4096
[  403.563730][T16085] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  403.604909][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  403.607634][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  403.625943][   T33] audit: type=1800 audit(1774162899.919:992): pid=16084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4135" name="file1" dev="loop5" ino=15 res=0 errno=0
[  404.211572][ T5877] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  404.499755][ T5877] usb 6-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid maxpacket 13977, setting to 64
[  404.520583][ T5877] usb 6-1: config 0 interface 0 has no altsetting 0
[  404.533107][ T5877] usb 6-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00
[  404.561881][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.567582][ T5877] usb 6-1: config 0 descriptor??
[  404.570105][T16095] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  405.015040][ T5877] hid_mf 0003:0079:1844.0009: unknown main item tag 0x0
[  405.017277][ T5877] hid_mf 0003:0079:1844.0009: unknown main item tag 0x0
[  405.019415][ T5877] hid_mf 0003:0079:1844.0009: unknown main item tag 0x0
[  405.021735][ T5877] hid_mf 0003:0079:1844.0009: unknown main item tag 0x0
[  405.033000][ T5877] hid_mf 0003:0079:1844.0009: unknown main item tag 0x0
[  405.035976][ T5877] hid_mf 0003:0079:1844.0009: unknown main item tag 0x0
[  405.038695][ T5877] hid_mf 0003:0079:1844.0009: report_id 51781 is invalid
[  405.055467][ T5877] hid_mf 0003:0079:1844.0009: item 0 2 1 8 parsing failed
[  405.058277][ T5877] hid_mf 0003:0079:1844.0009: HID parse failed.
[  405.060775][ T5877] hid_mf 0003:0079:1844.0009: probe with driver hid_mf failed with error -22
[  405.188468][T16129] bond1: Removing last arp target with arp_interval on
[  405.190977][T16129] bond1: entered allmulticast mode
[  405.204968][T16129] 8021q: adding VLAN 0 to HW filter on device bond1
[  405.230106][ T5877] usb 6-1: USB disconnect, device number 11
[  406.086291][T16153] netlink: 91 bytes leftover after parsing attributes in process `syz.5.4162'.
[  406.177377][T16154] virtio-fs: tag </dev/md0> not found
[  406.720147][T16169] syz_tun: refused to change device tx_queue_len
[  406.723814][T16169] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  406.732574][  T782] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  406.738655][T16169] syz_tun: refused to change device tx_queue_len
[  406.741091][T16169] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  406.789447][T16171] pimreg: entered allmulticast mode
[  406.796363][T16171] pimreg: left allmulticast mode
[  406.979903][  T782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  406.988609][  T782] usb 6-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  406.992297][  T782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.011733][  T782] usb 6-1: config 0 descriptor??
[  407.027045][  T782] smsusb:smsusb_probe: board id=8, interface number 0
[  407.029428][  T782] smsusb:smsusb_probe: Device initialized with return code -19
[  407.242412][  T782] usb 6-1: USB disconnect, device number 12
[  407.592284][T16210] bridge0: left allmulticast mode
[  407.900745][T16224] loop5: detected capacity change from 0 to 16
[  407.918238][T16224] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  407.925258][T16224] Invalid source name
[  408.273572][T16238] loop5: detected capacity change from 0 to 256
[  408.288837][T16238] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  408.400482][T16244] IPv6: addrconf: prefix option has invalid lifetime
[  408.668842][T16260] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  408.679965][T16260] IPv6: addrconf: prefix option has invalid lifetime
[  408.682892][T16260] IPv6: addrconf: prefix option has invalid lifetime
[  409.896508][T16296] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  409.899248][T16296] overlayfs: failed to set xattr on upper
[  409.901316][T16296] overlayfs: ...falling back to index=off.
[  409.903401][T16296] overlayfs: ...falling back to uuid=null.
[  409.930852][T16296] overlayfs: maximum fs stacking depth exceeded
[  410.016921][T16302] loop6: detected capacity change from 0 to 2048
[  410.020708][T16302] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  410.023676][T16302] UDF-fs: Scanning with blocksize 512 failed
[  410.029077][T16302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  410.055659][   T33] audit: type=1800 audit(1774162905.939:993): pid=16302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4228" name="file2" dev="loop6" ino=839 res=0 errno=0
[  410.072514][T16306] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.4231'.
