last executing test programs:

1m33.237094969s ago: executing program 2 (id=516):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$9p(r0, &(0x7f0000000100)="d5", 0x1)

1m33.166715661s ago: executing program 2 (id=519):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x1, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0xa}, 0x41}, r1, 0x1}}, 0x48)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20)

1m33.025059268s ago: executing program 2 (id=521):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x2, 0x1}, 0x2}}, 0x10)

1m32.956441496s ago: executing program 2 (id=522):
socket$igmp(0x2, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r3, &(0x7f0000000140)=r4, 0x12)

1m32.743764568s ago: executing program 2 (id=524):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100005800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0)

1m32.307240603s ago: executing program 2 (id=529):
clock_settime(0xfffffffe, &(0x7f0000000140)={0x0, 0x3938700})

1m32.277886802s ago: executing program 32 (id=529):
clock_settime(0xfffffffe, &(0x7f0000000140)={0x0, 0x3938700})

41.560967967s ago: executing program 3 (id=1146):
syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x0, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x2b}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}, @fd}, 0x0}, 0x400}], 0x0, 0x0, 0x0})
syz_io_uring_complete(r0, r1)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)

41.331076006s ago: executing program 3 (id=1150):
process_mrelease(0xffffffffffffffff, 0x2)

41.330881869s ago: executing program 3 (id=1151):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ec13060000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0xc, 'g'}]}}, 0x0}, 0x0)

39.718466168s ago: executing program 3 (id=1166):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@discard}, {@clear_cache}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f0000005600)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000001a40)={0x2020}, 0x2020)

38.782095197s ago: executing program 3 (id=1175):
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RGETLOCK(r0, &(0x7f00000002c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r0, 0x407, 0x100000)
close(0x3)

38.293647208s ago: executing program 3 (id=1178):
unshare(0x26020480)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x98})
fallocate(r0, 0x1, 0x1, 0x2)

38.083167316s ago: executing program 33 (id=1178):
unshare(0x26020480)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x98})
fallocate(r0, 0x1, 0x1, 0x2)

33.379304122s ago: executing program 4 (id=1217):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000000240 '], 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

33.378503197s ago: executing program 4 (id=1219):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a"], 0x0, 0x26}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
socket$inet(0xa, 0x1, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_targets\x00')
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

33.249367639s ago: executing program 4 (id=1221):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)

33.145625325s ago: executing program 4 (id=1222):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

33.14473838s ago: executing program 4 (id=1224):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)

31.831137463s ago: executing program 4 (id=1234):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)={0x20, 0xe, 0x5, {0xc, 0x8, ')3\r'}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

31.60471811s ago: executing program 34 (id=1234):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)={0x20, 0xe, 0x5, {0xc, 0x8, ')3\r'}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.760496822s ago: executing program 0 (id=1462):
socket(0x28, 0x4, 0xf1a)

2.679580353s ago: executing program 0 (id=1463):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18)
sendmsg$netlink(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001e40)={0x34, 0x34, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x4, 0x43}, @generic="b2ee7b1abad78bdcd08b8a164704b56052", @typed={0xc, 0x103, 0x0, 0x0, @u64=0x9}]}, 0x34}, {&(0x7f0000005e80)={0x6c8, 0x2e, 0x1, 0x70bd26, 0x10d, "", [@typed={0x8, 0x18, 0x0, 0x0, @fd}, @typed={0xa1, 0xee, 0x0, 0x0, @binary="2dc10bd69651fbaa0e6bf5bcbbbb7d156411f36ec9b1d42b2f6aa0c9e34ce8da00dd1a564a4ec1b09cf85ff3938fcf6cdc3a6c28a28f03696f90561bd2be92777e6821b454999a2c52ad5695a5c4256663026caef3f5eafb317129f5423c3af13a13b271a60ef5c17609884c45e22aa2269d09d21683f2219396d1532330394aebb52c95a9fe979059c2423c7bd6c591a4f682a4dd79374022469f1dd7"}, @nested={0x60c, 0xa3, 0x0, 0x1, [@nested={0x4, 0xaf}, @nested={0x10, 0xe9, 0x0, 0x1, [@typed={0xc, 0xca, 0x0, 0x0, @str='ip6gre0\x00'}]}, @nested={0x4, 0x92}, @nested={0x5ed, 0x12e, 0x0, 0x1, [@generic="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"]}]}]}, 0x6c8}], 0x2, 0x0, 0x0, 0x40}, 0x40000)

2.270085467s ago: executing program 5 (id=1468):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf11, &(0x7f0000001e80)="$eJzs3U9sHNX9APA3a6/txCZeAz8w8COk0IpAwQ5JpKa3IFCPiEvvoJDQCENRQw9E/Ak9ICohioQ4VRyouFAqpUitBKpUoZ7anvrn1hPqhUpVKgX10EZKXNl+b7374mHXY3t27f18pK/fvnmz8/2O13FmxrNvAzCyGqtfjx+fL0J499N3Hn35qeLXK8vuaq9xaPVrEXutEEKzo19k2/s8Lrh6+aVTG7VFOLr6NfXDY5faz50OIVwIh8JnoRU+Wlz68sP3Hjn88etTt7x1/plXdmj32/L9AACAvejiH5f+dt8//vDA3JWLB0+GyfbydHzeiv3peNx/JB4op+PlRujuFx3RaSJbbyxGI1tvLFtvPMszXpKvmW2nWbLeRI98Yx3LNtpPAAAA2I3SeW0rFI2Frn6jsbCwdt6/4vPZiWLhubNLZ84NqFAAAACgsn+/unrTrRBCCCGEqDWaQ1CDEEKIUYrl2UFfgQAAAABGTT5f2HUubO9MXe2ttfrLf+nhxsbPh21Q98+//Lsr/wev+Y0DAEB1e/VoMu1XOo5O8xjk8wiOZc/b7PF/I9vO+CbrLJtXsGt5MbwvU1n9+fd1WJXVv9nXcVDK6s/nwxxWZfXn83QOq7L6J2uuo6qy+qdqrqOqsvr31VxHVWX176+5jqrK6p+uuY6qyuqfqbmOqsrqv6HmOqoqq/9AzXVUVVb/brmttqz+Vs11VFVW/1zNdVRVVv+NNddRVVn9N9VcR1Vl9d9ccx2Dcmds0/fhYDbeef6cn9PtlnM8AAAAGHX/Nf+fEEIIcV2s3gcxBHUIsbejGIIaxFdF++99Q1CLEGLr8epArz4AAAAAwyC9LyC9AX05SuNjPcbH43uJVsen1ldI480ez5/oMT7ZYxwAAAAI4TdvnLnt7WL9ff5bnQ+vY96oa6HCPEb5RHebzb/Vec+2mn+3zFsGAADAaCm+89m1+x99/4W5KxcPnuw4+70Wz3fTPKDj8drAJ7Gf7guYyfpFOoc+2Z2nUbJefn3ghrLtPb7FHQUAAIARls7fW6FoLHScd7dCo7GwsH4+Ph+axZmzS6ePxH76fJbfzzYnV5Y/VHPdAAAAQP/Wz/c3Pv9Pn+M7HyaKhefOLp05t9afaS9vNjqvC8yuLy86rwu0suVHS5Yfi/30+Z3fm923unzh1PeXntrunQcAAIARce7F8888ubR0+gceeOCBB+0Hg/7NBAAAbLcvvnin+cNjM79de///+vx36f3/h2K/Fef2+1NcId0nkN4HcN379Z/ozjNbtt7z3eu1svXGYkxmdU91bGfFvux5c2X5Wt3bmSjJN53lm8ny5fMUjGfrp3wHsuX5/IRpvdlseT4P43iWo8jy3x0AAACg3OILzz6/eO7F8w+effbJp08/ffq5Y0dPfPvEiSMPfeuhxdX7+hc77+4HAAAAdqP1m34HXQkAAAAAAAAAAAAAAAAAAACMrjo+TmzQ+wgAAACj7l+vhhAuCCFE5VieHHwNQgghhBBC7JpY/Wz3+vM2Bn39AQAAABg9Vy+/dCqEqRDCSruBC8W25mtvrbV6RSRcu7yWN7UzD/51biXSapceHut6/v5trYZRdzX+3KW221+2/ed/c/m3/9+f/JvL/8Fr25t/Kj1orTW9f/9ll4xPVst77+LP5zvz3z7eZ/58/x+vlv9wlv/e0F/+5fez/E9Uy39fln9/n/mv2//nq+W/P+afj/3D9/Sbv/v1n4xt2o99feb/Zrb/T4V+82f73+ozYeaBmB8ARtFevQEgHSWk4+jp2E/7Gw83w1j2vM0e/zey7YxvufLu7abjoFtjPx0vzWR5k83WP51t74aKdebyuoZVWf3b9TrutLL6mzXXUVVZ/RM111FVWf2TNddRVVn9UzXXUVVZ/f2ehw5aWf275bpyWf3TNddRVVn9MzXXUVVZ/Zv9f3xQyuo/UHMdVZXVP1tzHVWV1V/xslrtyuqfq7mOqsrqv7HmOqoqq/+mmuuoqqz+m2uuY1DuiG3Z+XA6/5yNY6nfyvqTG3wv9+q1BQAAANht/jmy8//FKx0Dr0MIIYQQuzWmhv1YItmR7Y/v8PZF3fGf5TWDrkMIsXOxvFz3FQeGyc6+mxmAYeX3/2jz+o82r/9o8/rzVdI9/EXWT8Z6jI/3GG/2GJ/IxvOf18ke4zdl211O1zWjm3uM/1+P8QM9xm/tMT7fY/y2HuO39xi/o8c4AAAAo+GW2Do/BAAAgL3r5V988uav7n3i8tyViwdPhonr5p0/EvuT8W/rb8R+Pu990ox/8/9R7P8str+L7d+z9d1/AgAAADsvfU6Mv/8DAADA3pU+p9T5PwAAAOxdc7F1/g8AAAB7142xdf4PAAAAe1gxtfHi2KbrAnfHtt95/QCA4ff/sb0ztgdje1dsvxbbdBxwT2y/XlN9AMD2+el3f3zi7WJ9vv9j2fjVuDy117mwdqWgaHTP5L8vtvtj+40+68k/D6Df/MmBPvPsVP7ZLeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPaOxurX48fnixDe/fSdR38y8eafV5bd1V7j0OrXIvZaIYRm+3lpdL3/y7ji1csvnepsr8W2CEdDEYr28vDYpXam6RDChXAofBZa4aPFpS8/fO+Rwx+/PnXLW+efeWUHvwVd+wcAAAB70f8CAAD///o5H8E=")
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)

