last executing test programs:

37.780436257s ago: executing program 1 (id=432):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
readlink(0x0, 0x0, 0x0)

37.350367992s ago: executing program 1 (id=435):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000540)={0x4, &(0x7f0000000580)=[{0x45, 0x2}, {0x7, 0x20, 0xf1}, {0x24}, {0x6, 0x1}]})

37.023000035s ago: executing program 1 (id=437):
rename(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='.\x00')

36.861053688s ago: executing program 1 (id=439):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000009780), 0x1, 0x9759, &(0x7f000001c600)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000a80)='ext4\x00', &(0x7f0000000880)='./file1\x00', 0x40, &(0x7f0000000a40), 0x1, 0x56f, &(0x7f0000000140)="$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")
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_pidfd_open(r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

36.400141921s ago: executing program 1 (id=440):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

36.028216422s ago: executing program 1 (id=442):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000180)='4\x00', 0x2)

35.935418018s ago: executing program 32 (id=442):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000180)='4\x00', 0x2)

30.321318685s ago: executing program 3 (id=491):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x418, &(0x7f0000002600)=ANY=[], 0xff, 0x6a8, &(0x7f0000001dc0)="$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")
mknod$loop(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23, @remote}}, [0x2, 0x0, 0x1, 0x7, 0x7, 0x0, 0x8000000000000001, 0x4, 0x1, 0x0, 0x944, 0xfffffffffffffff1, 0xc5c, 0x200, 0x2]}, &(0x7f0000000280)=0x100)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20044000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00')

29.357090289s ago: executing program 3 (id=497):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2)

29.241920055s ago: executing program 3 (id=498):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000000)=0x8)

29.139957856s ago: executing program 3 (id=499):
syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./bus\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c6b6565705f6c6173745f646f74732c696f636861727365743d63703835302c7379735f747a2c696f636861727365743d69736f383835392d31352c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303030382c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c646d61736b3d30303030303030303030303030303030303030303031332c646973636172642c646973636172642c00e0669f62a389f94dcc2fda2101686c10656f728020f5a616130a1fc56df99c298f3ad694c74a629be0af8c838281"], 0x1, 0x152a, &(0x7f0000003000)="$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")
mount(0x0, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)

29.024476043s ago: executing program 3 (id=502):
r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=<r1=>0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c81, 0x0)

27.661158107s ago: executing program 3 (id=511):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

27.616944082s ago: executing program 33 (id=511):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

3.13600921s ago: executing program 0 (id=803):
unshare(0x2a020400)
r0 = io_uring_setup(0x218a, &(0x7f0000000240)={0x0, 0x3ffffffc, 0x800, 0x4, 0x221})
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = epoll_create1(0x80000)
epoll_pwait2(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0)

3.040367237s ago: executing program 0 (id=806):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0)

2.887183019s ago: executing program 4 (id=808):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000006c0)={0x6, 0x118, 0xfa00, {{0x51, 0x5, "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", 0x61, 0x8d, 0x3, 0xfc, 0xe4, 0x4, 0x6, 0x1}, r1}}, 0x120)

2.886814855s ago: executing program 0 (id=809):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)={[{@allow_utime={'allow_utime', 0x3d, 0x3ff}}, {@gid}, {@errors_continue}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@namecase}, {@gid}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@utf8}]}, 0x1, 0x152d, &(0x7f0000001f80)="$eJzs3AuYTtUaOPD3XWvtMSS+JrkMa6138yWXZZIklyS5JEklSXJLSJrkSEJiCEkakpBchiSGkFwmJo37/X5JSJImSXLLLVn/Z8Lf6dT5dy79j/OceX/Psx/rtfZa+93f+13W3jPzfddlSK3Gtas3JCL4t+CFf5IAIBYABgBAXgAIAKB8XPm4rP6cEpP+vYOwP9dDqVc6A3Ylcf2zN65/9sb1z964/tkb1z974/pnb1z/7I3rz1h2tnFqoWt4y74b3//Pzvjz/39IZpkxX60uc11XgJh/dAjXP3vj+v/PCv6Rnbj+2RvXP7uKvdIJsP8C/PrPDnL83R6uf/bG9WcsO7vS95+v9AaR/7LH4HDOC4X5T50/Y4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDH2H3DaX6YA4FL7SufFGGOMMcYYY4yxP4/PcaUzYIwxxhhjjDHG2P9/CAIkKAggBnJALOSEXCAA4GrIA3khAtdAHFwL+eA6yA8FoCAUgngoDEVAgwELBCEUhWIQheuhONwAJaAklILS4KAMJMCNUBZugnJwM5SHW6AC3AoVoRJUhipwG1SF26Ea3AHV4U6oATWhFtSGu6AO3A114R6oB/dCfbgP7ocHoAE8CA3hIWgED0NjeASawKPQFJpBc2gBLf+l8S9AD3gRekIvSILe0Adegr7QD/rDyzAAXoGB8CoMgtcgGQbDEHgdhsIbMAzehOEwAkbCWzAK3obRMAbGwjhIgfEwAd6BifAuTIL3YDJMgVSYCtPgfZgOM2AmfACz4EOYDXNgLsyDNPgI5sMCSIePYSF8AhmwCBbDElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDt8CjvgM9gJu2A3fA574It/cvypvxnfFQEBBQpUqDAGYzAWYzEX5sLcmBvzYB6MYATjMA7zYT7Mj/mxIBbEeIzHIlgEDRokJCyKRTGKUSyOxbEElsBSWAodOkzABCyLN2E5LIflsTxWwApYESthJayCVbAqVsVqWA2rY3WsgTWwFtbCu/Au7I11sS7Ww3pYH+tfuj2FDbEhNsJG2BgbYxNsgk2xKTbH5tgSW2IrbIWtsTW2xbbYDtthe2yPiZiIHbADdsSO2Ak7YWfsjF2wC3bFbtgt84UcgC/ii9gLa4je2Af7YF9MztEfX8aX8RUciK/iq/gaJuNgHIKv4+v4Bg7DkzgcR+BIHIlVxds4GscgiXGYgik4ASfgRJyIWYm+h1MwFafiNJyG03EGzsAPcBZ+iB/iHJyD8zAN03A+LsB0TMeFeAozcBEuxiW4FJfhUlyBK3EFrsY1uBrX4TrcgBtwE27CLbgFt+E2/BQVAH6Gu3AXJuMe3IN7cS/uw324H/djJmbiATyAB/EgHsJDeBgP4xE8isfwKJ7AE3gST+FpPI1n8Syew+fiv2n0aclVySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBP5RD6RX+QXBUVBES/iRRFRRBhhBIkwBgBEVERFcVFclBAlRClRSjjhRIJIEGVFWVFOlBPlxS2igrhVVBSVRBtXRVQRVUVbV03cIaqL6qKGqClqidqitqgj6oi6oq6oJ+qJ+qK+uF88IBqI3tgfHxJZlWksBmMTMQSbimZCXnwHayWGYWvRRrQVT4gROBzbi1YuUTwtOojR2FH8RYzBZ0VnMQ67iOdFV9FNdBcviB6itespeolJ2Fv0EVOwr+gn+ouXxXSsKT7AWTlriddEshgshojXxTx8QwwTb4rhYoQYKd4So8TbYrQYI8aKcSJFjBcTxDtionhXTBLvicliikgVU8U08b6YLmaImeIDMUt8KGaLOWKumCfSxEdivlgg0sXHYqH4RGSIRWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is4iFrWKb2C4+FTvEZ2Kn2CV2i8/FHvGF2Cu+FPvEV2K/+Fpkim/EAfGtOCi+E4fE9+Kw+EEcEUfFMXFcnBA/ipPilDgtzoiz4idxTvwszgsvQKIUUkolAxkjc8hYmVPmklfJ3DK4+OheI+PktTKfvE7mlwVkQVlIxsvCsojU0kgrSYayqCwmo/J6WVzeIEvIkrKULC2dLCMT5I2yrLxJlpM3y/LyFllB3iorykqysqwib5NV5e0SIheOUUPWlLVkbXmXTIK7ZV15j6wn75X15X3yfvmAbCAflA3lQ7KRfFg2lo/IJvJR2VQ2k81lC9lSPiZbycdla9lGtpVPyHbySdlePiUT5dOyg/QXnyLPys7yOdlFPi+7ym6yu/xZnpde9pS9JPQG2Ue+JPvKfrJ/LADIV+RA+aocJF+TyXKwHCJfl0PlG3KYfFMOlyPkSPmWHCXflqPlGDlWjpMpcrycIN+RE+W7cpJ8T06WU2SqnCr7ywG/zDRTyj8c/87vjB/0y9E3yI1yk9wst8itcpvcLj+VO+QOuVPulLvlbrlH7pF75V65T+6T++V+mSkz5QF5QB6UB+UheUgeloflEXlUnpHH5Qn5ozwpT8lT8ow8K8/KcxcfA1CohJJKqUDFqBwqVuVUudRVKre6WuVReVVEXaPi1LUqn7pO5VcFVEFVSMWrwqqI0sooq0iFqqgqpqLqerz4hFGlVGnlVBmVoG78Z8ar4uoGVUKV/NX4S/kl/Z38WqqWqpVqpVqr1qqtaqvaqXaqvWqvElWi6qA6qI6qo+qkOqnOqrPqorqorqqr6q66qx6qh+qpeqoklaT6qJdUX9VP9VcvqwHqFTVQDVSD1CCVrJLVEDVEDVVD1TA1TA1Xw9VINVKNUqPUaDVajVVjVYpKURPUBDVRTVST1CQ1WU1WqSpVTVPT1HQ1Xc1UM9UsNUvNVrPVXDVXpak0NV/NV+kqXS1UC1WGWqQWqSVqiVqmlqkVaoVapVapNWqNWqfWqQy1UW1Um9VmtVVtVdvVdrVD7VA7xU61W+1We9QetVftVfvUPrVf7VeZKlMdUAfUQXVQHVKH1GF1WB1RR9QxdUydUCfUSXVSnVan1Vl1Vp1T59R5dT5r2ReIQAQqUEFMEBPEBrFBriBXkDvIHeQJ8gSRIBLEBXFBvuC6IH9QICgYFArig8JBkUAHJrCBuFj0aHB9UDy4ISgRlAxKBaUDF5QJEoIbg7LBTUG54OagfHBLUCG4NagYVAoqB1WC24Kqwe1BteCOoHpwZ1AjqBnUCmoHdwV1gruDusE9Qb3g3qB+cF9wf/BA0CB4MGgYPBQ0Ch4OGgePBE2CR4OmQbOgedAiaPmnzu/9yQKPu566l07SvXUf/ZLuq/vp/vplPUC/ogfqV/Ug/ZpO1oP1EP26Hqrf0MP0m3q4HqFH6rf0KP22Hq3H6LF6nE7R4/UE/Y6eqN/Vk/R7erKeolP1VD1Nv6+n6xl6pv5Az9If6tl6jp6r5+k0/ZGerxfodP2xXqg/0Rl6kV6sl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q4/1Tv0Z3qn3qV368/1Hv2F3qu/1Pv0V3q//lpn6m/0Af2tPqi/04f09/qw/kEf0Uf1MX1cn9A/6pP6lD6tz+iz+id9Tv+sz2uftbjP+ng3yigTY2JMrIk1uUwuk9vkNnlMHhMxERNn4kw+k8/kN/lNQVPQxJt4U8QUMVnIkClqipqoiZriprgpYUqYUqaUccaZBJNgypqyppwpZ8qb8qaCqWAqmoqmsqlsbjO3mdvN7eYOc4e509xpapqaprapbeqYOqauqWvqmXqmvqlv7jf3mwamgWloGppGppFpbBqbJqaJaWqamuamuWlpWppWppVpbVqbtqataWfamfamvUk0iaaD6WA6mo6mk+lkOpvOpovpYrqarqa76W56mB6mp+lpkkyS6WP6mL6mr+lv+psBZoAZaAaaQWaQSTbJZogZYoaaoWaYGWaGmxFmZNZC1bxtRpsxZqwZZ1JMiplgJpiJZqKZZCaZyWaySTWpZpqZZqab6WammWlmmVlmtplt5pq5Js2kmflmvkk36WahWWgyTIZZbBabpWapWW6Wm5VmpVltVpu1sNasN+vNRrPRbDabzVaz1Ww3280Os8PsNDvNbrPb7DF7zF6z1+wz+8x+s99kmkxzwBwwB81Bc8gcMofNYXPEHDHHzDFzwpwwJ81Jc9qcNmdNgYufl97E2pw2l73K5rZX2zw2r/3buKAtZONtYVvEapvfFvhVbKy1JWxJW8qWts6WsQn2xt/EFW0lW9lWsbfZqvZ2W+03cR17t61r77H17L22tr3rV3F9e5/NWp00QASwzWwj28I2to/YJvZR29Q2s81tC9vOPmnb26dson3adrDP/CaebxfYlXaVXW3X2J12lz1tz9iD9jt71v5ke9pedoB9xQ60r9pB9jWbbAf/Jh5p37Kj7Nt2tB1jx9pxv4kn2yk21U610+z7drqd8Zs4zX5kZ9l0O9vOsXPtvF/irJzS7cd2of3EZtgAFtsldqldZpfbFZdy9XntOrvebrA77Gd2s91it9ptdvulhbDdZXfbz+0e+4U9YL+1++xXdr89ZDPtN7/EWed3yH5vD9sf7BF71B6zx+0J+6O6NDrr3I/bn+156y0QEpAkRQHFUA6KpZyUi66i3HQ15aG8FKFrKI6upXx0HeWnAlSQClE8FaYipMmQJaKQilIxitL1dCm9UlSaHJWhBLqRytJNVI5upvJ0C1WgW6kiVaLKVIVuo6p0O1WjO6g63Uk1qCbVotp0F9Whu6ku3UP16F6qT/fR/fQANaAHqSE9RI3oYWpMj1ATepSaUjNqTi2oJT1Grehxak1tqC09Qe3oSWpPT1EiPU0d6BnqSH+hTvQsdabnqAs9T12pG3WnF6gHvUg9qRclUW/qQy9RX+pH/ellGkCv0EB6lQbRa5RMg2kIvU5D6Q0aRm/ScBpBI+ktGkVv02gaQ2NpHKXQeJpA79BEepcm0Xs0maZQKk2lafQ+TacZNJM+oFn0Ic2mOTSX5lEafUTzaQGl08e0kD6hDFpEi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6lHfQZ7aRdtJs+pz30BSF9SfvoK9pPX1MmfUMH6Fs6SN/RIfre96If6AgdpWN0nE7Qj3SSTtFpOkNn6Sc6Rz/TefIEIYYilKEKgzAmzBHGhjnDXOFVYe7w6jBPmDeMhNeEceG1Yb7wujB/WCAsGBYK48PCYZFQhya0IYVhWDQsFkbD68Pi4Q1hibBkWCosHbqwTJgQ3hiWDW8Ky4U3h+XDW8IK4a1hxbBS+Mi9VcLbwqrh7WG18I6wenhnWCOsGdYKa4d3hXXCu8O64T1hvfDesFx4X3h/+EDYIHwwbBg+FDYKHw4bh4+ETcJHw6Zhs7B52CJsGT4WtgofD1uHbcK24RNhu/DJsH34VJgYPh12CJ/5pf++BX+/PynsHfYJXwpfCr2/R86NzoumRT+Kzo8uiKZHP44ujH4SzYguii6OLokujS6LLo+uiK6Mroqujq6Jro2ui66Pboh6XzsHOHTCSadc4GJcDhfrcrpc7iqX213t8ri8LuKucXHuWpfPXefyuwKuoCvk4l1hV8RpZ5x15EJX1BVzUXe9K+5ucCVcSVfKlXbOlXEJroVr6Vq6Vu5x19q1cW3dE+4J96R70j3lnnJPuw7uGdfR/cV1cs+6zu4595x73nV13Vx394Lr4cbnufCaTHJ9XB/X1/V1/V1/N8ANcAPdQDfIDXLJLtkNcUPcUDfUDXPD3HA33I10I90oN8qNdqPdWDfWpbgUN8FNcBPdRDfJTXKT3WSX6lLdNDfNTXfTXdUZF44y2812c91cl+bS3HyXtWZMdwvdQpfhMtxit9gtdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9xOn/fCpG6P2+v2un1un9vvvnaZ7ht3wH3rDrrv3CH3vTvsfnBH3FF3zB13J9yP7qQ75U67M+6s+8mdcz+78867lMj4yITIO5GJkXcjkyLvRSZHpkRSI1Mj0yLvR6ZHZkRmRj6IzIp8GJkdmROZG5kXSYt8FJkfWRBJj3wcWRj5JJIRWRRZHFkSWRpZFvG+8ObQF/XFfNRf74v7G3wJX9KX8qW982V8gr/Rl/U3+XL+Zl/e3+Ir+Ft9RV/JV/aP+qa+mW/uW/iW/jHfyj/uW/s2vq1/wrfzT/r2/imf6J/2HfwzvqP/i+/kn/Wd/XO+i3/ed/XdfHf/gu/hX/Q9fS+f5Hv7Pv4l39f38/39y36Af8UP9K/6Qf41n+wH+yH+dT/Uv+GH+Tf9cD/Cj4x5y4+6dIkM43yKH+8n+Hf8RP+un+Tf85P9FJ/qp/pp/n0/3c/wM/0Hfpb/0M/2c/xcP8+n+Y/8fL/Ap/uP/UL/ic/wiy7dVPbL/Qq/0q/yq/0av9av8+v9Br/Rb/Kb/Ra/1W/z2/2nfof/zO/0u/xu/7nf47/we/2Xfp//yu/3X/tM/40/4L/1B/13/pD/3h/2P/gj/qg/5o/7E/5Hf9Kf8qf9GX/W/+TP+Z/9ef6bNcYYY4yxf8j4y03x654Lt/N7/84Y8Vc79wGAq7cUyvzr/qwV5dr8F9r9RHy7CAA83avLQ5e2GjWSkpIu7pshISg2B+DST4KyxMDleBG0hSchEdpA2d/Nv5/odpb+YP7oLQC5/mpMLFyOL8//JQAm/c78jz0xcn6F8HTc/2P+OQAlil0ekxMux4ug7S/3V9pAub+Tf4FWf5B/zq9SAFr/1ZjccDm+nH8CPA7PQOKv9mSMMcYYY4wxxi7oJyp3unT9eek3Pn/v+jxeXR6TAy7Hf3R9zhhjjDHGGGOMsSvv2W7dn3osMbFNp3++Ue2P91H/2sy/NJrAv5oYN/6lhvcA/7dwAPBvTgiQ1ZD/ybPY9B85VvLFl87fdi094wP47yjln9G4wm9MjDHGGGOMsT/d5UX/r/9fXamEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxbOjf/Y43+Ae+pe9KnyNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2pf2fAAAA//+Bqfni")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000140)=""/136, 0x88)