[  410.076623][T16306] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.4231'.
[  410.181059][T16307] loop5: detected capacity change from 0 to 8
[  410.260917][T16307] SQUASHFS error: xz decompression failed, data probably corrupt
[  410.272468][T16307] SQUASHFS error: Failed to read block 0x108: -5
[  410.285653][T16307] SQUASHFS error: Unable to read metadata cache entry [106]
[  410.289961][T16307] SQUASHFS error: Unable to read inode 0x11f
[  410.737637][T16318] syz_tun: entered allmulticast mode
[  410.746016][T16317] syz_tun: left allmulticast mode
[  410.906667][T16320] netlink: 'syz.6.4237': attribute type 12 has an invalid length.
[  411.892087][T16336] loop5: detected capacity change from 0 to 32768
[  411.920660][T16336] JBD2: Ignoring recovery information on journal
[  411.960724][T16336] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  412.022256][T12851] ocfs2: Unmounting device (7,5) on (node local)
[  412.499464][ T5877] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  412.696282][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  412.700801][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64
[  412.707468][ T5877] usb 6-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00
[  412.711362][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.727322][ T5877] usb 6-1: config 0 descriptor??
[  412.730179][T16362] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  412.985280][T16374] loop6: detected capacity change from 0 to 40427
[  412.990975][ T5877] usbhid 6-1:0.0: can't add hid device: -71
[  412.991362][T16374] F2FS-fs (loop6): invalid crc value
[  412.995123][ T5877] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  413.004236][ T5877] usb 6-1: USB disconnect, device number 13
[  413.047974][T16374] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  413.052062][T16374] F2FS-fs (loop6): Start checkpoint disabled!
[  413.056421][T16374] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[  413.059516][T16374] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  413.077275][   T33] audit: type=1800 audit(1774162908.767:994): pid=16374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4261" name="file1" dev="loop6" ino=10 res=0 errno=0
[  413.098531][T16374] syz.6.4261: attempt to access beyond end of device
[  413.098531][T16374] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  413.106539][T16374] syz.6.4261: attempt to access beyond end of device
[  413.106539][T16374] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  413.140026][   T27] kworker/u10:0: attempt to access beyond end of device
[  413.140026][   T27] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  413.145608][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  413.145624][   T27] Tainted: [L]=SOFTLOCKUP
[  413.145627][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  413.145634][   T27] Workqueue: writeback wb_workfn (flush-7:6)
[  413.145657][   T27] Call Trace:
[  413.145661][   T27]  <TASK>
[  413.145666][   T27]  dump_stack_lvl+0xe8/0x150
[  413.145683][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  413.145700][   T27]  f2fs_write_end_io+0x1273/0x1740
[  413.145718][   T27]  __submit_merged_bio+0x256/0x700
[  413.145734][   T27]  __submit_merged_write_cond+0x3c9/0x4e0
[  413.145749][   T27]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  413.145771][   T27]  f2fs_write_data_pages+0x287e/0x34f0
[  413.145825][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  413.145845][   T27]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  413.145877][   T27]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  413.145900][   T27]  ? __lock_acquire+0x6b5/0x2cf0
[  413.145919][   T27]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  413.145931][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  413.145943][   T27]  do_writepages+0x32e/0x550
[  413.145960][   T27]  ? reacquire_held_locks+0x104/0x190
[  413.145971][   T27]  ? writeback_sb_inodes+0x477/0x1a20
[  413.145987][   T27]  __writeback_single_inode+0x133/0x11a0
[  413.145996][   T27]  ? do_raw_spin_unlock+0x4d/0x210
[  413.146007][   T27]  writeback_sb_inodes+0x992/0x1a20
[  413.146033][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  413.146044][   T27]  ? do_raw_spin_lock+0x12b/0x2f0
[  413.146070][   T27]  ? rcu_is_watching+0x15/0xb0
[  413.146088][   T27]  wb_writeback+0x456/0xb70
[  413.146101][   T27]  ? queue_io+0x281/0x4a0
[  413.146116][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  413.146127][   T27]  ? do_raw_spin_lock+0x12b/0x2f0
[  413.146142][   T27]  wb_workfn+0x414/0xf50
[  413.146154][   T27]  ? look_up_lock_class+0x57/0x110
[  413.146173][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  413.146184][   T27]  ? do_raw_spin_lock+0x12b/0x2f0
[  413.146194][   T27]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  413.146210][   T27]  ? process_scheduled_works+0xa8d/0x18c0
[  413.146220][   T27]  ? process_scheduled_works+0xa8d/0x18c0