2.050192145s ago: executing program 5 (id=1470):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @broadcast}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2, 0x7}, @val={0x5, 0x3, {0x7, 0xf, 0x9}}, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0xfd, 0x0, 0x19, 0x6}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0x0]}]]}, 0x78}}, 0x0)

1.800997403s ago: executing program 5 (id=1472):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105da, &(0x7f0000032680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0)

1.232138292s ago: executing program 0 (id=1481):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x8)
fchdir(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d)
rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00')

1.091006062s ago: executing program 5 (id=1483):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9, 0x324}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000)

957.749777ms ago: executing program 0 (id=1484):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004841}, 0x80)

858.9791ms ago: executing program 0 (id=1485):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000020000100fefeff7f000000000a8000fc0000000304000000140003006c6f0000000000000000000000000000140001"], 0x44}}, 0x0)

800.791601ms ago: executing program 0 (id=1487):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}})

630.950314ms ago: executing program 1 (id=1490):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1}, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')

578.417493ms ago: executing program 1 (id=1491):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000680)={@local, @broadcast})

578.255342ms ago: executing program 1 (id=1492):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x13)

469.350055ms ago: executing program 1 (id=1493):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$9p_unix(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000280), 0x2000000, &(0x7f00000003c0)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x800}}]}})

469.005104ms ago: executing program 1 (id=1494):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x12}, 0xb}], 0x12, 0x40000021, 0x0)

377.492672ms ago: executing program 5 (id=1495):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
lseek(r0, 0x0, 0x1)

320.54883ms ago: executing program 5 (id=1496):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)

0s ago: executing program 1 (id=1497):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f00000007c0)={0x0, 0xf}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0})

kernel console output (not intermixed with test programs):