2.821535482s ago: executing program 4 (id=811):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0, 0x1}, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

2.737881387s ago: executing program 0 (id=812):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8)

2.736613571s ago: executing program 4 (id=813):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0})

2.650614567s ago: executing program 0 (id=814):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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")
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x6, r2, 0x334, 0x1, 0x0, 0x7, 0x38615, 0x2c1c78, 0xffffffffffffff7b})
truncate(&(0x7f0000000900)='./file1\x00', 0x20000000000bf39)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x4}, 0xe)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r5, 0x5e6e5432}, &(0x7f0000000080)=0x8)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x40a700, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x1, 0x8010000000000084)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x4}]}, {0x0, [0x30, 0x5f, 0x5f, 0x2e, 0xfcdb08892e9ad7a1]}}, 0x0, 0x2b, 0x0, 0x1, 0x80000001}, 0x28)
setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000002900)=0x5, 0x2)

2.478208837s ago: executing program 2 (id=815):
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, '|P3', 0x1}}}, 0xd)

2.478009247s ago: executing program 2 (id=816):
r0 = syz_open_dev$media(&(0x7f0000000180), 0x5, 0x88280)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000013c0)={{0x80000000, 0x0, 0x6, [0x1, 0x6f]}, {0x80000000, 0x0, 0x2, [0x81, 0xa37]}, 0x4, [0xc47, 0x1]})

2.420826055s ago: executing program 0 (id=817):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, <r1=>0x0]})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f0000000180)=[{}, {}, {}, {}], r1, 0x0, '\x00', 0x0, 0x4})

2.229520628s ago: executing program 34 (id=817):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, <r1=>0x0]})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f0000000180)=[{}, {}, {}, {}], r1, 0x0, '\x00', 0x0, 0x4})

2.202863197s ago: executing program 2 (id=819):
syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x1, 0x3, 0x0, {0x15, 0x4, 0x1, 0x3d, 0x3, 0x64, 0x1, 0x8, 0x6c, 0x80, @dev={0xac, 0x14, 0x14, 0x1c}, @empty, {[@rr={0x7, 0x3, 0x71}, @cipso={0x86, 0x3a, 0x2, [{0x5, 0x4, 'l+'}, {0x2, 0xb, "9f2dda97f2240950eb"}, {0x7, 0xf, "c37f40b1bdc36273c7325e39c9"}, {0x5, 0x5, "54b46a"}, {0x6, 0x9, "4f05354708cc7e"}, {0x0, 0x8, "d9db2eadcd23"}]}]}}}}}}}, 0x0)

2.118020988s ago: executing program 2 (id=820):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
syslog(0x2, &(0x7f0000001940)=""/83, 0x53)

1.99974328s ago: executing program 2 (id=821):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x200414, &(0x7f0000000400)=ANY=[@ANYRES16], 0xff, 0x5ad0, &(0x7f000000bec0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
pwrite64(r2, &(0x7f0000000440)="0031a07b0749cdeca4fc6f1746461b5be9ba0153d4c71691826c36aca8c7cc6d91ef00000000000000000000000000ae2e3af036c4949a0f80cdd47220e81001b6cbe13b4ddb29374083fa8ce275ad7b4f208b5ece0478f4c49c3e1add24d272bfc03dbc8974ae222a210aee760156e554fed2ebe38de616d0f3d4a0b30b774ecba821928ef849a1e5815e2b3cacd9ef52a319d7b8f70265d222fc8ec4e38dd5d3438a3ffffbb464e40c99c162776f61da16acb1b76463aa43413ef9214c0639b071d1ed3268ad796a57879b573793651e96c83d8e40bb6710a32d062b88727ed8db05be277bb12e08aa63d72d5084ef", 0xf0, 0x709c)
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000002c0)={r6, <r7=>0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r7, r8, 0x3, 0xc, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x7ffffffe, 0xffffffff, "fe1d00003413000000f1ff000080004000"}})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
copy_file_range(r3, 0x0, r9, 0x0, 0xfffffbffa003e45b, 0x700000000000000)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000280)={0xc, 0x8005, 0x1, 0xe})
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r11, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_DEL(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r11, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000)
fcntl$notify(r10, 0x402, 0x1d)
close_range(r0, 0xffffffffffffffff, 0x0)

1.139937365s ago: executing program 2 (id=822):
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x22, 0x63f, &(0x7f0000000d80)="$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")

1.059062328s ago: executing program 4 (id=823):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6(0xa, 0x2, 0x0)
connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
unshare(0x2c000080)
syz_clone(0x142000, 0x0, 0x0, 0x0, 0x0, 0x0)

107.825877ms ago: executing program 4 (id=824):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x140)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x20000061)
r1 = epoll_create(0xc5)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x57d5ee53c5e2aae2})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
open$dir(&(0x7f00000000c0)='./file1\x00', 0x80, 0x1a2)
epoll_pwait2(r1, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0)