[  413.146231][   T27]  process_scheduled_works+0xb6e/0x18c0
[  413.146255][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  413.146268][   T27]  ? assign_work+0x3d5/0x5e0
[  413.146280][   T27]  worker_thread+0xa53/0xfc0
[  413.146304][   T27]  kthread+0x388/0x470
[  413.146312][   T27]  ? __pfx_worker_thread+0x10/0x10
[  413.146321][   T27]  ? __pfx_kthread+0x10/0x10
[  413.146330][   T27]  ret_from_fork+0x51e/0xb90
[  413.146344][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  413.146354][   T27]  ? __switch_to+0xc7d/0x1450
[  413.146366][   T27]  ? __pfx_kthread+0x10/0x10
[  413.146375][   T27]  ret_from_fork_asm+0x1a/0x30
[  413.146395][   T27]  </TASK>
[  413.146399][   T27] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  413.504197][   T33] audit: type=1326 audit(1774162909.169:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16381 comm="syz.3.4264" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f252e79c799 code=0x0
[  413.590972][T16386] loop5: detected capacity change from 0 to 128
[  413.650774][T16386] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  413.659205][T16386] ext4 filesystem being mounted at /432/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  413.694941][T12851] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  413.872648][T16397] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4267'.
[  413.876108][T16384] loop6: detected capacity change from 0 to 32768
[  413.896703][T16384] XFS (loop6): stripe width (9) must be a multiple of the stripe unit (38034)
[  414.090064][T16409] loop6: detected capacity change from 0 to 8192
[  414.268554][T16416] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1)
[  414.276320][T16416] FAT-fs (loop6): Filesystem has been set read-only
[  414.918085][T16423] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4281'.
[  415.339121][T16427] program syz.5.4283 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  415.447648][   T33] audit: type=1326 audit(1774162910.976:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16433 comm="syz.5.4286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  415.463119][T16431] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.4285'.
[  415.470014][   T33] audit: type=1326 audit(1774162910.976:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16433 comm="syz.5.4286" exe="/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  415.490625][   T33] audit: type=1326 audit(1774162910.976:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16433 comm="syz.5.4286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  415.498828][   T33] audit: type=1326 audit(1774162910.976:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16433 comm="syz.5.4286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  415.520256][   T33] audit: type=1326 audit(1774162910.976:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16433 comm="syz.5.4286" exe="/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  415.531239][   T33] audit: type=1326 audit(1774162910.976:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16433 comm="syz.5.4286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  415.540638][   T33] audit: type=1326 audit(1774162910.976:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16433 comm="syz.5.4286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbe579c799 code=0x7ffc0000
[  416.843529][T16451] loop6: detected capacity change from 0 to 512
[  416.884990][T16451] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  416.895666][T16451] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.4292: corrupted in-inode xattr: e_value size too large
[  416.927997][T16451] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  416.928427][T16451] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4292: couldn't read orphan inode 15 (err -117)
[  416.935027][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  416.935042][    C1] EXT4-fs (loop6): initial error at time 1774162912: ext4_iget_extra_inode:5025: inode 15
[  416.935058][    C1] EXT4-fs (loop6): last error at time 1774162912: ext4_iget_extra_inode:5025: inode 15
[  416.975041][T16451] loop6: lost filesystem error report for type 5 error -117
[  416.976233][T16451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.010155][T12952] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.328873][T16481] netlink: 'syz.6.4306': attribute type 1 has an invalid length.
[  417.331454][T16481] netlink: 630 bytes leftover after parsing attributes in process `syz.6.4306'.
[  417.404551][T16487] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4309'.
[  417.650704][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4315'.
[  417.658164][T16500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4315'.
[  417.692782][T16502] netlink: 'syz.3.4316': attribute type 2 has an invalid length.
[  417.713875][T16502] netlink: 'syz.3.4316': attribute type 2 has an invalid length.