ing mode
[  133.687970][ T7505] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  133.716118][ T7049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.730956][ T7505] EXT4-fs (loop1): 1 truncate cleaned up
[  133.738949][ T7505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.773479][ T7500] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  133.817139][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.847765][ T7500] XFS (loop0): Ending clean mount
[  133.958838][ T5621] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  134.154191][ T7530] set_capacity_and_notify: 2 callbacks suppressed
[  134.154206][ T7530] loop1: detected capacity change from 0 to 512
[  134.325405][ T7535] loop3: detected capacity change from 0 to 4096
[  134.336915][ T7535] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  134.432966][ T7535] ntfs3(loop3): ino=1a, mi_enum_attr
[  134.442186][ T7535] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  134.464178][ T7535] ntfs3(loop3): ino=1a, mi_enum_attr
[  134.470176][ T7535] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  134.720789][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'.
[  135.088026][ T7543] bridge0: port 3(netdevsim0) entered blocking state
[  135.091471][ T7543] bridge0: port 3(netdevsim0) entered disabled state
[  135.097741][ T7543] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  135.118158][ T7543] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  135.123734][ T7543] bridge0: port 3(netdevsim0) entered blocking state
[  135.127874][ T7543] bridge0: port 3(netdevsim0) entered forwarding state
[  135.431956][ T5630] Bluetooth: hci1: adv larger than maximum supported
[  135.635721][ T7566] loop0: detected capacity change from 0 to 512
[  135.688301][ T7566] fscrypt (loop0, inode 2): Error -61 getting encryption context
[  135.710097][ T7566] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61
[  135.717296][ T7566] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #13: comm syz.0.707: iget: bad i_size value: 12154757448730
[  135.729257][ T7566] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  135.729613][ T7566] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.707: couldn't read orphan inode 13 (err -117)
[  135.737887][ T7566] loop0: lost filesystem error report for type 5 error -117
[  135.739079][    C1] EXT4-fs (loop0): error count since last fsck: 2
[  135.743245][    C1] EXT4-fs (loop0): initial error at time 1778610016: ext4_orphan_get:1397: inode 13
[  135.745959][    C1] EXT4-fs (loop0): last error at time 1778610016: ext4_orphan_get:1402
[  135.746471][ T7566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.794407][   T33] audit: type=1326 audit(1778610016.888:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.3.706" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f1d19cdd9 code=0x0
[  136.008898][ T7566] fscrypt (loop0, inode 2): Error -61 getting encryption context
[  136.064837][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.206063][ T7578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.709'.
[  136.487288][ T7592] loop0: detected capacity change from 0 to 512
[  136.545685][ T7598] tmpfs: Bad value for 'mpol'
[  136.557407][ T7592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  136.563141][ T7592] ext4 filesystem being mounted at /212/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  136.832376][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  137.750547][  T992] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  137.902038][  T992] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  137.906151][  T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.918348][  T992] usb 4-1: config 0 descriptor??
[  137.926100][  T992] gspca_main: sunplus-2.14.0 probing 055f:c420
[  138.332941][  T992] gspca_sunplus: reg_w_riv err -71
[  138.340285][  T992] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  138.355208][  T992] usb 4-1: USB disconnect, device number 4
[  138.363651][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'.
[  138.402392][ T7661] loop1: detected capacity change from 0 to 1024
[  138.428371][ T7663] loop0: detected capacity change from 0 to 1024
[  138.434248][ T7663] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  138.440856][ T7663] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  138.446729][ T7663] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  138.450663][ T7663] EXT4-fs (loop0): orphan cleanup on readonly fs
[  138.455120][ T7663] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #3: block 3: comm syz.0.736: lblock 3 mapped to illegal pblock 3 (length 1)
[  138.460891][ T7663] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  138.463801][ T7663] Quota error (device loop0): write_blk: dquota write failed
[  138.470293][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  138.470308][    C1] EXT4-fs (loop0): initial error at time 1778610019: ext4_map_blocks:833: inode 3: block 3
[  138.470326][    C1] EXT4-fs (loop0): last error at time 1778610019: ext4_map_blocks:833: inode 3: block 3
[  138.483102][ T7663] Quota error (device loop0): find_free_dqentry: Can't write quota data block 3
[  138.486404][ T7663] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  138.490642][ T7663] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.736: Failed to acquire dquot type 0
[  138.494105][ T7663] loop0: lost filesystem error report for type 5 error -117
[  138.494496][ T7663] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 3: comm syz.0.736: lblock 3 mapped to illegal pblock 3 (length 1)
[  138.501067][ T7663] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  138.504376][ T7663] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  138.520152][ T7663] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.736: Failed to acquire dquot type 0
[  138.523798][ T7663] loop0: lost filesystem error report for type 5 error -117
[  138.524126][ T7663] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.736: Freeing blocks not in datazone - block = 0, count = 4096
[  138.534195][ T7663] loop0: lost filesystem error report for type 5 error -117
[  138.537663][ T7663] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 3: comm syz.0.736: lblock 3 mapped to illegal pblock 3 (length 1)
[  138.543377][ T7666] openvswitch: netlink: Message has 1 unknown bytes.
[  138.547377][ T7663] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  138.547999][ T7666] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.549842][ T7663] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  138.558014][ T7663] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.736: Failed to acquire dquot type 0
[  138.562336][ T7663] loop0: lost filesystem error report for type 5 error -117
[  138.567071][ T7663] EXT4-fs (loop0): 1 orphan inode deleted
[  138.577960][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  138.584420][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  138.592797][ T7663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  138.632427][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.976787][ T7690] loop1: detected capacity change from 0 to 256
[  138.985485][ T7690] exfat: Deprecated parameter 'namecase'
[  138.997378][ T7690] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d)
[  139.030088][ T5802] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  139.128963][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'.
[  139.145178][ T7695] bond3 (unregistering): Released all slaves
[  139.201048][ T5802] usb 1-1: Using ep0 maxpacket: 16
[  139.203471][ T5802] usb 1-1: too many configurations: 97, using maximum allowed: 8
[  139.212666][ T5802] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  139.219291][ T5802] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  139.224274][ T5802] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  139.227984][ T5802] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  139.232694][ T5802] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  139.236297][ T5802] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  139.240623][ T5802] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  139.245121][ T5802] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1
[  139.267847][ T5802] usb 1-1: string descriptor 0 read error: -71
[  139.272657][ T5802] usb 1-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c
[  139.278484][ T5802] usb 1-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224
[  139.285982][   T33] audit: type=1326 audit(1778610020.378:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.1.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c5b9cdd9 code=0x7ffc0000
[  139.291632][ T5802] usb 1-1: rejected 8 configurations due to insufficient available bus power
[  139.298422][ T5802] usb 1-1: no configuration chosen from 8 choices
[  139.301440][   T33] audit: type=1326 audit(1778610020.378:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.1.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c5b9cdd9 code=0x7ffc0000
[  139.301469][   T33] audit: type=1326 audit(1778610020.378:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.1.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c5b9cdd9 code=0x7ffc0000
[  139.301491][   T33] audit: type=1326 audit(1778610020.388:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7697 comm="syz.1.752" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c5b9cdd9 code=0x7ffc0000
[  139.331720][ T5802] usb 1-1: USB disconnect, device number 9
[  139.876456][ T7702] xt_hashlimit: size too large, truncated to 1048576
[  140.352222][ T7724] binder: 7723:7724 ioctl c0306201 0 returned -14
[  140.442028][ T7735] loop1: detected capacity change from 0 to 164
[  140.752105][ T7754] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.777'.
[  140.899306][  T797] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  141.050681][ T7772] loop3: detected capacity change from 0 to 4096
[  141.057558][ T7772] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  141.075210][  T797] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.084664][  T797] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  141.096398][  T797] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  141.102218][  T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.108737][  T797] usb 2-1: Product: syz
[  141.111025][ T7772] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  141.113449][  T797] usb 2-1: Manufacturer: syz
[  141.116890][  T797] usb 2-1: SerialNumber: syz
[  141.208354][ T7781] rdma_op ffff88816ea4e1f0 conn xmit_rdma 0000000000000000
[  141.339500][  T797] usb 2-1: 0:1 : does not exist
[  141.344283][  T797] usb 2-1: unit 0 not found!
[  141.413486][  T797] usb 2-1: USB disconnect, device number 7
[  141.900143][ T7808] loop0: detected capacity change from 0 to 4096
[  141.906632][ T7808] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec018, mo2=0103]
[  141.911574][ T7808] System zones: 0-5
[  141.922340][ T7808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.980036][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.280850][ T7812] loop1: detected capacity change from 0 to 32768
[  142.291549][ T7812] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.798 (7812)
[  142.315467][ T7812] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  142.323293][ T7812] BTRFS info (device loop1): using sha256 checksum algorithm
[  142.404968][ T7812] BTRFS info (device loop1): allowing degraded mounts
[  142.411800][ T7812] BTRFS info (device loop1): enabling ssd optimizations
[  142.416260][ T7812] BTRFS info (device loop1): turning on async discard
[  142.424274][ T7812] BTRFS info (device loop1): enabling free space tree
[  142.435903][ T7812] BTRFS info (device loop1): force lzo compression, level 1
[  142.451220][ T7812] BTRFS info (device loop1): max_inline set to 4096
[  142.546026][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.804'.
[  142.574383][ T7840] vim2m vim2m.0: vidioc_s_fmt queue busy
[  142.580491][ T7812] BTRFS critical (device loop1 state E): emergency shutdown
[  142.607008][ T5446] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.610609][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.804'.
[  142.617094][ T5446] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.622986][ T5446] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.633549][ T5446] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.687024][ T5618] BTRFS info (device loop1 state E): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  142.841006][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'.
[  143.084032][ T7861] loop0: detected capacity change from 0 to 512
[  143.132689][ T7861] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  143.178349][ T7861] EXT4-fs (loop0): 1 truncate cleaned up