0s ago: executing program 4 (id=825):
creat(&(0x7f00000002c0)='./file0\x00', 0x109)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x4, 0x10000], 0x0, 0x0, 0x2, 0x1}}, 0x40)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000c00)='./binderfs/binder1\x00', 0xc02, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x13, r2, 0xc8eae000)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xde, 0x14, 0xd8, 0x40, 0x93a, 0x50f, 0xc2b7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd8, 0xb9, 0x6e}}]}}]}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:61680' (ED25519) to the list of known hosts.
syzkaller login: [   55.993272][ T5832] cgroup: Unknown subsys name 'net'
[   56.108188][ T5832] cgroup: Unknown subsys name 'cpuset'
[   56.111824][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.367199][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.364277][ T5928] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.364962][ T5927] chnl_net:caif_netlink_parms(): no params data found
[   66.445974][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.448612][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.451216][ T5927] bridge_slave_0: entered allmulticast mode
[   66.455115][ T5927] bridge_slave_0: entered promiscuous mode
[   66.461051][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.464046][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.467651][ T5927] bridge_slave_1: entered allmulticast mode
[   66.470890][ T5927] bridge_slave_1: entered promiscuous mode
[   66.487653][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.492029][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.589727][ T5927] team0: Port device team_slave_0 added
[   66.593627][ T5927] team0: Port device team_slave_1 added
[   66.609823][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.612204][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.621475][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.626337][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.628636][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.637250][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.668467][ T5927] hsr_slave_0: entered promiscuous mode
[   66.670774][ T5927] hsr_slave_1: entered promiscuous mode
[   66.764354][ T5927] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.770010][ T5927] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.774129][ T5927] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.778183][ T5927] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.794528][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.797023][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.799737][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.802105][ T5927] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.828700][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.837150][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.840077][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.849453][ T5927] 8021q: adding VLAN 0 to HW filter on device team0
[   66.854980][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.857451][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.863680][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.866176][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.950133][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.971179][ T5927] veth0_vlan: entered promiscuous mode
[   66.976547][ T5927] veth1_vlan: entered promiscuous mode
[   66.990119][ T5927] veth0_macvtap: entered promiscuous mode
[   66.993845][ T5927] veth1_macvtap: entered promiscuous mode
[   67.003962][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.011291][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.017577][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.020900][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.024101][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.027555][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.798072][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.014064][ T5959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.018125][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.021804][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.025442][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.029526][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.048320][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.051696][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.055185][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.059551][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.062897][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.132629][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.146448][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.150255][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.153711][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.157584][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.401966][ T5958] chnl_net:caif_netlink_parms(): no params data found
[   70.416548][ T5961] chnl_net:caif_netlink_parms(): no params data found
[   70.481845][ T5963] chnl_net:caif_netlink_parms(): no params data found
[   70.557470][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.560469][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.563262][ T5961] bridge_slave_0: entered allmulticast mode
[   70.567664][ T5961] bridge_slave_0: entered promiscuous mode
[   70.589957][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.593497][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.596676][ T5961] bridge_slave_1: entered allmulticast mode
[   70.600409][ T5961] bridge_slave_1: entered promiscuous mode
[   70.612571][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.614899][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.618050][ T5958] bridge_slave_0: entered allmulticast mode
[   70.621818][ T5958] bridge_slave_0: entered promiscuous mode
[   70.633985][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.663774][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.667269][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.670201][ T5958] bridge_slave_1: entered allmulticast mode
[   70.673912][ T5958] bridge_slave_1: entered promiscuous mode
[   70.722165][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.747048][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.753832][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.758263][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.761109][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.763932][ T5963] bridge_slave_0: entered allmulticast mode
[   70.770268][ T5963] bridge_slave_0: entered promiscuous mode
[   70.775531][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.793545][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.817416][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.820211][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.823073][ T5963] bridge_slave_1: entered allmulticast mode
[   70.827976][ T5963] bridge_slave_1: entered promiscuous mode
[   70.861388][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.869755][ T5961] team0: Port device team_slave_0 added
[   70.887400][ T5958] team0: Port device team_slave_0 added
[   70.891719][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.902092][ T5961] team0: Port device team_slave_1 added
[   70.905830][ T5958] team0: Port device team_slave_1 added
[   70.909885][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.953124][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.955623][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.964732][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.992148][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.994436][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.002869][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.015067][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.018833][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.031774][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.038399][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.041157][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.053230][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.060585][ T5963] team0: Port device team_slave_0 added
[   71.064139][ T5963] team0: Port device team_slave_1 added
[   71.111676][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.113797][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.135576][ T5958] hsr_slave_0: entered promiscuous mode
[   71.138343][ T5958] hsr_slave_1: entered promiscuous mode
[   71.140606][ T5958] debugfs: 'hsr0' already exists in 'hsr'
[   71.142720][ T5958] Cannot create hsr debugfs directory
[   71.145334][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.149626][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.158407][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.198604][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.201233][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.210506][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.245431][ T5961] hsr_slave_0: entered promiscuous mode
[   71.249774][ T5961] hsr_slave_1: entered promiscuous mode
[   71.252429][ T5961] debugfs: 'hsr0' already exists in 'hsr'
[   71.254552][ T5961] Cannot create hsr debugfs directory
[   71.280589][   T12] bridge_slave_1: left allmulticast mode
[   71.282875][   T12] bridge_slave_1: left promiscuous mode
[   71.285652][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.292275][   T12] bridge_slave_0: left allmulticast mode
[   71.294114][   T12] bridge_slave_0: left promiscuous mode
[   71.296796][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.472337][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.479677][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.484303][   T12] bond0 (unregistering): Released all slaves
[   71.574521][   T12] hsr_slave_0: left promiscuous mode
[   71.577106][   T12] hsr_slave_1: left promiscuous mode
[   71.579830][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.582871][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.587212][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.590456][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.603922][   T12] veth1_macvtap: left promiscuous mode
[   71.607113][   T12] veth0_macvtap: left promiscuous mode
[   71.609053][   T12] veth1_vlan: left promiscuous mode
[   71.611260][   T12] veth0_vlan: left promiscuous mode
[   71.860343][   T12] team0 (unregistering): Port device team_slave_1 removed
[   71.884676][   T12] team0 (unregistering): Port device team_slave_0 removed
[   72.066840][ T5237] Bluetooth: hci0: command tx timeout
[   72.111461][ T5963] hsr_slave_0: entered promiscuous mode
[   72.114594][ T5963] hsr_slave_1: entered promiscuous mode
[   72.146205][ T5237] Bluetooth: hci1: command tx timeout
[   72.226236][ T5237] Bluetooth: hci2: command tx timeout
[   72.314899][ T5958] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.345256][ T5958] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.385716][ T5958] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.391975][ T5958] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.514301][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.543185][ T5958] 8021q: adding VLAN 0 to HW filter on device team0
[   72.585323][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.588494][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.601231][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.603941][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.706878][ T5961] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.720320][ T5961] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.735460][ T5961] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.748708][ T5961] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.777001][ T5963] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.782332][ T5963] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.799690][ T5963] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.809430][ T5963] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.851135][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.933533][ T5958] veth0_vlan: entered promiscuous mode
[   72.950475][ T5958] veth1_vlan: entered promiscuous mode
[   72.959493][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.991873][ T5961] 8021q: adding VLAN 0 to HW filter on device team0
[   73.003078][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.005418][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.012443][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.020359][ T5958] veth0_macvtap: entered promiscuous mode
[   73.030444][ T5958] veth1_macvtap: entered promiscuous mode
[   73.038054][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.041065][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.058178][ T5963] 8021q: adding VLAN 0 to HW filter on device team0
[   73.073257][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.082676][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.085558][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.102392][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.105486][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.113913][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.125400][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.133022][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.142523][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.149100][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.288108][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.291367][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.328001][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.330775][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.352050][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.437290][ T5961] veth0_vlan: entered promiscuous mode
[   73.447529][ T5961] veth1_vlan: entered promiscuous mode
[   73.484868][ T5961] veth0_macvtap: entered promiscuous mode
[   73.500032][ T5961] veth1_macvtap: entered promiscuous mode
[   73.519167][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.524733][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.535158][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.549238][ T5937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.556031][ T5937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.560486][ T5937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.570625][ T5937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.589712][ T5963] veth0_vlan: entered promiscuous mode
[   73.597657][ T5963] veth1_vlan: entered promiscuous mode
[   73.637232][ T5963] veth0_macvtap: entered promiscuous mode
[   73.644181][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.645620][ T5963] veth1_macvtap: entered promiscuous mode
[   73.651791][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.693979][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.712661][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.733866][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.745778][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.758904][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.763068][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.771665][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.774982][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.871697][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.875123][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.954232][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.958562][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.055288][ T6052] netlink: 'syz.0.83': attribute type 2 has an invalid length.
[   74.147284][ T5237] Bluetooth: hci0: command tx timeout
[   74.184688][ T6062] loop2: detected capacity change from 0 to 8
[   74.218680][ T6062] SQUASHFS error: zstd decompression error: 10
[   74.221325][ T6062] SQUASHFS error: zstd decompression failed, data probably corrupt
[   74.226450][ T5237] Bluetooth: hci1: command tx timeout
[   74.245978][ T6062] SQUASHFS error: Failed to read block 0x4ec: -5
[   74.248577][ T6062] SQUASHFS error: Unable to read metadata cache entry [4ea]
[   74.251478][ T6062] SQUASHFS error: Unable to read inode 0x2011f
[   74.306631][ T5237] Bluetooth: hci2: command tx timeout
[   74.611051][ T6088] netlink: 'syz.2.98': attribute type 1 has an invalid length.
[   74.614498][ T6088] netlink: 'syz.2.98': attribute type 2 has an invalid length.
[   74.622204][ T6088] netlink: 'syz.2.98': attribute type 1 has an invalid length.
[   74.624859][ T6088] netlink: 'syz.2.98': attribute type 2 has an invalid length.
[   74.765309][ T6099] capability: warning: `syz.1.105' uses 32-bit capabilities (legacy support in use)
[   74.783945][ T6101] x_tables: ip_tables: udp match: only valid for protocol 17
[   74.894678][ T6109] netlink: 44 bytes leftover after parsing attributes in process `syz.2.108'.
[   75.436475][ T6024] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   75.490300][ T6137] loop1: detected capacity change from 0 to 128
[   75.498174][ T6137] qnx6: unable to set blocksize
[   75.539887][ T5997] kernel write not supported for file /binder/transactions (pid: 5997 comm: kworker/1:5)
[   75.586627][ T6024] usb 3-1: Using ep0 maxpacket: 32
[   75.592450][ T6024] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   75.595766][ T6024] usb 3-1: config 0 has no interface number 0
[   75.603366][ T6024] usb 3-1: config 0 interface 184 has no altsetting 0