[  417.795817][T16506] binder: BINDER_SET_CONTEXT_MGR already set
[  417.839730][T16506] binder: 16505:16506 ioctl 4018620d 200000000200 returned -16
[  417.946857][T16511] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  418.064615][T16509] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[  418.439624][T16526] loop5: detected capacity change from 0 to 2048
[  418.478681][T16526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  418.513426][T12851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.972182][ T5868] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  419.039661][T16536] loop6: detected capacity change from 0 to 32768
[  419.051086][T16536] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4329 (16536)
[  419.075823][T16536] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  419.079381][T16536] BTRFS info (device loop6): using crc32c checksum algorithm
[  419.140792][T16536] BTRFS info (device loop6): setting nodatasum
[  419.143723][T16536] BTRFS info (device loop6): enabling ssd optimizations
[  419.146322][T16536] BTRFS info (device loop6): turning on async discard
[  419.148839][T16536] BTRFS info (device loop6): enabling free space tree
[  419.174543][ T5868] usb 6-1: Using ep0 maxpacket: 8
[  419.202734][ T5868] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7
[  419.210462][ T5868] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  419.213576][ T5868] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  419.216273][ T5868] usb 6-1: Product: syz
[  419.241771][ T5868] usb 6-1: Manufacturer: syz
[  419.243352][ T5868] usb 6-1: SerialNumber: syz
[  419.266000][T12952] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  419.485481][ T5868] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  419.488176][ T5868] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  419.490669][ T5868] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2
[  419.740628][ T5868] usb 6-1: palm_os_3_probe - error -71 getting bytes available request
[  419.743246][ T5868] visor 6-1:1.0: Handspring Visor / Palm OS converter detected
[  419.751475][ T5868] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  419.755802][ T5868] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  419.762181][ T5868] usb 6-1: USB disconnect, device number 14
[  419.776868][ T5868] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  419.781663][ T5868] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  419.785085][ T5868] visor 6-1:1.0: device disconnected
[  421.085449][T16600] loop6: detected capacity change from 0 to 32768
[  421.122974][T16600] JBD2: Ignoring recovery information on journal
[  421.142869][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'.
[  421.154579][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'.
[  421.157698][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'.
[  421.163568][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'.
[  421.167405][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'.
[  421.171255][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'.
[  421.175346][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'.
[  421.175824][T16600] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  421.178607][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'.
[  421.187726][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'.
[  421.191116][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'.
[  421.197555][T16611] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.199767][T16611] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.213838][T16611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  421.271981][T12952] ocfs2: Unmounting device (7,6) on (node local)
[  421.470623][T16628] tmpfs: Bad value for 'mpol'
[  423.749084][T16701] macvlan2: entered allmulticast mode
[  423.751112][T16701] hsr0: entered allmulticast mode
[  423.752923][T16701] hsr_slave_0: entered allmulticast mode
[  423.755048][T16701] hsr_slave_1: entered allmulticast mode
[  424.733469][T16716] loop6: detected capacity change from 0 to 4096
[  425.909799][T16738] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  426.001979][T16742] input input25: cannot allocate more than FF_MAX_EFFECTS effects
[  426.087837][T16746] loop6: detected capacity change from 0 to 2048
[  426.092483][T16746] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  426.097909][T16746] NILFS (loop6): mounting unchecked fs
[  426.102053][ T5811] udevd[5811]: incorrect nilfs2 checksum on /dev/loop6
[  426.113258][T16746] NILFS (loop6): recovery complete
[  426.118097][T16749] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  426.255961][ T5868] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  426.322947][T16763] loop6: detected capacity change from 0 to 4096
[  426.369493][T16766] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  426.386084][T16763] NILFS (loop6): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  426.433466][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  426.451074][ T5868] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  426.466099][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.470964][ T5868] usb 6-1: Product: syz
[  426.472659][ T5868] usb 6-1: Manufacturer: syz
[  426.474490][ T5868] usb 6-1: SerialNumber: syz
[  426.481067][ T5868] usb 6-1: config 0 descriptor??
[  426.720682][  T782] usb 6-1: USB disconnect, device number 15
[  426.785351][T16774] __nla_validate_parse: 8 callbacks suppressed
[  426.785372][T16774] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4426'.