[  143.210355][ T7861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.281387][ T7873] openvswitch: netlink: nsh attr 73 is out of range max 3
[  143.321830][ T7871] loop3: detected capacity change from 0 to 2048
[  143.354037][ T7876] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.386810][ T7871] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=0, rec_len=16, name_len=8
[  143.397515][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.404834][ T7871] Remounting filesystem read-only
[  143.621129][  T992] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  143.635841][   T33] kauditd_printk_skb: 591 callbacks suppressed
[  143.635854][   T33] audit: type=1326 audit(1778610024.728:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.3.825" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f1d19cdd9 code=0x7ffc0000
[  143.648025][   T33] audit: type=1326 audit(1778610024.748:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.3.825" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f1d19cdd9 code=0x7ffc0000
[  143.657716][   T33] audit: type=1326 audit(1778610024.758:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.3.825" exe="/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f2f1d19cdd9 code=0x7ffc0000
[  143.668604][   T33] audit: type=1326 audit(1778610024.758:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.3.825" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f1d19cdd9 code=0x7ffc0000
[  143.678002][   T33] audit: type=1326 audit(1778610024.758:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7885 comm="syz.3.825" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f1d19cdd9 code=0x7ffc0000
[  143.710730][  T797] usb 1-1: new low-speed USB device number 10 using dummy_hcd
[  143.769625][  T992] usb 2-1: Using ep0 maxpacket: 16
[  143.775062][  T992] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  143.783882][  T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  143.793578][  T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 12336, setting to 1024
[  143.801707][  T992] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  143.807175][  T992] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  143.816613][  T992] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  143.820571][  T992] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  143.823714][  T992] usb 2-1: Manufacturer: syz
[  143.834313][  T992] usb 2-1: config 0 descriptor??
[  143.861657][  T797] usb 1-1: unable to get BOS descriptor or descriptor too short
[  143.871046][  T797] usb 1-1: config 245 has an invalid interface number: 221 but max is 0
[  143.879217][  T797] usb 1-1: config 245 has no interface number 0
[  143.883219][  T797] usb 1-1: config 245 interface 221 altsetting 1 endpoint 0x6 is Bulk; changing to Interrupt
[  143.892182][  T797] usb 1-1: config 245 interface 221 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0
[  143.898752][  T797] usb 1-1: config 245 interface 221 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 8
[  143.907281][  T797] usb 1-1: config 245 interface 221 altsetting 1 endpoint 0x4 has invalid maxpacket 32, setting to 8
[  143.916880][  T797] usb 1-1: config 245 interface 221 has no altsetting 0
[  143.922405][  T797] usb 1-1: string descriptor 0 read error: -22
[  143.924979][  T797] usb 1-1: New USB device found, idVendor=05da, idProduct=80a3, bcdDevice=b2.28
[  143.928463][  T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.942831][  T797] usb 1-1: can only deal with bulk endpoints; endpoint 6 is not bulk.
[  143.952352][  T797] usb 1-1: can only deal with bulk endpoints; endpoint 1 is not bulk.
[  143.956849][  T797] usb 1-1: can only deal with bulk endpoints; endpoint 4 is not bulk.
[  143.961669][  T797] usb 1-1: couldn't find two input bulk endpoints. Bailing out.
[  144.099188][  T992] rc_core: IR keymap rc-hauppauge not found
[  144.102367][  T992] Registered IR keymap rc-empty
[  144.108832][  T992] mceusb 2-1:0.0: Error: mce write urb status = -71
[  144.131130][  T992] mceusb 2-1:0.0: Error: mce write urb status = -71
[  144.181159][  T797] usb 1-1: USB disconnect, device number 10
[  144.182663][  T992] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  144.222221][  T992] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5
[  144.261456][  T992] mceusb 2-1:0.0: Error: mce write urb status = -71
[  144.283408][  T992] mceusb 2-1:0.0: Error: mce write urb status = -71
[  144.304935][  T992] mceusb 2-1:0.0: Error: mce write urb status = -71
[  144.321133][  T992] mceusb 2-1:0.0: Error: mce write urb status = -71
[  144.342423][  T992] mceusb 2-1:0.0: Error: mce write urb status = -71
[  144.384170][  T992] mceusb 2-1:0.0: Error: mce write urb status = -71
[  144.400764][  T992] mceusb 2-1:0.0: Error: mce write urb status = -71
[  144.420016][  T992] mceusb 2-1:0.0: Error: mce write urb status = -71
[  144.440950][  T992] mceusb 2-1:0.0: Error: mce write urb status = -71
[  144.460556][  T992] mceusb 2-1:0.0: Error: mce write urb status = -71
[  144.485372][  T992] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  144.488810][  T992] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  144.557575][  T992] usb 2-1: USB disconnect, device number 8
[  145.233370][ T7905] xt_ecn: cannot match TCP bits for non-tcp packets
[  145.453307][ T7913] erspan0: entered promiscuous mode
[  145.474745][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'.
[  145.754187][ T7931] cgroup: noprefix used incorrectly
[  145.836104][   T33] audit: type=1326 audit(1778610026.928:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.3.847" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f1d19cdd9 code=0x0
[  145.962290][ T7944] loop1: detected capacity change from 0 to 128
[  146.001021][ T7944] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  146.021242][ T7944] ext4 filesystem being mounted at /321/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  146.066018][ T5618] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  146.105933][ T7941] loop0: detected capacity change from 0 to 32768
[  146.196228][ T7947] macsec1: entered promiscuous mode
[  146.198448][ T7947] bridge0: entered promiscuous mode
[  146.709591][ T7967] netlink: 'syz.3.861': attribute type 1 has an invalid length.
[  146.739707][ T7967] bond1: entered promiscuous mode
[  146.743923][ T7967] 8021q: adding VLAN 0 to HW filter on device bond1
[  146.770157][ T7967] 8021q: adding VLAN 0 to HW filter on device bond1
[  146.772418][ T7967] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  146.775396][ T7967] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  146.795914][ T7967] bond1: (slave vcan1): making interface the new active one
[  146.804270][ T7967] vcan1: entered promiscuous mode
[  146.814608][ T7967] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  146.908152][ T7968] loop0: detected capacity change from 0 to 32768
[  146.917047][ T7968] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.862 (7968)
[  146.952908][ T7968] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.966691][ T7968] BTRFS info (device loop0): using sha256 checksum algorithm
[  147.016173][ T7968] BTRFS info (device loop0): enabling ssd optimizations
[  147.018934][ T7968] BTRFS info (device loop0): turning on async discard
[  147.021927][ T7968] BTRFS info (device loop0): enabling free space tree
[  147.060175][ T5621] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.205909][ T8002] netlink: 'syz.0.865': attribute type 1 has an invalid length.
[  147.211442][ T8002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  147.216787][ T8002] IPv6: NLM_F_CREATE should be set when creating new route
[  147.248873][ T8002] netlink: 'syz.0.865': attribute type 1 has an invalid length.
[  147.254618][ T8002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  147.417576][ T8010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.869'.
[  147.662176][ T8030] loop1: detected capacity change from 0 to 128
[  147.665699][ T8030] EXT4-fs: Ignoring removed nobh option
[  147.714836][ T8030] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  147.718822][ T8030] ext4 filesystem being mounted at /332/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  147.749848][ T5618] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  148.077571][ T8052] loop0: detected capacity change from 0 to 2048
[  148.100054][ T8052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.126065][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.241376][ T8044] loop3: detected capacity change from 0 to 32768
[  148.279885][ T8044] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  148.289380][  T797] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  148.311831][ T8044] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  148.323812][ T8044] XFS (loop3): Starting recovery (logdev: internal)
[  148.351311][ T8044] XFS (loop3): Ending recovery (logdev: internal)
[  148.385474][ T7049] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  148.439508][  T797] usb 2-1: Using ep0 maxpacket: 16
[  148.447385][  T797] usb 2-1: config 0 has no interfaces?
[  148.457673][  T797] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  148.466132][  T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.474573][  T797] usb 2-1: Product: syz
[  148.481552][  T797] usb 2-1: Manufacturer: syz
[  148.486591][  T797] usb 2-1: SerialNumber: syz
[  148.497658][  T797] usb 2-1: config 0 descriptor??
[  148.906585][ T8090] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  149.705815][ T8099] syzkaller1: tun_chr_ioctl cmd 1074025677
[  149.712740][ T8099] syzkaller1: linktype set to 768
[  149.868341][ T8109] loop0: detected capacity change from 0 to 4096
[  149.896384][ T8109] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  149.995495][ T8113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.911'.
[  150.681262][ T8138] overlay: filesystem on ./file1 not supported
[  151.086491][ T5802] usb 2-1: USB disconnect, device number 9
[  151.890879][ T8148] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  151.893590][ T8148] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  151.914449][ T8148] vhci_hcd vhci_hcd.0: Device attached
[  151.925665][ T8149] vhci_hcd: connection closed
[  151.951450][ T5699] vhci_hcd vhci_hcd.1: stop threads
[  151.965861][ T5699] vhci_hcd vhci_hcd.1: release socket
[  151.978765][ T5699] vhci_hcd vhci_hcd.1: disconnect device
[  151.989126][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'.
[  152.003447][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.031445][ T8154] bridge_slave_1 (unregistering): left allmulticast mode
[  152.037474][ T8154] bridge_slave_1 (unregistering): left promiscuous mode
[  152.047020][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.050619][   T33] audit: type=1326 audit(1778610033.138:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8153 comm="syz.3.929" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f1d19cdd9 code=0x0
[  152.098094][ T8144] loop0: detected capacity change from 0 to 32768
[  152.108015][ T8144] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.925 (8144)
[  152.142407][ T8144] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  152.146417][ T8144] BTRFS info (device loop0): using sha256 checksum algorithm
[  152.211933][ T8144] BTRFS info (device loop0): enabling ssd optimizations
[  152.214669][ T8144] BTRFS info (device loop0): turning on async discard
[  152.217376][ T8144] BTRFS info (device loop0): enabling free space tree
[  152.251866][ T5621] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  152.524031][ T8179] loop0: detected capacity change from 0 to 512
[  152.541243][ T8179] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  152.580187][ T8179] EXT4-fs (loop0): 1 truncate cleaned up
[  152.596056][ T8179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.614315][ T8179] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.933: Logical block already allocated
[  152.633437][ T8179] EXT4-fs (loop0): Remounting filesystem read-only
[  152.663957][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.874155][ T8194] netlink: 'syz.0.939': attribute type 6 has an invalid length.
[  152.882432][ T8194] netlink: 232 bytes leftover after parsing attributes in process `syz.0.939'.
[  152.894504][ T8194] netlink: 5252 bytes leftover after parsing attributes in process `syz.0.939'.
[  153.257707][ T8205] 8021q: adding VLAN 0 to HW filter on device bond1
[  153.292038][ T5699] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  153.296060][ T5699] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  153.307454][ T5699] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  153.315821][ T5699] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.213416][ T8270] loop0: detected capacity change from 0 to 2048
[  154.267172][ T8285] loop3: detected capacity change from 0 to 2048