[   75.611068][ T6024] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   75.614779][ T6024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.619942][ T6024] usb 3-1: Product: syz
[   75.621213][ T6024] usb 3-1: Manufacturer: syz
[   75.623107][ T6024] usb 3-1: SerialNumber: syz
[   75.636857][ T6024] usb 3-1: config 0 descriptor??
[   75.676275][ T6024] smsc75xx v1.0.0
[   75.837007][ T5954] IPVS: starting estimator thread 0...
[   75.928317][ T6146] IPVS: using max 46 ests per chain, 110400 per kthread
[   76.146537][ T6024] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[   76.151301][ T6024] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[   76.164275][ T6024] usb 3-1: USB disconnect, device number 2
[   76.227298][ T5237] Bluetooth: hci0: command tx timeout
[   76.306084][ T5237] Bluetooth: hci1: command tx timeout
[   76.386550][ T5237] Bluetooth: hci2: command tx timeout
[   76.503524][ T6152] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.627279][ T6157] loop2: detected capacity change from 0 to 1764
[   77.368127][ T6159] loop1: detected capacity change from 0 to 32768
[   77.703354][ T6180] loop0: detected capacity change from 0 to 4096
[   77.765181][ T6180] ntfs3(loop0): ino=b, mi_enum_attr
[   77.788535][ T6180] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   77.800655][ T6180] ntfs3(loop0): Failed to load $Extend (-22).
[   77.803259][ T6180] ntfs3(loop0): Failed to initialize $Extend.
[   78.316081][ T5237] Bluetooth: hci0: command tx timeout
[   78.386822][ T5237] Bluetooth: hci1: command tx timeout
[   78.400843][   T33] audit: type=1326 audit(1756759100.384:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.0.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[   78.428347][   T33] audit: type=1326 audit(1756759100.404:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.0.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[   78.455989][   T33] audit: type=1326 audit(1756759100.414:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.0.140" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[   78.464603][   T33] audit: type=1326 audit(1756759100.414:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.0.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[   78.467489][ T5237] Bluetooth: hci2: command tx timeout
[   78.496063][   T33] audit: type=1326 audit(1756759100.414:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.0.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[   78.504593][   T33] audit: type=1326 audit(1756759100.414:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.0.140" exe="/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[   78.536146][   T33] audit: type=1326 audit(1756759100.414:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.0.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[   78.544674][   T33] audit: type=1326 audit(1756759100.414:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.0.140" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[   78.606996][ T6195] loop1: detected capacity change from 0 to 16
[   78.842822][ T6195] erofs (device loop1): mounted with root inode @ nid 36.
[   78.905074][ T6195] process 'syz.1.143' launched './file2' with NULL argv: empty string added
[   79.589769][ T6214] =======================================================
[   79.589769][ T6214] WARNING: The mand mount option has been deprecated and
[   79.589769][ T6214]          and is ignored by this kernel. Remove the mand
[   79.589769][ T6214]          option from the mount to silence this warning.
[   79.589769][ T6214] =======================================================
[   79.828121][ T6226] Zero length message leads to an empty skb
[   79.981691][ T6230] loop2: detected capacity change from 0 to 2048
[   80.028066][ T6230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.159963][ T6230] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   80.168558][ T6230] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   80.174559][ T6230] EXT4-fs (loop2): This should not happen!! Data will be lost
[   80.174559][ T6230] 
[   80.184936][ T6230] EXT4-fs (loop2): Total free blocks count 0
[   80.187679][ T6230] EXT4-fs (loop2): Free/Dirty block details
[   80.190142][ T6230] EXT4-fs (loop2): free_blocks=4096
[   80.192367][ T6230] EXT4-fs (loop2): dirty_blocks=512
[   80.194602][ T6230] EXT4-fs (loop2): Block reservation details
[   80.202688][ T6230] EXT4-fs (loop2): i_reserved_data_blocks=32
[   80.242218][ T1154] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28
[   80.348132][ T6245] loop0: detected capacity change from 0 to 32768
[   80.353881][ T6245] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.164 (6245)
[   80.401937][ T6245] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   80.406494][ T6245] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   80.478709][ T6245] BTRFS info (device loop0): enabling ssd optimizations
[   80.481684][ T6245] BTRFS info (device loop0): enabling free space tree
[   81.057172][ T6281] loop1: detected capacity change from 0 to 128
[   81.105662][ T6281] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   81.122934][ T6281] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   81.239352][ T5963] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   81.336138][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   81.371400][ T1902] cfg80211: failed to load regulatory.db
[   81.521747][    T9] usb 3-1: Using ep0 maxpacket: 8
[   81.542979][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[   81.556325][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   81.560196][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   81.564180][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   81.577666][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[   81.581859][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[   81.593355][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.628660][    T9] usb 3-1: config 0 descriptor??
[   81.673626][ T5237] Bluetooth: hci3: urb ffff88802f382900 submission failed (90)
[   81.866736][    T9] usb 3-1: USB disconnect, device number 3
[   81.981744][ T6298] Bluetooth: MGMT ver 1.23
[   81.997050][ T5961] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   82.043658][ T6300] vlan0: entered promiscuous mode
[   82.178986][ T6310] tmpfs: Bad value for 'mpol'
[   82.386054][ T1902] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   82.496838][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   82.547580][ T1902] usb 1-1: Using ep0 maxpacket: 8
[   82.557649][ T1902] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 17
[   82.563455][ T1902] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07
[   82.575372][ T1902] usb 1-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60
[   82.580019][ T1902] usb 1-1: Product: syz
[   82.581797][ T1902] usb 1-1: Manufacturer: syz
[   82.583824][ T1902] usb 1-1: SerialNumber: syz
[   82.588453][ T1902] usb 1-1: config 0 descriptor??
[   82.646132][    T9] usb 2-1: Using ep0 maxpacket: 32
[   82.652239][    T9] usb 2-1: config 0 has an invalid interface number: 20 but max is 0
[   82.657173][    T9] usb 2-1: config 0 has no interface number 0
[   82.669246][    T9] usb 2-1: New USB device found, idVendor=1485, idProduct=0001, bcdDevice=3e.65
[   82.673142][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.677269][    T9] usb 2-1: Product: syz
[   82.679198][    T9] usb 2-1: Manufacturer: syz
[   82.681248][    T9] usb 2-1: SerialNumber: syz
[   82.689846][    T9] usb 2-1: config 0 descriptor??
[   82.804747][ T1902] gspca_main: sunplus-2.14.0 probing 04a5:3003
[   82.828605][ T6334] netlink: 'syz.2.197': attribute type 4 has an invalid length.
[   83.114681][    T9] kaweth 2-1:0.20: Firmware present in device.
[   83.308043][    T9] kaweth 2-1:0.20: Statistics collection: 0
[   83.310629][    T9] kaweth 2-1:0.20: Multicast filter limit: 0
[   83.313221][    T9] kaweth 2-1:0.20: MTU: 0
[   83.315109][    T9] kaweth 2-1:0.20: Read MAC address 00:00:00:00:00:00
[   83.709656][    T9] kaweth 2-1:0.20: Error setting SOFS wait
[   83.713663][    T9] kaweth 2-1:0.20: probe with driver kaweth failed with error -5
[   83.728005][    T9] usb 2-1: USB disconnect, device number 2
[   83.769399][ T6356] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.808998][ T6358] loop2: detected capacity change from 0 to 512
[   83.843827][ T6358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.848998][ T6358] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.859445][ T6358] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   83.890209][ T5958] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.963457][ T6363] loop2: detected capacity change from 0 to 4096
[   83.987688][ T6363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.999651][ T6363] Quota error (device loop2): do_check_range: Getting block 327682 out of range 1-5
[   84.003457][ T6363] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[   84.007839][ T6363] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.209: Failed to acquire dquot type 1
[   84.012012][ T1902] gspca_sunplus: reg_w_riv err -71
[   84.015624][ T1902] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[   84.021662][ T6363] Quota error (device loop2): do_check_range: Getting block 327682 out of range 1-5
[   84.027903][ T6363] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[   84.031882][ T1902] usb 1-1: USB disconnect, device number 2
[   84.035087][ T6363] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.209: Failed to acquire dquot type 1
[   84.063405][ T5958] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.308635][ T6376] loop1: detected capacity change from 0 to 4096
[   84.312153][ T6376] ntfs3(loop1): Primary boot: invalid sectors per cluster 4294967274.
[   84.315754][ T6376] ntfs3(loop1): try to read out of volume at offset 0x1ffe00
[   84.579147][ T6399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.226'.
[   84.884614][   T33] audit: type=1400 audit(1756759106.874:10): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6396 comm="syz.2.225"
[   85.226022][ T5947] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   85.230251][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   85.385955][ T5947] usb 1-1: Using ep0 maxpacket: 16
[   85.390223][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.394771][ T5947] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   85.398126][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.401338][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   85.405547][    T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   85.408385][ T5947] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[   85.411772][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.415450][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.419555][ T5947] usb 1-1: config 0 descriptor??
[   85.423088][    T9] usb 2-1: config 0 descriptor??
[   85.486759][ T5947] pxrc 1-1:0.0: Could not find endpoint
[   85.602969][ T6411] loop2: detected capacity change from 0 to 2048
[   85.612630][ T6411] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   85.619626][ T6411] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   85.622913][ T6411] UDF-fs: Scanning with blocksize 512 failed
[   85.630981][ T6411] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   85.645748][ T5947] usb 1-1: USB disconnect, device number 3
[   85.861565][    T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   85.901253][ T6418] program syz.2.233 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   85.973745][ T6424] netlink: 'syz.2.236': attribute type 24 has an invalid length.
[   86.160381][    C0] plantronics 0003:047F:FFFF.0001: hid_field_extract() called with n (132) > 32! (swapper/0)
[   86.236503][ T6431] 9pnet: Unknown protocol version 9
[   86.442718][ T5955] usb 2-1: USB disconnect, device number 3
[   87.106583][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   87.306003][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   87.848780][    T9] usb 1-1: config 2 has an invalid interface number: 111 but max is 0
[   87.852199][    T9] usb 1-1: config 2 has no interface number 0
[   87.854797][    T9] usb 1-1: config 2 interface 111 altsetting 122 endpoint 0xA has invalid maxpacket 1023, setting to 64
[   87.860516][    T9] usb 1-1: config 2 interface 111 altsetting 122 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[   87.865108][    T9] usb 1-1: config 2 interface 111 has no altsetting 0
[   87.871328][    T9] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice=a0.46
[   87.874947][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.878485][    T9] usb 1-1: Product: syz
[   87.880443][    T9] usb 1-1: Manufacturer: syz
[   87.882496][    T9] usb 1-1: SerialNumber: syz
[   87.885999][ T5954] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   88.056052][ T5954] usb 3-1: Using ep0 maxpacket: 16
[   88.063774][ T5954] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[   88.067865][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.072220][ T5954] usb 3-1: Product: syz
[   88.074133][ T5954] usb 3-1: Manufacturer: syz
[   88.076591][ T5954] usb 3-1: SerialNumber: syz
[   88.082155][ T5954] usb 3-1: config 0 descriptor??
[   88.090393][ T5954] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[   88.095450][ T5954] usb 3-1: Detected FT232H
[   88.296546][ T5954] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   89.090085][ T5954] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   89.238213][ T6459] loop1: detected capacity change from 0 to 1024
[   89.272383][ T6459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.283615][ T6459] EXT4-fs warning (device loop1): ext4_empty_dir:3099: inode #11: comm syz.1.248: directory missing '..'
[   89.285814][ T5955] usb 3-1: USB disconnect, device number 4
[   89.305475][ T5955] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   89.310547][ T5955] ftdi_sio 3-1:0.0: device disconnected
[   89.333238][ T5963] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.440602][ T6468] bpf: Bad value for 'uid'
[   89.477580][ T6470] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.488269][ T6470] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.494700][ T6470] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   89.599421][    T9] usb 1-1: USB disconnect, device number 4
[   90.361275][ T6484] binder: 6483:6484 ioctl c0306201 200000000640 returned -22
[   90.799640][ T6505] netlink: 64 bytes leftover after parsing attributes in process `syz.0.267'.
[   91.140807][ T6523] cgroup: Unknown subsys name 'cpuset'
[   91.817536][ T6531] loop2: detected capacity change from 0 to 512
[   91.855549][ T6531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.864445][ T6531] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   91.902601][ T6531] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 3: comm syz.2.276: lblock 8 mapped to illegal pblock 3 (length 26)
[   91.916526][ T6531] EXT4-fs (loop2): Remounting filesystem read-only
[   91.950556][ T5958] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.023369][ T6537] bridge0: entered promiscuous mode
[   92.027589][ T6537] team0: entered promiscuous mode
[   92.030559][ T6537] team_slave_0: entered promiscuous mode
[   92.033859][ T6537] team_slave_1: entered promiscuous mode
[   92.040675][ T6537] hsr1: entered allmulticast mode
[   92.042988][ T6537] bridge0: entered allmulticast mode
[   92.045362][ T6537] team0: entered allmulticast mode
[   92.048530][ T6537] team_slave_0: entered allmulticast mode
[   92.051058][ T6537] team_slave_1: entered allmulticast mode
[   92.370389][ T6553] /dev/nullb0: Can't lookup blockdev
[   92.550522][ T6561] loop2: detected capacity change from 0 to 8192
[   92.811457][ T6575] loop2: detected capacity change from 0 to 4096
[   92.849439][ T6580] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   92.857341][ T6575] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[   92.866256][ T6577] loop0: detected capacity change from 0 to 1024
[   92.877066][ T6575] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[   92.941559][   T26] hfsplus: b-tree write err: -5, ino 4
[   93.009975][   T33] audit: type=1326 audit(1756759115.004:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.0.303" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[   93.045063][   T33] audit: type=1326 audit(1756759115.004:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.0.303" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[   93.067333][   T33] audit: type=1326 audit(1756759115.004:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.0.303" exe="/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[   93.081124][   T33] audit: type=1326 audit(1756759115.004:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.0.303" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[   93.105980][   T33] audit: type=1326 audit(1756759115.004:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.0.303" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[   93.183455][ T6597] loop1: detected capacity change from 0 to 8
[   93.194273][ T6597] SQUASHFS error: xz decompression failed, data probably corrupt
[   93.206273][ T6597] SQUASHFS error: Failed to read block 0x108: -5
[   93.208396][ T6597] SQUASHFS error: Unable to read metadata cache entry [106]
[   93.211058][ T6597] SQUASHFS error: Unable to read inode 0x0
[   93.945109][ T6618] loop1: detected capacity change from 0 to 1024