[  426.855557][T16779] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  427.313856][T16810] loop5: detected capacity change from 0 to 164
[  427.332848][T16810] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  427.377791][ T5877] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  427.404638][T16814] netlink: 'syz.5.4445': attribute type 61 has an invalid length.
[  427.407028][T16814] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4445'.
[  427.521080][T16820] loop5: detected capacity change from 0 to 764
[  427.562040][ T5877] usb 7-1: config index 0 descriptor too short (expected 30768, got 18)
[  427.565419][ T5877] usb 7-1: config 102 has too many interfaces: 102, using maximum allowed: 32
[  427.568269][ T5877] usb 7-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config
[  427.581942][ T5877] usb 7-1: config 102 has 0 interfaces, different from the descriptor's value: 102
[  427.595556][ T5877] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  427.600469][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.607248][ T5877] usb 7-1: Product: syz
[  427.608910][ T5877] usb 7-1: Manufacturer: syz
[  427.617494][ T5877] usb 7-1: SerialNumber: syz
[  427.687708][T16828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4452'.
[  427.699595][T16730] Bluetooth: hci1: command 0x0406 tx timeout
[  427.712436][T16826] loop5: detected capacity change from 0 to 4096
[  427.749960][T16826] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  427.758279][T16826] ntfs3(loop5): Failed to load $Extend (-22).
[  427.760451][T16826] ntfs3(loop5): Failed to initialize $Extend.
[  427.774496][   T33] audit: type=1800 audit(1774162922.530:1003): pid=16826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4451" name="file1" dev="loop5" ino=30 res=0 errno=0
[  427.804798][T12851] ntfs3(loop5): ino=9, ntfs_sync_fs failed, -22.
[  427.877855][T16836] netlink: 'syz.3.4456': attribute type 10 has an invalid length.
[  427.897832][ T5849] vxcan1 speed is unknown, defaulting to 1000
[  427.899932][ T5849] syz2: Port: 1 Link DOWN
[  427.900799][T16838] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  427.902668][ T5849] vxcan1 speed is unknown, defaulting to 1000
[  427.912847][T16838] CIFS mount error: No usable UNC path provided in device string!
[  427.912847][T16838] 
[  427.918987][T16838] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  428.080656][ T5849] usb 7-1: USB disconnect, device number 16
[  428.878977][T16861] vxcan1 speed is unknown, defaulting to 1000
[  428.936548][   T33] audit: type=1804 audit(1774162923.607:1004): pid=16862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4467" name="/newroot/439/file0" dev="tmpfs" ino=2322 res=1 errno=0
[  429.707783][T16890] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4479'.
[  429.711178][T16890] netlink: 'syz.5.4479': attribute type 1 has an invalid length.
[  429.714162][T16890] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4479'.
[  430.338712][T16897] loop6: detected capacity change from 0 to 2048
[  430.363732][T16897] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  430.830164][T16901] loop6: detected capacity change from 0 to 256
[  430.835473][T16901] exfat: Deprecated parameter 'namecase'
[  430.899580][T16901] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  431.379554][T16913] libceph: resolve '96.' (ret=-3): failed
[  431.645878][T16920] xt_hashlimit: size too large, truncated to 1048576
[  432.610572][ T5849] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  432.771439][ T5849] usb 7-1: Using ep0 maxpacket: 16
[  432.774863][ T5849] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  432.777610][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.782065][ T5849] usb 7-1: config 0 descriptor??
[  432.787233][ T5849] gspca_main: sonixj-2.14.0 probing 0471:0327
[  432.865682][T16954] loop5: detected capacity change from 0 to 512
[  432.879477][T16954] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.4504: iget: bad i_size value: 38620345925642
[  432.886236][T16954] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  432.886727][T16954] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4504: couldn't read orphan inode 15 (err -117)
[  432.889507][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  432.889518][    C0] EXT4-fs (loop5): initial error at time 1774162927: ext4_orphan_get:1391: inode 15
[  432.889532][    C0] EXT4-fs (loop5): last error at time 1774162927: ext4_orphan_get:1391: inode 15
[  432.902373][T16954] loop5: lost filesystem error report for type 5 error -117
[  432.904074][T16954] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  432.928900][T12851] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.168333][ T5813] Bluetooth: hci0: command 0x0406 tx timeout
[  433.860781][ T5849] gspca_sonixj: reg_w1 err -71
[  433.881618][ T5849] sonixj 7-1:0.0: probe with driver sonixj failed with error -71
[  433.887575][ T5849] usb 7-1: USB disconnect, device number 17
[  434.906336][T17017] mmap: syz.5.4532 (17017): VmData 37462016 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data.