[  154.278531][ T8270] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.315803][ T8286] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.377702][ T8244] loop1: detected capacity change from 0 to 32768
[  154.395989][ T8285] NILFS (loop3): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  154.400588][ T8285] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16)
[  154.419916][ T8285] Remounting filesystem read-only
[  154.429692][ T8285] NILFS (loop3): error -5 truncating bmap (ino=16)
[  154.473386][ T8244]  loop1: p1 p3 < >
[  154.477008][ T7049] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  154.491932][ T8290] netlink: 35 bytes leftover after parsing attributes in process `syz.0.954'.
[  154.498353][ T8290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.954'.
[  154.606632][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.958'.
[  154.623947][ T5933] udevd[5933]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  154.766181][ T8302] xfrm1: entered allmulticast mode
[  155.119751][ T8310] overlayfs: overlapping lowerdir path
[  155.143601][ T8267] Bluetooth: hci3: Frame reassembly failed (-84)
[  155.154850][ T8310] loop1: detected capacity change from 0 to 256
[  155.207791][ T8310] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x726cdf83, utbl_chksum : 0xe619d30d)
[  156.442804][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.971'.
[  156.655132][   T33] audit: type=1326 audit(1778610037.748:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8346 comm="syz.1.977" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2c5b9cdd9 code=0x0
[  156.933783][ T8363] loop0: detected capacity change from 0 to 764
[  157.010843][   T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  157.129760][ T4999] Bluetooth: hci3: command 0xfc11 tx timeout
[  157.134994][ T5630] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[  157.189148][   T31] usb 2-1: Using ep0 maxpacket: 8
[  157.201154][   T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  157.205231][   T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  157.212803][   T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  157.216716][   T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  157.222003][   T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  157.225580][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.447583][   T31] usb 2-1: GET_CAPABILITIES returned 0
[  157.452671][   T31] usbtmc 2-1:16.0: can't read capabilities
[  157.674871][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  157.682761][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  157.682795][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  157.682813][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  157.682831][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  157.682848][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  157.682865][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  157.683064][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  157.683085][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  157.683102][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  157.683119][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  157.683136][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  157.683153][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  157.685984][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  157.686009][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  157.686028][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  157.692610][ T5677] usb 2-1: USB disconnect, device number 10
[  157.778222][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'.
[  158.079192][ T5077] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  158.209304][   T31] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  158.229168][ T5077] usb 1-1: Using ep0 maxpacket: 16
[  158.233507][ T5077] usb 1-1: config index 0 descriptor too short (expected 52, got 36)
[  158.236711][ T5077] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.242141][ T5077] usb 1-1: config 0 has no interfaces?
[  158.248120][ T5077] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  158.251678][ T5077] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.254574][ T5077] usb 1-1: Product: syz
[  158.256105][ T5077] usb 1-1: Manufacturer: syz
[  158.257703][ T5077] usb 1-1: SerialNumber: syz
[  158.262679][ T5077] usb 1-1: config 0 descriptor??
[  158.366164][   T31] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  158.369989][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.373164][   T31] usb 4-1: Product: syz
[  158.374767][   T31] usb 4-1: Manufacturer: syz
[  158.376459][   T31] usb 4-1: SerialNumber: syz
[  158.382085][   T31] usb 4-1: config 0 descriptor??
[  158.483877][ T8381] loop0: detected capacity change from 0 to 256
[  158.524177][ T8381] FAT-fs (loop0): Directory bread(block 64) failed
[  158.527618][ T8381] FAT-fs (loop0): Directory bread(block 65) failed
[  158.531232][ T8381] FAT-fs (loop0): Directory bread(block 66) failed
[  158.533254][ T8381] FAT-fs (loop0): Directory bread(block 67) failed
[  158.535426][ T8381] FAT-fs (loop0): Directory bread(block 68) failed
[  158.537475][ T8381] FAT-fs (loop0): Directory bread(block 69) failed
[  158.540403][ T8381] FAT-fs (loop0): Directory bread(block 70) failed
[  158.542456][ T8381] FAT-fs (loop0): Directory bread(block 71) failed
[  158.544490][ T8381] FAT-fs (loop0): Directory bread(block 72) failed
[  158.546649][ T8381] FAT-fs (loop0): Directory bread(block 73) failed
[  158.570756][ T5677] usb 1-1: USB disconnect, device number 11
[  158.593899][   T31] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  159.148584][ T8389] loop0: detected capacity change from 0 to 512
[  159.157883][ T8389] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  159.172288][ T8389] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.997: iget: bad i_size value: 38620345925642
[  159.177119][ T8389] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  159.177517][ T8389] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.997: couldn't read orphan inode 15 (err -117)
[  159.181060][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  159.181078][    C0] EXT4-fs (loop0): initial error at time 1778610040: ext4_orphan_get:1397: inode 15
[  159.181101][    C0] EXT4-fs (loop0): last error at time 1778610040: ext4_orphan_get:1397: inode 15
[  159.195450][ T8389] loop0: lost filesystem error report for type 5 error -117
[  159.200958][ T8389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.271997][ T8389] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.997: bg 0: block 5: invalid block bitmap
[  159.280609][ T8389] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 936 with error 28
[  159.285237][ T8389] EXT4-fs (loop0): This should not happen!! Data will be lost
[  159.285237][ T8389] 
[  159.288752][ T8389] EXT4-fs (loop0): Total free blocks count 0
[  159.291454][ T8389] EXT4-fs (loop0): Free/Dirty block details
[  159.293217][ T8389] EXT4-fs (loop0): free_blocks=0
[  159.294795][ T8389] EXT4-fs (loop0): dirty_blocks=936
[  159.296317][ T8389] EXT4-fs (loop0): Block reservation details
[  159.298019][ T8389] EXT4-fs (loop0): i_reserved_data_blocks=936
[  159.326089][ T5621] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  159.332754][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.453419][ T8398] loop0: detected capacity change from 0 to 764
[  159.488390][ T8398] Symlink component flag not implemented
[  159.495128][ T8398] Symlink component flag not implemented (15)
[  159.643731][ T8404] netlink: 'syz.0.1003': attribute type 5 has an invalid length.
[  159.709612][ T8406] binder: 8405:8406 ioctl c0306201 0 returned -14
[  159.864963][ T8413] loop0: detected capacity change from 0 to 128
[  159.889876][ T8413] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  159.894881][ T8413] ext4 filesystem being mounted at /348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  159.948749][ T5621] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  160.026217][ T8416] loop0: detected capacity change from 0 to 1024
[  160.031168][ T8416] EXT4-fs: inline encryption not supported
[  160.034903][ T8416] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  160.052554][ T8416] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.1008: Freeing blocks not in datazone - block = 0, count = 4096
[  160.057882][ T8416] loop0: lost filesystem error report for type 5 error -117
[  160.060048][ T8416] EXT4-fs (loop0): Remounting filesystem read-only
[  160.065648][ T8416] EXT4-fs (loop0): 1 orphan inode deleted
[  160.071467][ T8416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.080490][ T8272] EXT4-fs (loop0): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  160.084375][ T8272] Quota error (device loop0): write_blk: dquota write failed
[  160.087377][ T8272] Quota error (device loop0): remove_free_dqentry: Can't write block (2) with free entries
[  160.091841][ T8272] EXT4-fs (loop0): Quota write (off=2048, len=1024) cancelled because transaction is not started
[  160.095932][ T8272] Quota error (device loop0): write_blk: dquota write failed
[  160.098842][ T8272] Quota error (device loop0): free_dqentry: Can't move quota data block (2) to free list
[  160.103532][ T8272] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[  160.107558][ T8272] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  160.125587][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.314746][ T8423] netlink: 'syz.0.1011': attribute type 15 has an invalid length.
[  160.317923][ T8423] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1011'.
[  160.379761][ T8425] syz.0.1012 uses obsolete (PF_INET,SOCK_PACKET)
[  160.524670][ T5077] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0
[  160.527527][ T5077] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0
[  160.534804][ T5077] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0
[  160.537580][ T5077] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0
[  160.542618][ T5077] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0
[  160.547932][ T5077] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0
[  160.551423][ T5077] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0
[  160.554477][ T5077] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0
[  160.557357][ T5077] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0
[  160.562804][ T5077] hid-generic 0006:0008:0008.0003: unknown main item tag 0x0
[  160.586298][ T5077] hid-generic 0006:0008:0008.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1
[  160.623671][   T31] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  160.634906][   T31] usb 4-1: USB disconnect, device number 5
[  160.788446][ T8438] trusted_key: encrypted_key: keylen parameter is missing
[  161.116260][ T8440] loop1: detected capacity change from 0 to 32768
[  161.121864][ T8440] BTRFS error: invalid value 0 for thread_pool
[  161.263153][ T8453] : renamed from vlan0 (while UP)
[  161.458329][ T8466] netlink: 'syz.0.1028': attribute type 7 has an invalid length.
[  161.491429][ T8466] netlink: 'syz.0.1028': attribute type 8 has an invalid length.
[  161.499672][ T8461] netlink: 'syz.0.1028': attribute type 7 has an invalid length.
[  161.504685][ T8461] netlink: 'syz.0.1028': attribute type 8 has an invalid length.
[  161.564505][ T8470] loop0: detected capacity change from 0 to 512
[  161.585668][ T8470] EXT4-fs warning (device loop0): ext4_multi_mount_protect:314: fsck is running on the filesystem
[  161.596706][ T8470] EXT4-fs warning (device loop0): ext4_multi_mount_protect:314: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4
[  164.031415][ T8489] netlink: 'syz.1.1040': attribute type 1 has an invalid length.
[  164.036416][ T8489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1040'.
[  164.282643][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1048'.
[  164.488259][ T8521] loop3: detected capacity change from 0 to 256
[  164.704706][ T8535] loop0: detected capacity change from 0 to 512
[  164.725549][ T8535] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  164.734587][ T8535] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1063: invalid indirect mapped block 2683928664 (level 1)
[  164.765889][ T8535] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  164.769084][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  164.773714][    C0] EXT4-fs (loop0): initial error at time 1778610045: ext4_free_branches:1023: inode 13
[  164.777091][    C0] EXT4-fs (loop0): last error at time 1778610045: ext4_free_branches:1023: inode 13
[  164.796332][ T8535] EXT4-fs (loop0): Remounting filesystem read-only
[  164.805814][ T8535] EXT4-fs (loop0): 1 truncate cleaned up
[  164.810570][ T8535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.862889][ T8535] EXT4-fs (loop0): can't enable nombcache during remount