[   94.517734][ T6629] netlink: del zone limit has 8 unknown bytes
[   94.715472][ T5955] IPVS: starting estimator thread 0...
[   94.789275][ T6639] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[   94.816541][ T6637] IPVS: using max 43 ests per chain, 103200 per kthread
[   94.865071][ T6643] loop2: detected capacity change from 0 to 256
[   94.897887][ T6643] FAT-fs (loop2): Directory bread(block 64) failed
[   94.903572][ T6643] FAT-fs (loop2): Directory bread(block 65) failed
[   94.906755][ T6643] FAT-fs (loop2): Directory bread(block 66) failed
[   94.909717][ T6643] FAT-fs (loop2): Directory bread(block 67) failed
[   94.912463][ T6643] FAT-fs (loop2): Directory bread(block 68) failed
[   94.915115][ T6643] FAT-fs (loop2): Directory bread(block 69) failed
[   94.918913][ T6643] FAT-fs (loop2): Directory bread(block 70) failed
[   94.921691][ T6643] FAT-fs (loop2): Directory bread(block 71) failed
[   94.924541][ T6643] FAT-fs (loop2): Directory bread(block 72) failed
[   94.927569][ T6643] FAT-fs (loop2): Directory bread(block 73) failed
[   95.145946][ T6659] loop2: detected capacity change from 0 to 256
[   95.150497][ T6659] exfat: Deprecated parameter 'utf8'
[   95.154440][ T6659] exfat: Deprecated parameter 'namecase'
[   95.174013][ T6659] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[   95.905126][ T6691] binder: 6690:6691 ioctl c0306201 2000000003c0 returned -14
[   95.932140][ T6693] gretap0: entered promiscuous mode
[   95.953850][ T6693] gretap0: left promiscuous mode
[   96.399024][ T6719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.363'.
[   96.404561][ T6719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.363'.
[   96.545998][   T61] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   96.696153][   T61] usb 3-1: Using ep0 maxpacket: 16
[   96.732377][   T61] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[   96.738231][   T61] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.741982][   T61] usb 3-1: Product: syz
[   96.744445][   T61] usb 3-1: Manufacturer: syz
[   96.750587][   T61] usb 3-1: SerialNumber: syz
[   96.763494][   T61] usb 3-1: config 0 descriptor??
[   97.001933][   T61] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[   97.021064][   T61] usb 3-1: USB disconnect, device number 5
[   98.016411][  T792] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   98.166458][  T792] usb 3-1: Using ep0 maxpacket: 8
[   98.171485][  T792] usb 3-1: config 0 has an invalid interface number: 122 but max is 0
[   98.175051][  T792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   98.181100][  T792] usb 3-1: config 0 has no interface number 0
[   98.183606][  T792] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[   98.188301][  T792] usb 3-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8
[   98.195503][  T792] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[   98.200565][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.203911][  T792] usb 3-1: Product: syz
[   98.205507][  T792] usb 3-1: Manufacturer: syz
[   98.207371][  T792] usb 3-1: SerialNumber: syz
[   98.210940][  T792] usb 3-1: config 0 descriptor??
[   98.214256][ T6724] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   98.225992][ T5997] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   98.392385][ T5997] usb 2-1: Using ep0 maxpacket: 16
[   98.399091][ T5997] usb 2-1: config 0 has an invalid interface number: 68 but max is 0
[   98.403764][ T5997] usb 2-1: config 0 has no interface number 0
[   98.407148][ T5997] usb 2-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[   98.415436][ T5997] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[   98.419705][ T5997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.423308][ T5997] usb 2-1: Product: syz
[   98.425223][ T5997] usb 2-1: Manufacturer: syz
[   98.431358][  T792] usb 3-1: NFC: intf ffff88810fe0a000 id ffffffff8eb543e0
[   98.439444][ T5997] usb 2-1: SerialNumber: syz
[   98.448775][ T5997] usb 2-1: config 0 descriptor??
[   98.451973][ T6731] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   98.458730][  T792] usb 3-1: USB disconnect, device number 6
[   98.498808][ T5997] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   98.681321][   T13] usb 2-1: Failed to submit usb control message: -71
[   98.681507][  T792] usb 2-1: USB disconnect, device number 4
[   98.684221][   T13] usb 2-1: unable to send the bmi data to the device: -71
[   98.690311][   T13] usb 2-1: unable to get target info from device
[   98.693093][   T13] usb 2-1: could not get target info (-71)
[   98.696070][   T13] usb 2-1: could not probe fw (-71)
[   98.806003][ T5997] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   98.958394][ T5997] usb 1-1: Using ep0 maxpacket: 8
[   98.968641][ T5997] usb 1-1: config 162 has an invalid interface number: 97 but max is 0
[   98.972129][ T5997] usb 1-1: config 162 has no interface number 0
[   98.974891][ T5997] usb 1-1: config 162 interface 97 has no altsetting 0
[   98.982600][ T5997] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[   98.986659][ T5997] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.990090][ T5997] usb 1-1: Product: syz
[   98.991968][ T5997] usb 1-1: Manufacturer: syz
[   98.994098][ T5997] usb 1-1: SerialNumber: syz
[   99.214274][ T5997] metro_usb 1-1:162.97: interrupt-out endpoint missing
[   99.239919][ T5997] usb 1-1: USB disconnect, device number 5
[   99.267887][ T5237] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   99.271865][ T5237] Bluetooth: hci0: Injecting HCI hardware error event
[   99.275310][ T5237] Bluetooth: hci0: hardware error 0x00
[   99.309352][ T6750] loop2: detected capacity change from 0 to 32768
[   99.349434][ T6750] find_entry called with index = 0
[   99.351855][ T6750] find_entry called with index = 0
[   99.354439][ T6750] read_mapping_page failed!
[   99.356940][ T6750] ERROR: (device loop2): txCommit: 
[   99.356940][ T6750] 
[   99.361339][ T6750] ERROR: (device loop2): remounting filesystem as read-only
[   99.493573][ T6752] loop1: detected capacity change from 0 to 32768
[   99.501466][ T6752] bcachefs (/dev/loop1): error reading default superblock: checksum error, type none: got  should be 
[   99.506881][ T6752] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section
[   99.506881][ T6752] clean (size 2912):
[   99.506881][ T6752] flags:          0
[   99.506881][ T6752] journal_seq:    10
[   99.506881][ T6752] usage: type=inodes v=8
[   99.506881][ T6752] usage: type=key_version v=0
[   99.506881][ T6752] usage: type=reserved v=0
[   99.506881][ T6752] usage: type=reserved v=0
[   99.506881][ T6752] usage: type=reserved v=0
[   99.506881][ T6752] usage: type=reserved v=0
[   99.506881][ T6752] data_usage: btree: 1/1 [0]=2816
[   99.506881][ T6752] data_usage: journal: 1/1 [0]=0
[   99.506881][ T6752] data_usage: user: 1/1 [0]=16
[   99.506881][ T6752] dev_usage: dev=0  
[   99.506881][ T6752]   free: buckets=83 sectors=0 fragmented=0
[   99.506881][ T6752]   sb: buckets=25 sectors=6152 fragmented=248
[   99.506881][ T6752]   journal: buckets=8 sectors=2048 fragmented=0
[   99.506881][ T6752]   btree: buckets=11 sectors=2816 fragmented=0
[   99.506881][ T6752]   user: buckets=1 sectors=16 fragmented=240
[   99.506881][ T6752]   cached: buckets=0 sectors=0 fragmented=0
[   99.506881][ T6752]   parity: buckets=432345564227567616 sectors=0 fragmented=0
[   99.506881][ T6752]   stripe: buckets=0 sectors=0 fragmented=0
[   99.506881][ T6752]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[   99.506881][ T6752]   need_discard: buckets=0 sectors=0 fragmented=0
[   99.506881][ T6752] clock: read=0
[   99.506881][ T6752] clock: write=1280
[   99.506881][ T6752] log_bkey: btree=extents level=0 u64s 11 type btree_p
[   99.507010][ T6752] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[   99.754249][ T6758] loop2: detected capacity change from 0 to 8
[   99.820129][ T6760] comedi comedi4: bad chanlist[0]=0x032c0000 chan=0 range length=2
[   99.924140][ T6767] loop2: detected capacity change from 0 to 1024
[   99.930622][ T6767] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[   99.952560][ T6767] hfsplus: filesystem is marked journaled, leaving read-only.
[  100.015246][ T6770] loop1: detected capacity change from 0 to 2048
[  100.040271][ T6770] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  100.047778][ T6770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.060573][ T6770] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  100.092170][ T6774] netlink: 'syz.2.389': attribute type 2 has an invalid length.
[  100.096901][ T6774] netlink: 244 bytes leftover after parsing attributes in process `syz.2.389'.
[  100.099121][   T33] audit: type=1326 audit(1756759122.094:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[  100.144071][   T33] audit: type=1326 audit(1756759122.094:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[  100.177417][   T33] audit: type=1326 audit(1756759122.104:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[  100.195991][   T33] audit: type=1326 audit(1756759122.104:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[  100.230944][   T33] audit: type=1326 audit(1756759122.104:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[  100.276959][   T33] audit: type=1326 audit(1756759122.104:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[  100.292084][   T33] audit: type=1326 audit(1756759122.104:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[  100.301649][   T33] audit: type=1326 audit(1756759122.104:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[  100.370269][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'.
[  100.634446][   T33] audit: type=1326 audit(1756759122.104:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f57cef8ebe9 code=0x7ffc0000
[  100.645348][   T33] audit: type=1326 audit(1756759122.104:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.0.390" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f57cef2adb9 code=0x7ffc0000
[  100.741763][ T6791] loop1: detected capacity change from 0 to 64
[  100.783934][ T6791] minix_free_block (loop1:1): bit already cleared
[  100.792461][ T6791] minix_free_block (loop1:4): bit already cleared
[  100.795786][ T6791] minix_free_block (loop1:3): bit already cleared
[  100.798945][ T6791] minix_free_block (loop1:2): bit already cleared
[  100.801725][ T6791] minix_free_block (loop1:1): bit already cleared
[  101.023099][ T6806] binder: 6805:6806 ioctl c0306201 200000000480 returned -14
[  101.220299][ T6818] loop1: detected capacity change from 0 to 512
[  101.313481][ T6824] xfrm0: entered promiscuous mode
[  101.315623][ T6824] xfrm0: entered allmulticast mode
[  101.346038][ T5237] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  101.945680][ T6838] capability: warning: `syz.2.416' uses deprecated v2 capabilities in a way that may be insecure
[  102.301760][ T6849] loop1: detected capacity change from 0 to 512
[  102.312782][ T6849] EXT4-fs (loop1): Test dummy encryption mode enabled
[  102.319824][ T6849] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  102.323995][ T6849] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  102.330494][ T6849] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.420: bad orphan inode 131083
[  102.337124][ T6849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.612409][ T6852] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  102.651587][ T6852] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.420: path /115/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  102.995610][ T6862] loop2: detected capacity change from 0 to 8
[  103.026240][ T6862] SQUASHFS error: xz decompression failed, data probably corrupt
[  103.030068][ T6862] SQUASHFS error: Failed to read block 0x108: -5
[  103.032886][ T6862] SQUASHFS error: Unable to read metadata cache entry [106]
[  103.038847][ T6862] SQUASHFS error: Unable to read inode 0x11f
[  103.106569][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  103.204574][ T6865] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  103.231350][ T6848] [U] 2
[  103.300724][ T6867] netlink: 96 bytes leftover after parsing attributes in process `syz.0.423'.
[  103.828814][ T6881] block device autoloading is deprecated and will be removed.
[  103.927035][ T6885] loop0: detected capacity change from 0 to 128
[  103.940239][ T5963] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.591616][ T6897] loop2: detected capacity change from 0 to 256
[  105.243198][ T6904] loop1: detected capacity change from 0 to 32768
[  105.309298][ T6904] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  105.344856][ T6904] XFS (loop1): Ending clean mount
[  105.389464][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  105.450522][ T6904] syz.1.439 (6904) used greatest stack depth: 19304 bytes left
[  105.548384][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  105.553060][    T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  105.557008][    T9] usb 3-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22
[  105.561943][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.572578][    T9] usb 3-1: config 0 descriptor??
[  105.692064][ T6913] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  105.715275][ T5937] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.828580][    T9] usb 3-1: USB disconnect, device number 7
[  105.894243][ T5937] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.978067][ T5937] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.036762][ T5937] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.123792][ T6922] loop0: detected capacity change from 0 to 1024
[  106.131642][ T6922] EXT4-fs: quotafile must be on filesystem root
[  106.161752][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'.
[  106.180413][ T5959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  106.185142][ T5959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  106.189070][ T5959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  106.192906][ T5937] bridge_slave_1: left allmulticast mode
[  106.195272][ T5937] bridge_slave_1: left promiscuous mode
[  106.200404][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.204711][ T5959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  106.209361][ T5959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  106.212642][ T5937] bridge_slave_0: left allmulticast mode
[  106.215663][ T5937] bridge_slave_0: left promiscuous mode
[  106.223711][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.489445][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.509882][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.515273][ T5937] bond0 (unregistering): Released all slaves
[  106.694179][ T6934] loop2: detected capacity change from 0 to 32768
[  106.781356][ T6934] JBD2: Ignoring recovery information on journal
[  106.844798][ T6934] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  106.867375][ T5937] hsr_slave_0: left promiscuous mode
[  106.874604][ T5937] hsr_slave_1: left promiscuous mode
[  106.879762][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.886138][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.916194][ T5958] ocfs2: Unmounting device (7,2) on (node local)
[  106.951201][ T5937] veth1_macvtap: left promiscuous mode
[  106.958640][ T5937] veth0_macvtap: left promiscuous mode
[  106.960808][ T5937] veth1_vlan: left promiscuous mode
[  107.175756][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'.
[  107.180795][ T6949] netlink: 3 bytes leftover after parsing attributes in process `syz.2.452'.
[  107.458802][ T5937] team0 (unregistering): Port device team_slave_1 removed
[  107.499071][ T5937] team0 (unregistering): Port device team_slave_0 removed
[  107.762394][ T6959] loop0: detected capacity change from 0 to 128
[  107.865003][ T6959] loop0: detected capacity change from 0 to 2048
[  107.929377][ T5884]  loop0: p1 < > p2 p3 < p5 p6 > p4
[  107.931768][ T5884] loop0: partition table partially beyond EOD, truncated
[  107.935108][ T5884] loop0: p1 start 4278190080 is beyond EOD, truncated
[  107.941346][ T5884] loop0: p2 start 16908800 is beyond EOD, truncated
[  107.965197][ T5884] loop0: p4 start 11326 is beyond EOD, truncated
[  107.968391][ T5884] loop0: p5 start 16908800 is beyond EOD, truncated
[  107.971437][ T5884] loop0: p6 start 11326 is beyond EOD, truncated
[  107.987896][ T6959]  loop0: p1 < > p2 p3 < p5 p6 > p4
[  107.990206][ T6959] loop0: partition table partially beyond EOD, truncated
[  107.993545][ T6959] loop0: p1 start 4278190080 is beyond EOD, truncated
[  107.999214][ T6959] loop0: p2 start 16908800 is beyond EOD, truncated
[  108.010368][ T6959] loop0: p4 start 11326 is beyond EOD, truncated
[  108.016711][ T6959] loop0: p5 start 16908800 is beyond EOD, truncated
[  108.020251][ T6959] loop0: p6 start 11326 is beyond EOD, truncated
[  108.079824][ T6949] batadv1: entered promiscuous mode
[  108.086703][ T6949] batadv1: entered allmulticast mode
[  108.226221][ T5237] Bluetooth: hci2: command tx timeout
[  108.319686][ T6923] chnl_net:caif_netlink_parms(): no params data found
[  108.329006][ T6971] cgroup: Unknown subsys name 'uid>00000000000000000000'
[  108.493109][ T6923] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.496242][ T6923] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.499357][ T6923] bridge_slave_0: entered allmulticast mode
[  108.509577][ T6923] bridge_slave_0: entered promiscuous mode
[  108.514377][ T6978] wg1: entered promiscuous mode
[  108.516789][ T6978] wg1: entered allmulticast mode