[  435.665063][ T5849] usb 7-1: new full-speed USB device number 18 using dummy_hcd
[  436.116856][ T5849] usb 7-1: unable to get BOS descriptor or descriptor too short
[  436.120623][ T5849] usb 7-1: not running at top speed; connect to a high speed hub
[  436.125703][ T5849] usb 7-1: config 2 has an invalid interface number: 212 but max is 1
[  436.129175][ T5849] usb 7-1: config 2 has an invalid interface number: 226 but max is 1
[  436.132187][ T5849] usb 7-1: config 2 has no interface number 0
[  436.134462][ T5849] usb 7-1: config 2 has no interface number 1
[  436.147356][ T5849] usb 7-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  436.151662][ T5849] usb 7-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  436.155656][ T5849] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  436.160450][ T5849] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  436.165432][ T5849] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  436.169736][ T5849] usb 7-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  436.174332][ T5849] usb 7-1: config 2 interface 212 has no altsetting 0
[  436.180121][ T5849] usb 7-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  436.183423][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.186375][ T5849] usb 7-1: Product: syz
[  436.188083][ T5849] usb 7-1: Manufacturer: syz
[  436.194260][ T5849] usb 7-1: SerialNumber: syz
[  436.467156][ T5849] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:2.226/input/input26
[  436.547279][ T5849] usb 7-1: USB disconnect, device number 18
[  436.549103][    C0] xpad 7-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19
[  437.129194][T17073] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4557'.
[  437.302647][T17081] loop6: detected capacity change from 0 to 1024
[  437.306547][T17081] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  437.327734][T17081] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  437.349407][T17081] EXT4-fs (loop6): orphan cleanup on readonly fs
[  437.360363][T17081] Quota error (device loop6): v2_read_file_info: Can't read info structure
[  437.363812][T17081] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  437.373941][T17081] EXT4-fs (loop6): Cannot turn on quotas: error -5
[  437.398104][T17081] EXT4-fs (loop6): 1 truncate cleaned up
[  437.400572][T17081] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  437.430805][T12952] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.566287][T17090] loop6: detected capacity change from 0 to 4096
[  437.590403][T17093] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  439.087159][T17184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4596'.
[  439.130757][T17184] 8021q: adding VLAN 0 to HW filter on device bond2
[  439.143498][T17184] all: renamed from bond2 (while UP)
[  439.598004][T17205] xt_CONNSECMARK: invalid mode: 0
[  439.645247][T17205] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4601'.
[  439.648172][T17205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4601'.
[  439.832110][T17199] loop6: detected capacity change from 0 to 32768
[  440.085046][T17213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4609'.
[  440.099132][T17213] bridge0: port 3(syz_tun) entered disabled state
[  440.131515][T17213] syz_tun (unregistering): left allmulticast mode
[  440.138134][T17213] syz_tun (unregistering): left promiscuous mode
[  440.147326][T17213] bridge0: port 3(syz_tun) entered disabled state
[  440.437703][T17226] xt_l2tp: v2 sid > 0xffff: 4294967293
[  440.476385][T17228] fuse: Bad value for 'fd'
[  441.126408][T17245] netlink: 'syz.5.4622': attribute type 3 has an invalid length.
[  441.462791][T17232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  442.401708][T17294] overlayfs: failed to clone upperpath
[  442.650526][ T5877] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  443.055951][ T5877] usb 7-1: Using ep0 maxpacket: 32
[  443.059938][ T5877] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  443.062501][ T5877] usb 7-1: config 0 has no interface number 0
[  443.067550][ T5877] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  443.070407][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.072960][ T5877] usb 7-1: Product: syz
[  443.074374][ T5877] usb 7-1: Manufacturer: syz
[  443.075794][ T5877] usb 7-1: SerialNumber: syz
[  443.079786][ T5877] usb 7-1: config 0 descriptor??