[  164.936771][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.102183][ T8554] loop0: detected capacity change from 0 to 8192
[  165.534083][ T8561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1074'.
[  165.566112][ T8561] veth5: entered allmulticast mode
[  166.343781][ T8580] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  166.463396][ T8589] dlm: no locking on control device
[  166.674084][ T8591] loop1: detected capacity change from 0 to 32768
[  166.685803][ T8591] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1087 (8591)
[  166.709761][ T8591] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  166.714792][ T8591] BTRFS info (device loop1): using sha256 checksum algorithm
[  166.748898][ T8609] netlink: 'syz.3.1093': attribute type 4 has an invalid length.
[  166.807193][ T8591] BTRFS info (device loop1): enabling ssd optimizations
[  166.813640][ T8591] BTRFS info (device loop1): turning on async discard
[  166.823787][ T8591] BTRFS info (device loop1): enabling free space tree
[  166.882731][ T5618] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  167.022181][ T8596] loop0: detected capacity change from 0 to 40427
[  167.078499][ T8596] F2FS-fs (loop0): invalid crc value
[  167.413423][ T8596] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  167.441637][  T797] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  167.449413][ T8596] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  167.619553][  T797] usb 2-1: Using ep0 maxpacket: 32
[  167.628270][  T797] usb 2-1: unable to get BOS descriptor or descriptor too short
[  167.634277][  T797] usb 2-1: config 1 interface 0 altsetting 58 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  167.639287][  T797] usb 2-1: config 1 interface 0 has no altsetting 0
[  167.649796][  T797] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.40
[  167.656250][  T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.661143][  T797] usb 2-1: Product: syz
[  167.662895][  T797] usb 2-1: Manufacturer: syz
[  167.664825][  T797] usb 2-1: SerialNumber: syz
[  167.733310][ T5621] syz-executor: attempt to access beyond end of device
[  167.733310][ T5621] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  167.744817][ T5621] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  167.744840][ T5621] Tainted: [L]=SOFTLOCKUP
[  167.744844][ T5621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.744852][ T5621] Call Trace:
[  167.744858][ T5621]  <TASK>
[  167.744864][ T5621]  dump_stack_lvl+0xe8/0x150
[  167.744885][ T5621]  f2fs_stop_checkpoint+0x3c7/0x590
[  167.744911][ T5621]  f2fs_write_end_io+0x1274/0x1740
[  167.744943][ T5621]  __submit_merged_bio+0x256/0x6a0
[  167.744963][ T5621]  __submit_merged_write_cond+0x3c9/0x4e0
[  167.744983][ T5621]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  167.745015][ T5621]  f2fs_write_data_pages+0x287e/0x34f0
[  167.745031][ T5621]  ? unwind_next_frame+0xa6/0x2550
[  167.745075][ T5621]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  167.745089][ T5621]  ? is_bpf_text_address+0x26/0x2b0
[  167.745112][ T5621]  ? arch_stack_walk+0xfb/0x150
[  167.745170][ T5621]  ? add_lock_to_list+0xc7/0x100
[  167.745193][ T5621]  ? lockdep_unlock+0x5d/0xd0
[  167.745204][ T5621]  ? __lock_acquire+0x146e/0x2cf0
[  167.745239][ T5621]  ? do_raw_spin_lock+0x12b/0x2f0
[  167.745265][ T5621]  ? do_raw_spin_unlock+0x4d/0x210
[  167.745284][ T5621]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  167.745301][ T5621]  do_writepages+0x32e/0x550
[  167.745323][ T5621]  ? do_raw_spin_unlock+0x4d/0x210
[  167.745343][ T5621]  filemap_fdatawrite+0x1e9/0x2f0
[  167.745361][ T5621]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  167.745404][ T5621]  ? do_raw_spin_unlock+0x4d/0x210
[  167.745424][ T5621]  f2fs_sync_dirty_inodes+0x30e/0x830
[  167.745451][ T5621]  f2fs_write_checkpoint+0x9df/0x26a0
[  167.745467][ T5621]  ? __lock_acquire+0x6b5/0x2cf0
[  167.745503][ T5621]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  167.745557][ T5621]  kill_f2fs_super+0x314/0x730
[  167.745579][ T5621]  ? __pfx_kill_f2fs_super+0x10/0x10
[  167.745603][ T5621]  ? lockdep_hardirqs_on+0x7a/0x110
[  167.745631][ T5621]  deactivate_locked_super+0xbc/0x130
[  167.745653][ T5621]  cleanup_mnt+0x437/0x4d0
[  167.745671][ T5621]  ? _raw_spin_unlock_irq+0x23/0x50
[  167.745691][ T5621]  task_work_run+0x1d9/0x270
[  167.745714][ T5621]  ? __pfx_task_work_run+0x10/0x10
[  167.745740][ T5621]  exit_to_user_mode_loop+0xf3/0x4d0
[  167.745783][ T5621]  ? rcu_is_watching+0x15/0xb0
[  167.745804][ T5621]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.745820][ T5621]  do_syscall_64+0x33e/0xf80
[  167.745840][ T5621]  ? trace_irq_disable+0x3b/0x140
[  167.745864][ T5621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.745877][ T5621] RIP: 0033:0x7f28d839e017
[  167.745891][ T5621] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  167.745909][ T5621] RSP: 002b:00007ffd57302d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  167.745925][ T5621] RAX: 0000000000000000 RBX: 00007f28d8432120 RCX: 00007f28d839e017
[  167.745933][ T5621] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd57302e20
[  167.745940][ T5621] RBP: 00007ffd57302e20 R08: 00007ffd57303e20 R09: 00000000ffffffff
[  167.745948][ T5621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd57303eb0
[  167.745956][ T5621] R13: 00007f28d8432120 R14: 0000000000028e6d R15: 00007ffd57303ef0
[  167.745976][ T5621]  </TASK>
[  167.747983][ T5621] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  168.689182][   T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  168.815331][  T797] elecom 0003:056E:010C.0004: invalid report_size -1306074948
[  168.817670][  T797] elecom 0003:056E:010C.0004: item 0 4 1 7 parsing failed
[  168.820524][  T797] elecom 0003:056E:010C.0004: probe with driver elecom failed with error -22
[  168.859239][   T31] usb 1-1: Using ep0 maxpacket: 32
[  168.864605][   T31] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  168.868103][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.871355][   T31] usb 1-1: Product: syz
[  168.872995][   T31] usb 1-1: Manufacturer: syz
[  168.874431][   T31] usb 1-1: SerialNumber: syz
[  168.877489][   T31] usb 1-1: config 0 descriptor??
[  168.888278][   T31] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  169.028006][  T797] usb 2-1: USB disconnect, device number 11
[  169.265632][ T8650] loop3: detected capacity change from 0 to 32768
[  169.286851][ T8650] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  169.300892][ T8650] XFS (loop3): Ending clean mount
[  169.396906][ T7049] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  170.056275][ T8673] loop3: detected capacity change from 0 to 32768
[  170.071911][ T8673] (syz.3.1112,8673,1):ocfs2_verify_heartbeat:839 ERROR: Heartbeat has to be started to mount a read-write clustered device.
[  170.107255][ T8673] (syz.3.1112,8673,1):ocfs2_fill_super:1177 ERROR: status = -22
[  170.302048][ T8686] loop3: detected capacity change from 0 to 1024
[  170.318977][ T8686] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  170.370469][ T8686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.430230][ T8693] syzkaller1: entered promiscuous mode
[  170.432428][ T8693] syzkaller1: entered allmulticast mode
[  170.445708][ T7049] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.735593][   T31] gspca_ov534_9: reg_w failed -71
[  170.779773][ T8706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1126'.
[  170.828181][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1126'.
[  171.019095][   T31] gspca_ov534_9: Unknown sensor 0000
[  171.019158][   T31] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  171.036387][   T31] usb 1-1: USB disconnect, device number 12
[  171.071900][ T8709] loop3: detected capacity change from 0 to 32768
[  171.077110][ T8709] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1127 (8709)
[  171.089965][ T8709] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.093854][ T8709] BTRFS info (device loop3): using crc32c checksum algorithm
[  171.162644][ T8709] BTRFS info (device loop3): enabling ssd optimizations
[  171.165042][ T8709] BTRFS info (device loop3): turning on flush-on-commit
[  171.167729][ T8709] BTRFS info (device loop3): enabling free space tree
[  171.170594][ T8709] BTRFS info (device loop3): force zlib compression, level 3
[  171.173423][ T8709] BTRFS info (device loop3): max_inline set to 4096
[  171.196466][ T7049] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.425412][ T8730] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1130'.
[  171.432638][ T8730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1130'.
[  171.726111][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1137'.
[  171.731287][ T8748] tc_dump_action: action bad kind
[  171.852160][ T8756] netlink: 'syz.0.1142': attribute type 83 has an invalid length.
[  172.340246][ T8780] loop0: detected capacity change from 0 to 1024
[  172.349670][ T8780] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  172.368001][ T8780] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1154: Invalid block bitmap block 0 in block_group 0
[  172.373264][ T8780] loop0: lost filesystem error report for type 5 error -117
[  172.377936][ T8780] Quota error (device loop0): write_blk: dquota write failed
[  172.380379][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  172.380391][    C1] EXT4-fs (loop0): initial error at time 1778610053: ext4_read_block_bitmap_nowait:483
[  172.380403][    C1] EXT4-fs (loop0): last error at time 1778610053: ext4_read_block_bitmap_nowait:483
[  172.393547][ T8780] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  172.396414][ T8780] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.1154: Failed to acquire dquot type 0
[  172.400315][ T8780] loop0: lost filesystem error report for type 5 error -117
[  172.400595][ T8780] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.1154: Freeing blocks not in datazone - block = 0, count = 4096
[  172.406832][ T8780] loop0: lost filesystem error report for type 5 error -117
[  172.407501][ T8780] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1154: Invalid inode bitmap blk 0 in block_group 0
[  172.416197][ T8780] loop0: lost filesystem error report for type 5 error -117
[  172.416381][ T8780] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  172.426129][ T8780] loop0: lost filesystem error report for type 5 error -117
[  172.426375][ T8780] EXT4-fs (loop0): 1 orphan inode deleted
[  172.431359][ T8267] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7
[  172.435765][ T8780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.443761][ T8267] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u10:8: Failed to release dquot type 0
[  172.449262][ T5677] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  172.468318][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.619248][ T5677] usb 4-1: Using ep0 maxpacket: 32
[  172.623591][ T5677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.631289][ T5677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.638355][ T5677] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  172.643609][ T5677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.649146][ T5630] Bluetooth: hci0: command 0x0401 tx timeout
[  172.651912][ T8697] Bluetooth: hci0: Opcode 0x080f failed: -110
[  172.655089][ T5677] usb 4-1: config 0 descriptor??
[  172.798693][ T8786] Invalid ELF header len 5
[  172.872261][ T8788] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1157'.
[  172.875927][ T8788] 0: renamed from hsr0 (while UP)
[  172.887052][ T8788] 0: entered allmulticast mode
[  172.890699][ T8788] hsr_slave_0: entered allmulticast mode
[  172.893028][ T8788] hsr_slave_1: entered allmulticast mode
[  172.895734][ T8788] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  173.072112][ T5677] zydacron 0003:13EC:0006.0005: collection stack underflow
[  173.077930][ T5677] zydacron 0003:13EC:0006.0005: item 0 1 0 12 parsing failed
[  173.087298][ T5677] zydacron 0003:13EC:0006.0005: parse failed
[  173.094922][ T5677] zydacron 0003:13EC:0006.0005: probe with driver zydacron failed with error -22
[  173.282716][   T31] usb 4-1: USB disconnect, device number 6
[  173.291670][ T8806] loop0: detected capacity change from 0 to 24
[  173.295154][ T8806] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  173.314843][ T8806] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  174.222780][ T8814] loop3: detected capacity change from 0 to 32768
[  174.234960][ T8814] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1166 (8814)
[  174.310425][ T8814] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  174.334468][ T8814] BTRFS info (device loop3): using sha256 checksum algorithm
[  174.461731][ T8814] BTRFS info (device loop3): rebuilding free space tree