[  108.526843][ T6923] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.532822][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.542975][ T6923] bridge_slave_1: entered allmulticast mode
[  108.547223][ T6923] bridge_slave_1: entered promiscuous mode
[  108.553869][ T5937] IPVS: stop unused estimator thread 0...
[  108.576595][ T6964] loop2: detected capacity change from 0 to 32768
[  108.593224][ T6983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.652676][ T6923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.664701][ T6923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.668758][ T6964] lmLogOpen: exit(-6)
[  108.668782][ T6964] jfs_mount_rw failed, return code = -6
[  108.789169][ T6923] team0: Port device team_slave_0 added
[  108.793735][ T6923] team0: Port device team_slave_1 added
[  108.885301][ T6923] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.885584][ T6995] loop0: detected capacity change from 0 to 512
[  108.891447][ T6923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.916180][ T6923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.941125][ T6923] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.944071][ T6923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.977936][ T6923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.998550][ T6995] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.466: bg 0: block 248: padding at end of block bitmap is not set
[  109.010250][ T6995] __quota_error: 113 callbacks suppressed
[  109.010263][ T6995] Quota error (device loop0): write_blk: dquota write failed
[  109.015779][ T6995] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  109.022407][ T6995] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.466: Failed to acquire dquot type 1
[  109.053194][ T6995] EXT4-fs (loop0): 1 truncate cleaned up
[  109.059692][ T6995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.067244][ T6995] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.080040][ T7003] loop2: detected capacity change from 0 to 1024
[  109.082123][ T6923] hsr_slave_0: entered promiscuous mode
[  109.085714][ T6923] hsr_slave_1: entered promiscuous mode
[  109.092600][ T7003] EXT4-fs: Ignoring removed oldalloc option
[  109.099060][ T6995] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2
[  109.105034][ T7003] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  109.119687][ T6995] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 131074
[  109.126408][ T6995] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.466: Failed to acquire dquot type 1
[  109.141357][ T7003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.191083][ T5961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.257588][ T5958] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.446962][ T6923] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  109.499700][ T6923] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  109.525365][ T6923] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  109.553257][ T6923] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  110.024119][ T6923] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.039318][ T6923] 8021q: adding VLAN 0 to HW filter on device team0
[  110.052979][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.055981][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.063678][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.066450][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.374306][ T5237] Bluetooth: hci2: command tx timeout
[  110.388758][ T6923] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.442562][ T6923] veth0_vlan: entered promiscuous mode
[  110.451605][ T6923] veth1_vlan: entered promiscuous mode
[  110.541167][ T6923] veth0_macvtap: entered promiscuous mode
[  110.559448][ T6923] veth1_macvtap: entered promiscuous mode
[  110.584388][ T6923] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.595099][ T6923] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.608364][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.616599][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.622547][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.630569][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.707679][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.712524][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.737555][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.740852][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.841708][ T7047] loop3: detected capacity change from 0 to 1024
[  110.883636][ T7047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.918549][ T7047] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.475: Allocating blocks 385-513 which overlap fs metadata
[  110.925276][ T7053] loop0: detected capacity change from 0 to 1764
[  110.927954][ T7047] EXT4-fs (loop3): pa ffff88802b541740: logic 16, phys. 129, len 24
[  110.931411][ T7047] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  111.009020][ T7056] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  111.015761][ T6923] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.240103][ T7068] loop3: detected capacity change from 0 to 2048
[  111.276175][ T7068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.285751][ T7068] EXT4-fs (loop3): Online resizing not supported with bigalloc
[  111.307422][ T6923] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.355001][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'.
[  111.360326][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'.
[  111.364834][ T7073] netlink: 'syz.3.484': attribute type 18 has an invalid length.
[  111.431539][ T7077] netlink: 212388 bytes leftover after parsing attributes in process `syz.3.486'.
[  111.434688][ T7077] openvswitch: netlink: Message has 5 unknown bytes.
[  111.600999][ T7087] loop3: detected capacity change from 0 to 1024
[  111.786081][   T61] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  111.827212][ T5237] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  111.831644][ T5237] Bluetooth: hci1: Injecting HCI hardware error event
[  111.861686][ T5237] Bluetooth: hci1: hardware error 0x00
[  111.920357][ T7089] hfsplus: invalid extended attribute record
[  112.186525][   T61] usb 3-1: Using ep0 maxpacket: 32
[  112.192551][   T61] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.203492][   T61] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  112.211468][   T61] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.214896][   T61] usb 3-1: Product: syz
[  112.217150][   T61] usb 3-1: Manufacturer: syz
[  112.219257][   T61] usb 3-1: SerialNumber: syz
[  112.230970][   T61] usb 3-1: config 0 descriptor??
[  112.239066][   T61] usb 3-1: bad CDC descriptors
[  112.241633][   T61] usb 3-1: unsupported MDLM descriptors
[  112.258801][ T7099] loop0: detected capacity change from 0 to 256
[  112.262240][ T7099] exfat: Deprecated parameter 'namecase'
[  112.264688][ T7099] exfat: Deprecated parameter 'utf8'
[  112.275600][ T7099] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  112.386204][ T5959] Bluetooth: hci2: command tx timeout
[  112.459794][   T61] usb 3-1: USB disconnect, device number 8
[  112.527204][ T6453] hfsplus: b-tree write err: -5, ino 8
[  112.732936][ T7108] loop3: detected capacity change from 0 to 256
[  112.774367][ T7110] loop0: detected capacity change from 0 to 16
[  112.778767][ T7110] erofs (device loop0): mounted with root inode @ nid 36.
[  112.789395][ T7110] erofs (device loop0): read error -117 @ 72 of nid 36
[  112.801194][ T7108] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  113.106734][   T61] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  113.276144][   T61] usb 1-1: Using ep0 maxpacket: 8
[  113.280211][   T61] usb 1-1: unable to get BOS descriptor or descriptor too short
[  113.284570][   T61] usb 1-1: config 4 interface 0 has no altsetting 0
[  113.290926][   T61] usb 1-1: string descriptor 0 read error: -22
[  113.293775][   T61] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  113.297746][   T61] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  113.309131][   T61] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  113.317317][   T61] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  113.321566][   T61] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  113.325151][   T61] usb 1-1: media controller created
[  113.345616][   T61] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  113.496077][ T5954] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  113.510773][   T61] zl10353_read_register: readreg error (reg=127, ret==0)
[  113.539303][   T61] usb 1-1: USB disconnect, device number 6
[  113.646049][ T5954] usb 3-1: Using ep0 maxpacket: 8
[  113.653800][ T5954] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  113.658759][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.661876][ T5954] usb 3-1: Product: syz
[  113.663616][ T5954] usb 3-1: Manufacturer: syz
[  113.665517][ T5954] usb 3-1: SerialNumber: syz
[  113.672876][ T5954] usb 3-1: config 0 descriptor??
[  113.886261][ T5954] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  113.986763][ T5237] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  114.214936][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.299889][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.335978][ T5955] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  114.354238][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.404265][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.447012][ T5959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  114.453535][ T5959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  114.457301][ T5959] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  114.461800][ T5959] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  114.465786][ T5959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  114.485993][ T5955] usb 1-1: Using ep0 maxpacket: 8
[  114.493123][ T5955] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  114.497449][ T5955] usb 1-1: config 179 has no interface number 0
[  114.500014][ T5955] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  114.504362][ T5955] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  114.505390][ T5954] usb write operation failed. (-71)
[  114.509246][ T5955] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  114.509265][ T5955] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  114.509278][ T5955] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  114.509293][ T5955] usb 1-1: config 179 interface 65 has no altsetting 0
[  114.509319][ T5955] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  114.528956][ T5954] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  114.536541][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.548171][ T5954] dvbdev: DVB: registering new adapter (Terratec H7)
[  114.565075][ T5955] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5
[  114.566630][ T5954] usb 3-1: media controller created
[  114.573880][ T5954] usb read operation failed. (-71)
[  114.582309][ T5954] usb write operation failed. (-71)
[  114.607873][ T5954] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  114.618906][ T5954] usb 3-1: USB disconnect, device number 9
[  114.765797][ T5955] usb 1-1: USB disconnect, device number 7
[  114.767797][ T7132] chnl_net:caif_netlink_parms(): no params data found
[  114.840906][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.843500][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.845850][ T7132] bridge_slave_0: entered allmulticast mode
[  114.849656][ T7132] bridge_slave_0: entered promiscuous mode
[  114.853984][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.856999][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.859843][ T7132] bridge_slave_1: entered allmulticast mode
[  114.863311][ T7132] bridge_slave_1: entered promiscuous mode
[  114.886835][ T7132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.891979][ T7132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.915045][ T7132] team0: Port device team_slave_0 added
[  114.919744][ T7132] team0: Port device team_slave_1 added
[  114.939881][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.942737][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.952386][ T7132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.958361][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.961010][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.970761][ T7132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.997762][ T7132] hsr_slave_0: entered promiscuous mode
[  115.000450][ T7132] hsr_slave_1: entered promiscuous mode
[  115.002897][ T7132] debugfs: 'hsr0' already exists in 'hsr'
[  115.004894][ T7132] Cannot create hsr debugfs directory
[  115.126765][ T7132] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  115.131259][ T7132] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  115.135138][ T7132] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  115.139571][ T7132] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  115.156668][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.158920][ T7132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.161256][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.163529][ T7132] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.198680][ T7132] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.207524][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.210688][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.222573][ T7132] 8021q: adding VLAN 0 to HW filter on device team0
[  115.229595][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.232657][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.243693][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.246720][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.308146][ T5955] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  115.412276][   T12] bridge_slave_1: left allmulticast mode
[  115.414700][   T12] bridge_slave_1: left promiscuous mode
[  115.418064][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.431594][   T12] bridge_slave_0: left allmulticast mode
[  115.433845][   T12] bridge_slave_0: left promiscuous mode
[  115.437705][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.468891][ T5955] usb 3-1: config 0 has an invalid interface number: 28 but max is 0
[  115.472765][ T5955] usb 3-1: config 0 has no interface number 0
[  115.481508][ T5955] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.493674][ T5955] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.503697][ T5955] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  115.513907][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.519033][ T5955] usb 3-1: config 0 descriptor??
[  115.566170][ T5947] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  115.723457][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  115.732151][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.740293][ T5947] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  115.745652][ T5947] usb 1-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00
[  115.752375][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.759942][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.764657][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.771044][   T12] bond0 (unregistering): Released all slaves
[  115.773964][ T5947] usb 1-1: config 0 descriptor??
[  115.818048][ T7132] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.950337][ T5955] logitech-djreceiver 0003:046D:C534.0002: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.2-1/input28
[  116.145287][ T5955] usb 3-1: USB disconnect, device number 10
[  116.155212][   T12] hsr_slave_0: left promiscuous mode
[  116.162276][   T12] hsr_slave_1: left promiscuous mode
[  116.170423][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.173488][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.182683][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.185291][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.196941][   T12] veth1_macvtap: left promiscuous mode
[  116.202235][   T12] veth0_macvtap: left promiscuous mode
[  116.204919][   T12] veth1_vlan: left promiscuous mode
[  116.207348][   T12] veth0_vlan: left promiscuous mode
[  116.416886][ T5947] usb 1-1: USB disconnect, device number 8
[  116.475285][   T12] team0 (unregistering): Port device team_slave_1 removed
[  116.497374][   T12] team0 (unregistering): Port device team_slave_0 removed
[  116.547478][ T5959] Bluetooth: hci2: command tx timeout
[  116.702934][ T7178] netlink: 'syz.2.516': attribute type 3 has an invalid length.
[  116.706379][ T7178] netlink: 'syz.2.516': attribute type 1 has an invalid length.
[  116.709866][ T7178] netlink: 216 bytes leftover after parsing attributes in process `syz.2.516'.
[  116.714350][ T7178] NCSI netlink: No device for ifindex 33022
[  116.748052][ T7180] loop2: detected capacity change from 0 to 512
[  116.756258][ T7180] EXT4-fs: Ignoring removed nomblk_io_submit option
[  116.761879][ T7180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.774930][ T7180] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.517: bg 0: block 505: padding at end of block bitmap is not set
[  116.824632][ T5958] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.860335][ T7184] loop2: detected capacity change from 0 to 512
[  116.867190][ T7184] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.518: bad orphan inode 17
[  116.871431][ T7184] ext4_test_bit(bit=16, block=4) = 1
[  116.873607][ T7184] is_bad_inode(inode)=0
[  116.875279][ T7184] NEXT_ORPHAN(inode)=0