[  443.084904][ T5877] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  443.398426][ T5877] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  443.407250][ T5877] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  443.431312][T16730] Bluetooth: hci2: SCO packet for unknown connection handle 200
[  443.811432][    C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  443.816570][ T5877] usb 7-1: USB disconnect, device number 19
[  443.822187][ T5877] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  443.831288][ T5877] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  443.846395][ T5877] quatech2 7-1:0.51: device disconnected
[  444.709189][T17335] netlink: 'syz.6.4659': attribute type 14 has an invalid length.
[  445.320155][ T5849] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  445.480483][ T5849] usb 7-1: Using ep0 maxpacket: 8
[  445.485371][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  445.503873][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  445.507383][ T5849] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  445.510734][ T5849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  445.517854][ T5849] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  445.521573][ T5849] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  445.533288][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.540027][ T5849] usb 7-1: config 0 descriptor??
[  445.547080][ T5849] hub 7-1:0.0: bad descriptor, ignoring hub
[  445.553293][ T5849] hub 7-1:0.0: probe with driver hub failed with error -5
[  445.592126][T16730] Bluetooth: hci3: urb ffff88819317b500 submission failed (90)
[  445.764430][ T5849] usb 7-1: USB disconnect, device number 20
[  446.578997][T17414] loop6: detected capacity change from 0 to 128
[  446.615902][T17414] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 54)
[  446.627937][T17414] FAT-fs (loop6): Filesystem has been set read-only
[  446.692138][T12952] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 54)
[  447.126043][T17430] loop6: detected capacity change from 0 to 32768
[  447.828800][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4706'.
[  447.866686][T17435] ERROR: (device loop6): dbAdjCtl: the maximum free buddy is not the old root
[  447.866686][T17435] 
[  447.878007][T17435] ERROR: (device loop6): remounting filesystem as read-only
[  447.957086][T12952] ------------[ cut here ]------------
[  447.961029][T12952] kernel BUG at fs/jfs/inode.c:175!
[  447.966825][T12952] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  447.969733][T12952] CPU: 1 UID: 0 PID: 12952 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  447.973207][T12952] Tainted: [L]=SOFTLOCKUP
[  447.974469][T12952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  447.977443][T12952] RIP: 0010:jfs_evict_inode+0x438/0x440
[  447.979058][T12952] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 d3 6a d9 fe e9 16 fe ff ff e8 39 36 70 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  447.984732][T12952] RSP: 0018:ffffc9000631faa0 EFLAGS: 00010293
[  447.986914][T12952] RAX: ffffffff83555da7 RBX: ffff8881bc2fdfc0 RCX: ffff888109c03a80
[  447.989705][T12952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881bc2fdfc0
[  447.992507][T12952] RBP: 0000000000000001 R08: ffffffff9011d9b7 R09: 1ffffffff2023b36
[  447.994849][T12952] R10: dffffc0000000000 R11: ffffffff835539d0 R12: dffffc0000000000
[  447.997192][T12952] R13: dffffc0000000000 R14: ffff8881bc2fdc48 R15: ffff8881bc2fdfc0
[  447.999548][T12952] FS:  0000555574f7f500(0000) GS:ffff8882a9465000(0000) knlGS:0000000000000000
[  448.002454][T12952] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  448.004438][T12952] CR2: 0000000000000000 CR3: 0000000114e16000 CR4: 00000000000006f0
[  448.006824][T12952] Call Trace:
[  448.007811][T12952]  <TASK>
[  448.008691][T12952]  ? evict+0x612/0xb10
[  448.009938][T12952]  ? __pfx_jfs_evict_inode+0x10/0x10
[  448.011688][T12952]  evict+0x61e/0xb10
[  448.012942][T12952]  ? __pfx_evict+0x10/0x10
[  448.014272][T12952]  evict_inodes+0x75a/0x7f0