[  174.613818][ T8814] BTRFS info (device loop3): disabling free space tree
[  174.627375][ T8814] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  174.632076][ T8814] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  174.645740][ T8857] bond1: option mode: unable to set because the bond device has slaves
[  174.648476][ T8814] BTRFS info (device loop3): setting nodatasum
[  174.651760][ T8814] BTRFS info (device loop3): setting nodatacow
[  174.654272][ T8814] BTRFS info (device loop3): turning off barriers
[  174.656264][ T8814] BTRFS info (device loop3): turning on sync discard
[  174.661881][ T8814] BTRFS info (device loop3): force clearing of disk cache
[  174.669669][ T8857] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  174.843290][ T7934] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  175.165350][ T8863] loop0: detected capacity change from 0 to 32768
[  175.192541][ T8863] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1177 (8863)
[  175.231550][ T8863] BTRFS info (device loop0): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  175.241234][ T8863] BTRFS info (device loop0): using xxhash64 checksum algorithm
[  175.346495][ T8863] BTRFS info (device loop0): enabling ssd optimizations
[  175.351617][ T8863] BTRFS info (device loop0): turning on async discard
[  175.359868][ T8863] BTRFS info (device loop0): enabling free space tree
[  175.455900][ T5699] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.470722][ T5699] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.538344][ T5621] BTRFS info (device loop0): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  175.652118][ T8886] loop1: detected capacity change from 0 to 128
[  175.659763][ T4999] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  175.671304][ T4999] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  175.674536][ T4999] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  175.688845][ T4999] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  175.700795][ T4999] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  175.773152][ T5699] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.773654][ T8886] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  175.793304][ T8886] hpfs: filesystem error: improperly stopped
[  175.799682][ T8886] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  175.802318][ T5699] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.814378][ T8886] hpfs: You really don't want any checks? You are crazy...
[  175.817072][ T8886] hpfs: hpfs_map_sector(): read error
[  175.818980][ T8886] hpfs: code page support is disabled
[  175.843318][ T8886] hpfs: hpfs_map_4sectors(): unaligned read
[  175.870299][ T8886] hpfs: hpfs_map_4sectors(): unaligned read
[  175.873605][ T8886] hpfs: filesystem error: unable to find root dir
[  175.932208][ T5699] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.941125][ T5699] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.113841][ T5699] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.118962][ T5699] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.404676][ T5699] bridge_slave_0: left allmulticast mode
[  176.406445][ T5699] bridge_slave_0: left promiscuous mode
[  176.408492][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.411051][  T797] usb 2-1: new low-speed USB device number 12 using dummy_hcd
[  176.561909][  T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  176.566000][  T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.570432][  T797] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  176.573833][  T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.588243][  T797] usb 2-1: config 0 descriptor??
[  176.685856][ T5699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.692502][ T5699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.697464][ T5699] bond0 (unregistering): Released all slaves
[  176.706985][ T5699] bond1 (unregistering): (slave vcan1): Releasing backup interface
[  176.710733][ T5699] vcan1: left promiscuous mode
[  176.713693][ T5699] bond1 (unregistering): Released all slaves
[  177.158015][  T797] usbhid 2-1:0.0: can't add hid device: -71
[  177.161328][  T797] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  177.171198][  T797] usb 2-1: USB disconnect, device number 12
[  177.284290][ T5356] 8021q: adding VLAN 0 to HW filter on device eth5
[  177.333246][ T8884] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.339188][ T8884] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.342256][ T8884] bridge_slave_0: entered allmulticast mode
[  177.346131][ T8884] bridge_slave_0: entered promiscuous mode
[  177.353128][ T8884] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.356120][ T8884] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.360193][ T8884] bridge_slave_1: entered allmulticast mode
[  177.364426][ T8884] bridge_slave_1: entered promiscuous mode
[  177.411289][ T5699] hsr_slave_0: left promiscuous mode
[  177.421001][ T5699] hsr_slave_1: left promiscuous mode
[  177.426145][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.429345][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.434617][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.437444][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.447467][ T5699] veth1_macvtap: left promiscuous mode
[  177.447738][ T8942] Bluetooth: MGMT ver 1.23
[  177.450700][ T5699] veth0_macvtap: left promiscuous mode
[  177.453888][ T5699] veth1_vlan: left promiscuous mode
[  177.456053][ T5699] veth0_vlan: left promiscuous mode
[  177.737907][ T8946] loop1: detected capacity change from 0 to 128
[  177.740879][ T5077] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  177.769276][ T4999] Bluetooth: hci1: command tx timeout
[  177.781737][ T8946] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  177.790348][ T8946] ext4 filesystem being mounted at /406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  177.833931][ T5699] team0 (unregistering): Port device team_slave_1 removed
[  177.840066][ T8946] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 5 (only 1 groups)
[  177.848556][ T5699] team0 (unregistering): Port device team_slave_0 removed
[  177.876473][ T5618] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  177.894293][ T5077] usb 1-1: Using ep0 maxpacket: 32
[  177.898806][ T5077] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.906480][ T5077] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.914707][ T5077] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  177.920543][ T5077] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  177.928721][ T5077] usb 1-1: Product: syz
[  177.933035][ T5077] usb 1-1: Manufacturer: syz
[  177.979741][ T5077] hub 1-1:4.0: USB hub found
[  178.061712][ T8884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.076073][ T8884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.142634][ T8884] team0: Port device team_slave_0 added
[  178.153095][ T8884] team0: Port device team_slave_1 added
[  178.191568][ T5077] hub 1-1:4.0: 2 ports detected
[  178.236444][ T8884] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.241030][ T8884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  178.263538][ T8884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.270876][ T8884] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.273272][ T8884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  178.288949][ T8884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.383694][ T8884] hsr_slave_0: entered promiscuous mode
[  178.386292][ T8884] hsr_slave_1: entered promiscuous mode
[  178.392198][ T5077] hub 1-1:4.0: hub_hub_status failed (err = -71)
[  178.407901][ T5077] hub 1-1:4.0: config failed, can't get hub status (err -71)
[  178.444057][ T5077] usb 1-1: USB disconnect, device number 13
[  178.477697][ T5356] 8021q: adding VLAN 0 to HW filter on device eth6
[  178.628817][ T8972] loop1: detected capacity change from 0 to 128
[  178.634742][ T8972] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  178.649981][ T8972] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  178.724130][ T8976] netlink: 'syz.1.1206': attribute type 4 has an invalid length.
[  178.744503][ T8976] netlink: 'syz.1.1206': attribute type 4 has an invalid length.
[  178.762471][ T8884] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  178.768177][ T8884] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  178.775380][ T8884] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  178.781000][ T8884] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  178.784491][ T8884] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  178.792830][ T8884] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  178.797017][ T8884] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  178.810375][ T8884] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  178.884930][ T8884] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.903797][ T8884] 8021q: adding VLAN 0 to HW filter on device team0
[  178.950802][  T902] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.952917][  T902] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.968285][ T5356] 8021q: adding VLAN 0 to HW filter on device eth7
[  178.982839][  T902] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.985002][  T902] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.276989][ T5356] 8021q: adding VLAN 0 to HW filter on device eth8
[  179.353123][ T8884] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.379603][  T992] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  179.534827][  T992] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  179.541590][  T992] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  179.545818][ T8884] veth0_vlan: entered promiscuous mode
[  179.547545][  T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.563948][  T992] gspca_main: stv0680-2.14.0 probing 041e:4007
[  179.567512][ T8884] veth1_vlan: entered promiscuous mode
[  179.593845][ T8884] veth0_macvtap: entered promiscuous mode
[  179.598182][ T8884] veth1_macvtap: entered promiscuous mode
[  179.612828][ T8884] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.625347][ T8884] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.632758][ T7115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.639744][ T7115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.643397][ T7115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.647466][ T7115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.774698][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.778140][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.821049][ T8276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.824551][ T8276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.835822][ T9026] loop1: detected capacity change from 0 to 128
[  179.841665][ T9026] EXT4-fs: Ignoring removed nobh option
[  179.860056][ T4999] Bluetooth: hci1: command tx timeout
[  179.866675][ T9026] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  179.875867][ T9026] ext4 filesystem being mounted at /417/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  179.928690][ T5618] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.119799][ T9042] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  180.248607][ T9048] loop1: detected capacity change from 0 to 2048
[  180.271154][ T9048] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0002]
[  180.275194][ T9048] System zones: 0-4
[  180.277632][ T9048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.284283][ T9048] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.298856][ T9048] fs-verity (loop1, inode 18): fs-verity keyring is empty, rejecting signed file!
[  180.364024][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.667066][  T992] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  180.721388][  T992] stv0680 1-1:4.0: STV(e): camera ping failed!!
[  180.746637][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  180.778532][  T992] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32
[  180.802933][  T992] stv0680 1-1:4.0: last error: 0,  command = 0x0
[  180.961414][  T992] usb 1-1: USB disconnect, device number 14
[  181.557010][ T9072] loop0: detected capacity change from 0 to 256
[  181.792510][ T9076] loop0: detected capacity change from 0 to 32768
[  181.797416][ T9076] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1232 (9076)
[  181.825377][ T5699] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.860411][ T9076] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  181.869262][ T9076] BTRFS info (device loop0): using blake2b checksum algorithm
[  181.942054][ T9076] BTRFS info (device loop0): enabling ssd optimizations
[  181.944399][ T9076] BTRFS info (device loop0): turning on async discard
[  181.946233][ T9076] BTRFS info (device loop0): enabling free space tree