[  116.878738][ T7184] max_ino=32
[  116.880079][ T7184] i_nlink=1
[  116.882750][ T7184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.916306][ T5958] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.065731][ T7132] veth0_vlan: entered promiscuous mode
[  117.080200][ T7132] veth1_vlan: entered promiscuous mode
[  117.084978][ T7195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.168436][ T7132] veth0_macvtap: entered promiscuous mode
[  117.193831][ T7132] veth1_macvtap: entered promiscuous mode
[  117.240005][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.270509][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'.
[  117.275542][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.390851][ T5971] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.400933][ T5971] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.453736][ T5971] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.473606][ T5971] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.555370][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.566203][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.595103][ T7219] program syz.2.528 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  117.627135][ T6453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.630585][ T6453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.762236][ T7226] loop0: detected capacity change from 0 to 47
[  118.046271][ T7244] loop2: detected capacity change from 0 to 256
[  118.253101][ T7256] loop0: detected capacity change from 0 to 2048
[  118.266119][ T7256] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  118.275155][ T7260] loop2: detected capacity change from 0 to 128
[  118.295218][ T7260] vxfs: unsupported VxFS version (2066843062)
[  118.642971][ T5959] Bluetooth: hci2: command tx timeout
[  119.202793][   T61] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  119.356397][   T61] usb 3-1: Using ep0 maxpacket: 16
[  119.361973][   T61] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  119.365741][   T61] usb 3-1: config 0 has no interface number 0
[  119.372951][   T61] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.380826][   T61] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.385223][   T61] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  119.390237][   T61] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.394771][   T61] usb 3-1: config 0 descriptor??
[  120.006058][   T61] uclogic 0003:28BD:0071.0004: pen parameters not found
[  120.008964][   T61] uclogic 0003:28BD:0071.0004: interface is invalid, ignoring
[  120.212628][   T61] usb 3-1: USB disconnect, device number 11
[  120.478042][ T7328] loop0: detected capacity change from 0 to 4096
[  120.526515][ T7328] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  120.553337][ T7328] ntfs3(loop0): Failed to load $Extend (-22).
[  120.557122][ T7328] ntfs3(loop0): Failed to initialize $Extend.
[  120.674786][ T7339] libceph: resolve '0.0' (ret=-3): failed
[  120.706970][ T5959] Bluetooth: hci2: command tx timeout
[  121.240745][ T7357] loop2: detected capacity change from 0 to 2048
[  121.261320][ T7357] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  121.264744][ T7357] UDF-fs: Scanning with blocksize 512 failed
[  121.275344][ T7357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.447948][   T61] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  121.607797][   T61] usb 1-1: Using ep0 maxpacket: 32
[  121.612173][   T61] usb 1-1: config 0 has an invalid interface number: 169 but max is 0
[  121.615613][   T61] usb 1-1: config 0 has no interface number 0
[  121.618709][   T61] usb 1-1: config 0 interface 169 has no altsetting 0
[  121.636831][   T61] usb 1-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49
[  121.640831][   T61] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.645222][   T61] usb 1-1: Product: syz
[  121.651088][   T61] usb 1-1: Manufacturer: syz
[  121.653100][   T61] usb 1-1: SerialNumber: syz
[  121.660236][   T61] usb 1-1: config 0 descriptor??
[  121.668325][   T61] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  121.881749][   T61] usb 1-1: USB disconnect, device number 9
[  122.093293][ T7391] loop2: detected capacity change from 0 to 2048
[  122.111557][ T7391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.286372][ T5997] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  122.399801][ T7401] netlink: 44 bytes leftover after parsing attributes in process `syz.2.599'.
[  122.403888][ T7401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.599'.
[  122.438910][ T5997] usb 5-1: config index 0 descriptor too short (expected 69, got 36)
[  122.441470][ T5997] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.450368][ T5997] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  122.454005][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.466373][ T5997] usb 5-1: Product: syz
[  122.470154][ T5997] usb 5-1: Manufacturer: syz
[  122.472081][ T5997] usb 5-1: SerialNumber: syz
[  122.475333][ T5997] usb 5-1: config 0 descriptor??
[  122.484931][ T5997] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  122.732453][ T7403] loop0: detected capacity change from 0 to 32768
[  122.751559][ T7403] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  122.786130][ T5959] Bluetooth: hci2: command tx timeout
[  122.786835][ T7403] XFS (loop0): Ending clean mount
[  122.796987][ T7403] XFS (loop0): Quotacheck needed: Please wait.
[  122.830752][ T7403] XFS (loop0): Quotacheck: Done.
[  122.879169][ T5961] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  123.287711][ T5997] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71
[  123.290704][ T5997] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  123.306628][ T5997] usb 5-1: USB disconnect, device number 2
[  123.309755][ T7439] tmpfs: Bad value for 'mpol'
[  123.363391][ T7442] loop0: detected capacity change from 0 to 1024
[  123.389153][ T7442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.438738][ T5961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.559944][ T7456] /dev/nullb0: Can't lookup blockdev
[  123.705999][ T5954] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  123.858131][ T5954] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  123.862738][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0
[  123.869860][ T5954] usb 3-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00
[  123.872583][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.890466][ T5954] usb 3-1: config 0 descriptor??
[  123.892836][ T7450] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  124.311718][ T5954] thrustmaster 0003:044F:B323.0005: unknown main item tag 0x2
[  124.315537][ T5954] thrustmaster 0003:044F:B323.0005: item fetching failed at offset 4/5
[  124.326741][ T5954] thrustmaster 0003:044F:B323.0005: parse failed
[  124.332993][ T5954] thrustmaster 0003:044F:B323.0005: probe with driver thrustmaster failed with error -22
[  124.513458][ T5954] usb 3-1: USB disconnect, device number 12
[  124.775106][ T7505] netlink: 'syz.0.636': attribute type 1 has an invalid length.
[  125.286655][ T5997] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  125.341406][ T7529] loop4: detected capacity change from 0 to 128
[  125.358154][ T7529] EXT4-fs (loop4): Test dummy encryption mode enabled
[  125.373372][ T7529] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  125.389496][ T7529] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  125.445830][ T5997] usb 1-1: Using ep0 maxpacket: 8
[  125.459315][ T7132] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  125.463474][ T5997] usb 1-1: unable to get BOS descriptor or descriptor too short
[  125.472931][ T5997] usb 1-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 255
[  125.478535][ T5997] usb 1-1: config 8 interface 0 has no altsetting 0
[  125.496720][ T5997] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  125.500865][ T5997] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.504496][ T5997] usb 1-1: Product: syz
[  125.507582][ T5997] usb 1-1: Manufacturer: syz
[  125.509658][ T5997] usb 1-1: SerialNumber: syz
[  125.521580][ T7518] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  125.742071][ T5997] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  125.748989][ T5997] usb 1-1: selecting invalid altsetting 0
[  125.822744][ T5997] usb 1-1: USB disconnect, device number 10
[  125.875139][ T7546] loop2: detected capacity change from 0 to 32768
[  125.878177][ T7546] XFS: ikeep mount option is deprecated.
[  125.909499][ T7377] udevd[7377]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  125.934947][ T7546] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  125.943090][ T7557] netlink: 36 bytes leftover after parsing attributes in process `syz.4.654'.
[  125.978118][ T7546] XFS (loop2): Ending clean mount
[  125.983096][ T7546] XFS (loop2): Quotacheck needed: Please wait.
[  126.023199][ T7562] loop4: detected capacity change from 0 to 1024
[  126.035471][ T7562] EXT4-fs: inline encryption not supported
[  126.036228][ T7546] XFS (loop2): Quotacheck: Done.
[  126.054688][ T7562] EXT4-fs: Ignoring removed bh option
[  126.080746][ T7562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.160429][ T7132] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.636051][  T792] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  126.703265][ T5958] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  126.796105][  T792] usb 1-1: Using ep0 maxpacket: 16
[  126.805305][  T792] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  126.807245][ T7580] netlink: 'syz.4.663': attribute type 12 has an invalid length.
[  126.813151][  T792] usb 1-1: config 0 has no interface number 0
[  126.816187][ T7580] netlink: 132 bytes leftover after parsing attributes in process `syz.4.663'.
[  126.822230][  T792] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  126.828714][  T792] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  126.832920][  T792] usb 1-1: config 0 interface 41 has no altsetting 0
[  126.852190][  T792] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  126.856255][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.859677][  T792] usb 1-1: Product: syz
[  126.864455][  T792] usb 1-1: Manufacturer: syz
[  126.871098][  T792] usb 1-1: SerialNumber: syz
[  126.884525][  T792] usb 1-1: config 0 descriptor??
[  126.899173][ T7570] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  126.902562][ T7570] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  127.065775][ T7588] Illegal XDP return value 115605504 on prog  (id 49) dev N/A, expect packet loss!
[  127.124209][  T792] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71
[  127.145372][  T792] usb 1-1: USB disconnect, device number 11
[  127.762557][ T7680] loop0: detected capacity change from 0 to 4096
[  127.816674][ T7694] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  127.873089][ T7680] overlayfs: upper fs does not support tmpfile.
[  127.883975][ T7680] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  127.887044][ T7680] overlayfs: failed to set xattr on upper
[  127.890148][ T7680] overlayfs: ...falling back to redirect_dir=nofollow.
[  127.893467][ T7680] overlayfs: ...falling back to index=off.
[  127.896534][ T7680] overlayfs: ...falling back to uuid=null.
[  127.985253][ T5961] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  127.995004][ T5961] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12)
[  128.062435][ T5961] Remounting filesystem read-only
[  128.064209][ T5961] NILFS (loop0): error -5 truncating bmap (ino=12)
[  128.073376][ T5961] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  128.105505][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'.
[  128.416322][  T792] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  128.565977][  T792] usb 5-1: Using ep0 maxpacket: 8
[  128.578108][  T792] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  128.582569][  T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.598988][  T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.603313][  T792] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  128.609387][  T792] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  128.613251][  T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.636438][  T792] usb 5-1: config 0 descriptor??
[  129.061323][  T792] redragon 0003:0C45:760B.0006: unknown main item tag 0x6
[  129.066308][  T792] redragon 0003:0C45:760B.0006: item fetching failed at offset 7/133
[  129.075061][  T792] redragon 0003:0C45:760B.0006: probe with driver redragon failed with error -22
[  129.184426][ T7745] loop0: detected capacity change from 0 to 64
[  129.257574][ T5954] usb 5-1: USB disconnect, device number 3
[  130.121196][ T7772] loop2: detected capacity change from 0 to 4096
[  130.130794][ T7772] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  130.145083][ T7772] ntfs3(loop2): $Secure::$SII is corrupted.
[  130.149892][ T7772] ntfs3(loop2): Failed to initialize $Secure (-22).
[  130.237393][ T7774] loop2: detected capacity change from 0 to 256
[  130.256070][ T5955] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  130.390951][ T7778] loop0: detected capacity change from 0 to 512
[  130.394431][ T7778] EXT4-fs: Ignoring removed oldalloc option
[  130.409077][ T7778] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  130.416536][ T7778] EXT4-fs (loop0): group descriptors corrupted!
[  130.817628][ T5955] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  130.822313][ T5955] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.829422][ T5955] usb 5-1: config 0 interface 0 has no altsetting 0
[  130.832248][ T5955] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00
[  130.836223][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.847139][ T5955] usb 5-1: config 0 descriptor??
[  130.924652][ T7789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.266635][ T5955] uclogic 0003:28BD:0075.0007: interface is invalid, ignoring
[  131.468555][ T5947] usb 5-1: USB disconnect, device number 4
[  131.574682][ T7805] loop2: detected capacity change from 0 to 4096
[  131.578828][ T7805] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  131.612094][ T7805] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  131.638609][ T7656] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  131.643165][ T5958] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  131.646960][ T5958] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  131.650665][ T5958] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  131.654037][ T7656] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  132.314079][ T7818] loop0: detected capacity change from 0 to 32768
[  132.329924][ T7818] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev.
[  132.565231][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  133.283291][ T7831] loop4: detected capacity change from 0 to 32768
[  133.304074][ T7831] 
[  133.304074][ T7831]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  133.304074][ T7831] 
[  133.454813][ T7831] 
[  133.454813][ T7831]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  133.454813][ T7831] 
[  133.474229][ T7831] 
[  133.474229][ T7831]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  133.474229][ T7831] 
[  133.480968][ T7831] 
[  133.480968][ T7831]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  133.480968][ T7831] 
[  133.511719][ T7831] 
[  133.511719][ T7831]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  133.511719][ T7831] 
[  133.590033][ T7132] 
[  133.590033][ T7132]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  133.590033][ T7132] 
[  133.596625][ T7132] 
[  133.596625][ T7132]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  133.596625][ T7132] 
[  135.709873][   T61] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  135.873151][   T61] usb 5-1: Using ep0 maxpacket: 32
[  135.906846][   T61] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  135.936190][   T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.948127][   T61] usb 5-1: config 0 descriptor??
[  136.059301][ T7905] loop0: detected capacity change from 0 to 1024
[  136.160379][   T61] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  136.179765][   T61] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  136.196115][   T61] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  136.199865][   T61] usb 5-1: media controller created
[  136.202291][ T7613] hfsplus: b-tree write err: -5, ino 4
[  136.222913][   T61] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  136.287619][   T33] audit: type=1326 audit(1756759158.284:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.0.759" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57cef8ebe9 code=0x0
[  136.383386][   T61] az6027: usb out operation failed. (-71)
[  136.403578][   T61] az6027: usb out operation failed. (-71)
[  136.414153][   T61] stb0899_attach: Driver disabled by Kconfig
[  136.420254][   T61] az6027: no front-end attached
[  136.420254][   T61] 
[  136.425721][   T61] az6027: usb out operation failed. (-71)
[  136.431307][   T61] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  136.451858][   T61] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8
[  136.460318][   T61] dvb-usb: schedule remote query interval to 400 msecs.
[  136.463220][   T61] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  136.481139][   T61] usb 5-1: USB disconnect, device number 5