[  448.015924][T12952]  ? __pfx_evict_inodes+0x10/0x10
[  448.018148][T12952]  generic_shutdown_super+0xaa/0x2d0
[  448.019907][T12952]  kill_block_super+0x44/0x90
[  448.021709][T12952]  deactivate_locked_super+0xbc/0x130
[  448.023510][T12952]  cleanup_mnt+0x437/0x4d0
[  448.025321][T12952]  ? _raw_spin_unlock_irq+0x23/0x50
[  448.027363][T12952]  task_work_run+0x1d9/0x270
[  448.028808][T12952]  ? __pfx_task_work_run+0x10/0x10
[  448.030398][T12952]  exit_to_user_mode_loop+0xed/0x480
[  448.032073][T12952]  ? rcu_is_watching+0x15/0xb0
[  448.033917][T12952]  do_syscall_64+0x32d/0xf80
[  448.035668][T12952]  ? trace_irq_disable+0x3b/0x150
[  448.037614][T12952]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.039917][T12952]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.042082][T12952] RIP: 0033:0x7ff0a939d9d7
[  448.043764][T12952] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  448.050953][T12952] RSP: 002b:00007ffec1d0a508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  448.053994][T12952] RAX: 0000000000000000 RBX: 00007ff0a9432050 RCX: 00007ff0a939d9d7
[  448.056970][T12952] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1d0a5c0
[  448.060001][T12952] RBP: 00007ffec1d0a5c0 R08: 00007ffec1d0b5c0 R09: 00000000ffffffff
[  448.062905][T12952] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec1d0b650
[  448.065749][T12952] R13: 00007ff0a9432050 R14: 0000000000067ef9 R15: 00007ffec1d0b690
[  448.068427][T12952]  </TASK>
[  448.069531][T12952] Modules linked in:
[  448.071661][T12952] ---[ end trace 0000000000000000 ]---
[  448.081994][T12952] RIP: 0010:jfs_evict_inode+0x438/0x440
[  448.084933][T12952] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 d3 6a d9 fe e9 16 fe ff ff e8 39 36 70 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  448.091388][T12952] RSP: 0018:ffffc9000631faa0 EFLAGS: 00010293
[  448.093465][T12952] RAX: ffffffff83555da7 RBX: ffff8881bc2fdfc0 RCX: ffff888109c03a80
[  448.095937][T12952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881bc2fdfc0
[  448.098843][T12952] RBP: 0000000000000001 R08: ffffffff9011d9b7 R09: 1ffffffff2023b36
[  448.116042][T12952] R10: dffffc0000000000 R11: ffffffff835539d0 R12: dffffc0000000000
[  448.119681][T12952] R13: dffffc0000000000 R14: ffff8881bc2fdc48 R15: ffff8881bc2fdfc0
[  448.122626][T12952] FS:  0000555574f7f500(0000) GS:ffff8882a9465000(0000) knlGS:0000000000000000
[  448.126075][T12952] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  448.128439][T12952] CR2: 00007ffbe59e7158 CR3: 0000000114e16000 CR4: 00000000000006f0
[  448.131625][T12952] Kernel panic - not syncing: Fatal exception
[  448.134544][T12952] Kernel Offset: disabled
[  448.136242][T12952] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:02:37  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff92000022e5b RBX=ffffffff8b7324eb RCX=0000000080000202 RDX=0000000000000000
RSI=ffffffff8c27f160 RDI=ffffffff8c27f120 RBP=dffffc0000000000 RSP=ffffc900001171b8
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900001172d8 R11=ffffffff81b0b630
R12=1ffff92000022e51 R13=ffffc900001172d8 R14=ffffc90000117288 R15=ffffffff81767f05
RIP=ffffffff81767f83 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818de65000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffbe5a17dac CR3=000000011d8ba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000631f350
R8 =ffff888105b60237 R9 =1ffff11020b6c046 R10=dffffc0000000000 R11=ffffffff853e97c0
R12=dffffc0000000000 R13=ffffffff9a2b1a54 R14=ffffffff9a5c9900 R15=0000000000000000
RIP=ffffffff853e983c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555574f7f500 ffffffff 00c00000
GS =0000 ffff8882a9465000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000114e16000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=00007ffbe59ec5e8 00007ffbe59ec618 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007ffbe59ec5d0 00007ffbe59ec610
XMM06=00007ffbe59ec5f8 00007ffbe59ec5c8 XMM07=00007ffbe59ec600 00007ffbe59ec5e0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