[  136.591815][   T61] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  136.976405][ T5955] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  137.126000][ T5955] usb 3-1: Using ep0 maxpacket: 32
[  137.134360][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.149585][ T5955] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  137.153068][ T5955] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  137.166199][ T5955] usb 3-1: Product: syz
[  137.176835][ T5955] usb 3-1: Manufacturer: syz
[  137.178701][ T5955] usb 3-1: SerialNumber: syz
[  137.193731][ T5955] usb 3-1: config 0 descriptor??
[  137.199610][ T5955] gs_usb 3-1:0.0: Required endpoints not found
[  137.404435][ T5955] usb 3-1: USB disconnect, device number 13
[  137.450881][ T7937] 9pnet: Unknown protocol version 9p20\++}
[  137.978750][ T7950] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.778' sets config #0
[  138.118428][ T7952] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.779'.
[  138.193411][ T7960] netlink: 'syz.4.782': attribute type 2 has an invalid length.
[  138.923758][ T8016] block nbd4: shutting down sockets
[  139.025122][ T8022] loop0: detected capacity change from 0 to 256
[  139.058165][ T8022] exfat: Deprecated parameter 'namecase'
[  139.070823][ T8022] exfat: Deprecated parameter 'utf8'
[  139.081027][ T8022] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  139.297204][ T8024] loop2: detected capacity change from 0 to 32768
[  139.311472][ T8024] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.810 (8024)
[  139.322413][ T8024] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  139.327253][ T8024] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  139.331073][ T8024] BTRFS error (device loop2): ignoredatacsums must be used with ro mount option
[  139.335048][ T8024] BTRFS error (device loop2): open_ctree failed: -22
[  139.416242][  T792] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  139.487282][ T5971] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.578059][  T792] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  139.581697][  T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.590898][ T5971] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.598415][  T792] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  139.602326][  T792] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  139.605765][  T792] usb 5-1: Manufacturer: syz
[  139.618079][  T792] usb 5-1: config 0 descriptor??
[  139.671927][ T5971] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.696675][  T792] rc_core: IR keymap rc-hauppauge not found
[  139.699239][  T792] Registered IR keymap rc-empty
[  139.710678][  T792] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  139.718597][  T792] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10
[  139.790571][ T5971] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.062513][ T5971] bridge_slave_1: left allmulticast mode
[  140.064387][ T5971] bridge_slave_1: left promiscuous mode
[  140.070232][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.077108][ T5971] bridge_slave_0: left allmulticast mode
[  140.078908][ T5971] bridge_slave_0: left promiscuous mode
[  140.083554][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  140.091308][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  140.094465][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  140.098176][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  140.101339][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  140.118889][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.206624][ T8044] loop2: detected capacity change from 0 to 32768
[  140.271745][   T10] usb 5-1: USB disconnect, device number 6
[  140.354835][ T8044] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  140.354854][ T8044]   allowing incompatible features above 0.0: (unknown version)
[  140.354861][ T8044]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  140.374666][ T8044] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  140.378440][ T8044] bcachefs (loop2): initializing new filesystem
[  140.389433][ T8044] bcachefs (loop2): going read-write
[  140.439193][ T8044] bcachefs (loop2): marking superblocks
[  140.464400][ T8044] bcachefs (loop2): initializing freespace
[  140.479765][ T8044] bcachefs (loop2): done initializing freespace
[  140.484899][ T8044] bcachefs (loop2): reading snapshots table
[  140.485142][ T5971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.487424][ T8044] bcachefs (loop2): reading snapshots done
[  140.498978][ T5971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.504426][ T5971] bond0 (unregistering): Released all slaves
[  140.506832][ T8044] bcachefs (loop2): done starting filesystem
[  140.534325][ T5971] bond1 (unregistering): Released all slaves
[  140.554650][ T5971] bond2 (unregistering): Released all slaves
[  140.574270][ T8044] bcachefs (loop2): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled, allowed up to 1.16: reflink_p_may_update_opts
[  140.574270][ T8044]   set version_upgrade=incompat to enable
[  140.677925][ T8044] syz.2.821 (8044) used greatest stack depth: 15240 bytes left
[  140.724342][ T5958] bcachefs (loop2): shutting down
[  140.729969][ T5958] bcachefs (loop2): going read-only
[  140.736388][ T5958] bcachefs (loop2): finished waiting for writes to stop
[  140.761890][ T5958] bcachefs (loop2): flushing journal and stopping allocators, journal seq 14
[  140.848081][ T5958] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 16
[  140.861438][ T5958] bcachefs (loop2): clean shutdown complete, journal seq 17
[  140.865853][ T5958] bcachefs (loop2): marking filesystem clean
[  140.904149][ T5958] bcachefs (loop2): shutdown complete
[  141.052449][ T8045] chnl_net:caif_netlink_parms(): no params data found
[  141.509557][ T5971] hsr_slave_0: left promiscuous mode
[  141.512400][ T5971] hsr_slave_1: left promiscuous mode
[  141.515225][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.519652][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.523371][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.527078][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.543440][ T5971] veth1_macvtap: left promiscuous mode
[  141.546151][ T5971] veth0_macvtap: left promiscuous mode
[  141.548691][ T5971] veth1_vlan: left promiscuous mode
[  141.552231][ T5971] veth0_vlan: left promiscuous mode
[  141.924569][ T8075] binder: binder_mmap: 8074 200000ffb000-200000ffd000 bad vm_flags failed -1
[  142.051246][ T5971] team0 (unregistering): Port device team_slave_1 removed
[  142.084711][ T5971] team0 (unregistering): Port device team_slave_0 removed
[  142.156172][ T5237] Bluetooth: hci1: command tx timeout
[  142.178501][ T5947] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  142.358798][ T5947] usb 5-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7
[  142.362442][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.367075][ T5947] usb 5-1: config 0 descriptor??
[  142.383451][ T5947] gspca_main: mars-2.14.0 probing 093a:050f
[  142.551853][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.555056][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.558537][ T8045] bridge_slave_0: entered allmulticast mode
[  142.562410][ T8045] bridge_slave_0: entered promiscuous mode
[  142.568507][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.571743][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.574867][ T8045] bridge_slave_1: entered allmulticast mode
[  142.578847][ T8045] bridge_slave_1: entered promiscuous mode
[  142.597080][ T5947] usb 5-1: USB disconnect, device number 7
[  142.633387][ T8045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.647412][ T8045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.699765][ T8045] team0: Port device team_slave_0 added
[  142.704498][ T8045] team0: Port device team_slave_1 added
[  142.753098][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.756310][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.768008][ T8045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.774182][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.778609][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.805755][ T8045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.880202][ T8078] loop2: detected capacity change from 0 to 1024
[  142.902853][ T8078] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  142.917821][ T8045] hsr_slave_0: entered promiscuous mode
[  142.931028][ T8045] hsr_slave_1: entered promiscuous mode
[  142.934901][ T8078] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.822: Invalid block bitmap block 0 in block_group 0
[  142.948625][ T8078] Quota error (device loop2): write_blk: dquota write failed
[  142.951652][ T8078] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  142.955452][ T8078] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.822: Failed to acquire dquot type 0
[  142.976792][ T8078] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.822: Freeing blocks not in datazone - block = 0, count = 4096
[  142.985043][ T8078] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.822: Invalid inode bitmap blk 0 in block_group 0
[  143.000887][ T8078] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  143.009652][ T8078] EXT4-fs (loop2): 1 orphan inode deleted
[  143.013246][ T8078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.018464][ T7685] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7
[  143.024668][ T7685] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u9:37: Failed to release dquot type 0
[  143.030695][ T5971] ------------[ cut here ]------------
[  143.033673][ T5971] WARNING: CPU: 0 PID: 5971 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  143.037968][ T5971] Modules linked in:
[  143.040216][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  143.044783][ T5971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.049170][ T5971] Workqueue: netns cleanup_net
[  143.051469][ T5971] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  143.053835][ T5971] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 db d6 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 94 e1 f7 e8 a4 68 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 96 68 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  143.061763][ T5971] RSP: 0018:ffffc90003f0f898 EFLAGS: 00010293
[  143.064423][ T5971] RAX: ffffffff8a22456c RBX: ffff888120dba440 RCX: ffff888106aa9cc0
[  143.067795][ T5971] RDX: 0000000000000000 RSI: ffffffff8dba7696 RDI: ffff888106aa9cc0
[  143.071018][ T5971] RBP: ffffc90003f0f9b0 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
[  143.074195][ T5971] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: ffffffff8f631a00
[  143.078340][ T5971] R13: 1ffff920007e1f40 R14: ffff888120dbb8c0 R15: dffffc0000000000
[  143.081493][ T5971] FS:  0000000000000000(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  143.085208][ T5971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.088085][ T5971] CR2: 00007f66025733e0 CR3: 000000001f97a000 CR4: 00000000000006f0
[  143.091331][ T5971] Call Trace:
[  143.092768][ T5971]  <TASK>
[  143.094063][ T5971]  xfrm_net_exit+0x2d/0x70
[  143.095852][ T5971]  ops_undo_list+0x49a/0x990
[  143.097906][ T5971]  ? __pfx_ops_undo_list+0x10/0x10
[  143.100013][ T5971]  ? do_raw_spin_unlock+0x4d/0x240
SYZFAIL: failed to recv rpc
[  143.102857][ T5971]  cleanup_net+0x4c5/0x800
[  143.104896][ T5971]  ? __pfx_cleanup_net+0x10/0x10
[  143.107163][ T5971]  ? _raw_spin_unlock_irq+0x23/0x50
[  143.109425][ T5971]  ? process_scheduled_works+0x9ef/0x17b0
[  143.111789][ T5971]  ? process_scheduled_works+0x9ef/0x17b0
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  143.114166][ T5971]  process_scheduled_works+0xae1/0x17b0
[  143.116713][ T5971]  ? __pfx_process_scheduled_works+0x10/0x10
[  143.119311][ T5971]  worker_thread+0x8a0/0xda0
[  143.121306][ T5971]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  143.124021][ T5971]  ? __kthread_parkme+0x7b/0x200
[  143.126271][ T5971]  kthread+0x711/0x8a0
[  143.128042][ T5971]  ? __pfx_worker_thread+0x10/0x10
[  143.130116][ T5971]  ? __pfx_kthread+0x10/0x10
[  143.132806][ T5971]  ? _raw_spin_unlock_irq+0x23/0x50
[  143.135220][ T5971]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.137472][ T5971]  ? __pfx_kthread+0x10/0x10
[  143.139423][ T5971]  ret_from_fork+0x3fc/0x770
[  143.141218][ T5971]  ? __pfx_ret_from_fork+0x10/0x10
[  143.143411][ T5971]  ? __switch_to_asm+0x39/0x70
[  143.145460][ T5971]  ? __switch_to_asm+0x33/0x70
[  143.147573][ T5971]  ? __pfx_kthread+0x10/0x10
[  143.149550][ T5971]  ret_from_fork_asm+0x1a/0x30
[  143.152094][ T5971]  </TASK>
[  143.153451][ T5971] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  143.156466][ T5971] CPU: 0 UID: 0 PID: 5971 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  143.160598][ T5971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.164902][ T5971] Workqueue: netns cleanup_net
[  143.166994][ T5971] Call Trace:
[  143.168456][ T5971]  <TASK>
[  143.169742][ T5971]  dump_stack_lvl+0x99/0x250
[  143.171749][ T5971]  ? __asan_memcpy+0x40/0x70
[  143.173757][ T5971]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.176010][ T5971]  ? __pfx__printk+0x10/0x10
[  143.178001][ T5971]  vpanic+0x281/0x750
[  143.179644][ T5971]  ? __pfx__printk+0x10/0x10
[  143.181635][ T5971]  ? __pfx_vpanic+0x10/0x10
[  143.183568][ T5971]  ? is_bpf_text_address+0x292/0x2b0
[  143.185855][ T5971]  panic+0xb9/0xc0
[  143.187508][ T5971]  ? __pfx_panic+0x10/0x10
[  143.189449][ T5971]  __warn+0x31b/0x4b0
[  143.191208][ T5971]  ? xfrm_state_fini+0x26d/0x2f0
[  143.193359][ T5971]  ? xfrm_state_fini+0x26d/0x2f0
[  143.195482][ T5971]  report_bug+0x2be/0x4f0
[  143.197356][ T5971]  ? xfrm_state_fini+0x26d/0x2f0
[  143.199431][ T5971]  ? xfrm_state_fini+0x26d/0x2f0
[  143.201472][ T5971]  ? xfrm_state_fini+0x26f/0x2f0
[  143.203365][ T5971]  handle_bug+0x84/0x160
[  143.205078][ T5971]  exc_invalid_op+0x1a/0x50
[  143.207081][ T5971]  asm_exc_invalid_op+0x1a/0x20
[  143.209174][ T5971] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  143.211397][ T5971] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 db d6 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 94 e1 f7 e8 a4 68 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 96 68 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  143.219553][ T5971] RSP: 0018:ffffc90003f0f898 EFLAGS: 00010293
[  143.222173][ T5971] RAX: ffffffff8a22456c RBX: ffff888120dba440 RCX: ffff888106aa9cc0
[  143.225360][ T5971] RDX: 0000000000000000 RSI: ffffffff8dba7696 RDI: ffff888106aa9cc0
[  143.228686][ T5971] RBP: ffffc90003f0f9b0 R08: ffffffff8fa39037 R09: 1ffffffff1f47206
[  143.232050][ T5971] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: ffffffff8f631a00
[  143.235442][ T5971] R13: 1ffff920007e1f40 R14: ffff888120dbb8c0 R15: dffffc0000000000
[  143.238664][ T5971]  ? xfrm_state_fini+0x26c/0x2f0
[  143.240816][ T5971]  ? xfrm_state_fini+0x26c/0x2f0
[  143.242959][ T5971]  xfrm_net_exit+0x2d/0x70
[  143.244965][ T5971]  ops_undo_list+0x49a/0x990
[  143.246845][ T5971]  ? __pfx_ops_undo_list+0x10/0x10
[  143.249040][ T5971]  ? do_raw_spin_unlock+0x4d/0x240
[  143.251239][ T5971]  cleanup_net+0x4c5/0x800
[  143.253166][ T5971]  ? __pfx_cleanup_net+0x10/0x10
[  143.255298][ T5971]  ? _raw_spin_unlock_irq+0x23/0x50
[  143.257534][ T5971]  ? process_scheduled_works+0x9ef/0x17b0
[  143.259969][ T5971]  ? process_scheduled_works+0x9ef/0x17b0
[  143.262416][ T5971]  process_scheduled_works+0xae1/0x17b0
[  143.264784][ T5971]  ? __pfx_process_scheduled_works+0x10/0x10
[  143.267280][ T5971]  worker_thread+0x8a0/0xda0
[  143.269207][ T5971]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  143.271821][ T5971]  ? __kthread_parkme+0x7b/0x200
[  143.273910][ T5971]  kthread+0x711/0x8a0
[  143.275540][ T5971]  ? __pfx_worker_thread+0x10/0x10
[  143.278222][ T5971]  ? __pfx_kthread+0x10/0x10
[  143.280846][ T5971]  ? _raw_spin_unlock_irq+0x23/0x50
[  143.282927][ T5971]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.285112][ T5971]  ? __pfx_kthread+0x10/0x10
[  143.287017][ T5971]  ret_from_fork+0x3fc/0x770
[  143.288884][ T5971]  ? __pfx_ret_from_fork+0x10/0x10
[  143.291048][ T5971]  ? __switch_to_asm+0x39/0x70
[  143.292897][ T5971]  ? __switch_to_asm+0x33/0x70
[  143.294593][ T5971]  ? __pfx_kthread+0x10/0x10
[  143.296122][ T5971]  ret_from_fork_asm+0x1a/0x30
[  143.297754][ T5971]  </TASK>
[  143.299882][ T5971] Kernel Offset: disabled
[  143.301731][ T5971] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:39:25  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003f0f030
R8 =ffff888106988237 R9 =1ffff11020d31046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8c1 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f66025733e0 CR3=000000001f97a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=76656e6567006e61 6c765f3168746576
XMM02=3132303843414d00 6e616c7670690065 XMM03=0000000000000000 0000000000000000
XMM04=0000000000ff0000 0000000000000000 XMM05=0000000000000000 00007fd70e012e53
XMM06=0000000000000000 00007fd70e012e4d XMM07=0000000000000000 00007fd70e012e61
XMM08=0000000000000000 00007fd70e012ee7 XMM09=0000000000000000 00007fd70e012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=b6edd3cbd73af400 RBX=ffffffff819683c8 RCX=b6edd3cbd73af400 RDX=0000000000000001
RSI=ffffffff8d9b8241 RDI=ffffffff8be33880 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa39030 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2fe13ff8 CR3=00000000118c8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 ffff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