[  181.979264][   T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  181.995455][ T5621] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  182.077213][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  182.094350][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  182.109477][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  182.115533][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  182.118493][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  182.180535][   T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  182.184312][   T24] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  182.196349][   T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  182.222769][   T24] usb 2-1: config 220 has no interface number 2
[  182.233261][   T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  182.251122][   T24] usb 2-1: config 220 interface 0 has no altsetting 0
[  182.272266][   T24] usb 2-1: config 220 interface 76 has no altsetting 0
[  182.282173][   T24] usb 2-1: config 220 interface 1 has no altsetting 0
[  182.298718][   T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  182.305396][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.328322][   T24] usb 2-1: Product: syz
[  182.333745][   T24] usb 2-1: Manufacturer: syz
[  182.337195][   T24] usb 2-1: SerialNumber: syz
[  182.402587][ T9108] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1237'.
[  182.589874][   T24] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  182.598023][   T24] uvcvideo 2-1:220.0: No valid video chain found.
[  182.605207][   T24] usb 2-1: selecting invalid altsetting 0
[  182.663682][   T24] usb 2-1: selecting invalid altsetting 0
[  182.680229][   T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  182.702996][   T24] usb 2-1: USB disconnect, device number 13
[  182.945859][ T9095] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.955604][ T9095] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.958876][ T9095] bridge_slave_0: entered allmulticast mode
[  182.961878][ T9095] bridge_slave_0: entered promiscuous mode
[  182.969003][ T9095] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.972172][ T9095] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.974829][ T9095] bridge_slave_1: entered allmulticast mode
[  182.977528][ T9095] bridge_slave_1: entered promiscuous mode
[  183.002330][ T5699] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.031865][ T9095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.036791][ T9095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.057154][ T9095] team0: Port device team_slave_0 added
[  183.060639][ T9095] team0: Port device team_slave_1 added
[  183.105326][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1244'.
[  183.113486][ T5699] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.176051][ T9095] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.181876][ T9024] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  183.185774][ T9095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  183.197542][ T9095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.206110][ T9095] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.210096][ T9095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  183.223499][ T9095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.273305][ T5699] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.341037][ T9024] usb 1-1: Using ep0 maxpacket: 32
[  183.350345][ T9024] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  183.360378][ T9140] loop1: detected capacity change from 0 to 16
[  183.361634][ T9024] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5
[  183.366049][ T9140] erofs (device loop1): mounted with root inode @ nid 36.
[  183.375860][ T9024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.382009][ T9024] usb 1-1: Product: syz
[  183.384253][ T9024] usb 1-1: Manufacturer: syz
[  183.387895][ T9024] usb 1-1: SerialNumber: syz
[  183.395082][ T9095] hsr_slave_0: entered promiscuous mode
[  183.398585][ T9024] usb 1-1: config 0 descriptor??
[  183.402523][ T9095] hsr_slave_1: entered promiscuous mode
[  183.405558][ T9128] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  183.412213][ T9024] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  183.415484][ T9095] debugfs: 'hsr0' already exists in 'hsr'
[  183.418274][ T9095] Cannot create hsr debugfs directory
[  183.642683][ T9024] usb 1-1: USB disconnect, device number 15
[  183.740404][ T9149] loop1: detected capacity change from 0 to 512
[  183.754224][ T9149] EXT4-fs: Ignoring removed i_version option
[  183.767471][ T9150] udevd[9150]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  183.784121][ T9149] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  183.829910][ T9149] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1253: invalid indirect mapped block 4294967295 (level 1)
[  183.842338][ T9149] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  183.854362][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  183.860428][    C1] EXT4-fs (loop1): initial error at time 1778610064: ext4_free_branches:1023: inode 11
[  183.864180][    C1] EXT4-fs (loop1): last error at time 1778610064: ext4_free_branches:1023: inode 11
[  183.873432][ T9149] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1253: invalid indirect mapped block 4294967295 (level 1)
[  183.877887][ T9149] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  183.902474][ T9149] EXT4-fs (loop1): 2 truncates cleaned up
[  183.927952][ T9149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.007460][ T5699] bridge_slave_1: left allmulticast mode
[  184.009988][ T5699] bridge_slave_1: left promiscuous mode
[  184.012362][ T5699] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.032147][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.055070][ T5699] bridge_slave_0: left allmulticast mode
[  184.058990][ T5699] bridge_slave_0: left promiscuous mode
[  184.065124][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.169556][ T4999] Bluetooth: hci1: command tx timeout
[  184.339989][   T33] audit: type=1326 audit(1778610065.438:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.0.1258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d839cdd9 code=0x7ffc0000
[  184.352873][   T33] audit: type=1326 audit(1778610065.438:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.0.1258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d839cdd9 code=0x7ffc0000
[  184.364184][   T33] audit: type=1326 audit(1778610065.448:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.0.1258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d839cdd9 code=0x7ffc0000
[  184.372828][   T33] audit: type=1326 audit(1778610065.448:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.0.1258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d839cdd9 code=0x7ffc0000
[  184.381450][   T33] audit: type=1326 audit(1778610065.448:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.0.1258" exe="/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f28d839cdd9 code=0x7ffc0000
[  184.390224][   T33] audit: type=1326 audit(1778610065.448:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.0.1258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d839cdd9 code=0x7ffc0000
[  184.405902][   T33] audit: type=1326 audit(1778610065.448:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.0.1258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28d839cdd9 code=0x7ffc0000
[  184.420115][   T33] audit: type=1326 audit(1778610065.458:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.0.1258" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f28d839cdd9 code=0x7ffc0000
[  184.428457][   T33] audit: type=1326 audit(1778610065.458:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.0.1258" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f28d839cdd9 code=0x7ffc0000
[  184.442382][ T5699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.448983][ T5699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.457163][ T5699] bond0 (unregistering): Released all slaves
[  184.479740][ T9155] netlink: 'syz.1.1254': attribute type 9 has an invalid length.
[  184.657136][   T33] audit: type=1326 audit(1778610065.748:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9170 comm="syz.0.1262" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28d839cdd9 code=0x0
[  184.801055][ T9177] binder: Binderfs stats mode cannot be changed during a remount
[  185.005562][ T9187] netlink: 'syz.0.1268': attribute type 1 has an invalid length.
[  185.015028][ T9187] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1268'.
[  185.181822][ T5356] 8021q: adding VLAN 0 to HW filter on device eth9
[  185.324872][ T9095] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  185.340128][ T9095] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  185.361428][ T5699] hsr_slave_0: left promiscuous mode
[  185.365773][ T5699] hsr_slave_1: left promiscuous mode
[  185.369628][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.371958][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.376094][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.378259][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.396378][ T5699] veth1_macvtap: left promiscuous mode
[  185.398227][ T5699] veth0_macvtap: left promiscuous mode
[  185.400438][ T5699] veth1_vlan: left promiscuous mode
[  185.402499][ T5699] veth0_vlan: left promiscuous mode
[  185.619394][ T9207] loop0: detected capacity change from 0 to 256
[  185.671619][ T9207] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d)
[  185.703553][ T9207] exFAT-fs (loop0): IO charset macromania not found
[  185.729579][ T5699] team0 (unregistering): Port device team_slave_1 removed
[  185.754356][ T5699] team0 (unregistering): Port device team_slave_0 removed
[  186.095499][ T9095] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  186.136969][ T9095] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  186.183279][ T9095] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  186.213401][ T9095] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  186.218160][ T9095] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  186.248208][ T9095] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  186.250841][ T4999] Bluetooth: hci1: command tx timeout
[  186.428997][ T5356] 8021q: adding VLAN 0 to HW filter on device eth10
[  186.562706][ T9095] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.596347][ T9095] 8021q: adding VLAN 0 to HW filter on device team0
[  186.622876][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.625756][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.647763][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.650706][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.971890][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1284'.
[  186.977543][ T9255] netlink: 'syz.1.1284': attribute type 3 has an invalid length.
[  186.981447][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1284'.
[  186.985405][ T9255] netlink: 'syz.1.1284': attribute type 3 has an invalid length.
[  186.996704][ T5356] 8021q: adding VLAN 0 to HW filter on device eth11
[  187.564196][ T9274] loop1: detected capacity change from 0 to 128
[  187.627377][ T9274] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  187.649564][ T9274] ext4 filesystem being mounted at /455/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  187.744367][ T5618] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  187.813783][ T9095] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.991592][ T5356] 8021q: adding VLAN 0 to HW filter on device eth12
[  188.034707][ T9307] gretap0: entered promiscuous mode
[  188.056248][ T9307] vlan0: entered promiscuous mode
[  188.145543][ T9095] veth0_vlan: entered promiscuous mode
[  188.194837][ T9095] veth1_vlan: entered promiscuous mode
[  188.258848][ T9318] loop1: detected capacity change from 0 to 164
[  188.289344][ T9318] rock: directory entry would overflow storage
[  188.292222][ T9318] rock: sig=0x4f50, size=4, remaining=3
[  188.294267][ T9318] isofs: Unable to find the ".." directory for NFS.
[  188.305399][ T9319] bond2: entered allmulticast mode
[  188.329412][ T4999] Bluetooth: hci1: command tx timeout
[  188.335069][ T9095] veth0_macvtap: entered promiscuous mode
[  188.346066][ T9095] veth1_macvtap: entered promiscuous mode
[  188.391855][ T9095] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.426006][ T9095] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.438751][ T5446] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.447876][ T5446] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.454740][ T5446] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.461119][ T5446] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.632363][  T902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.638340][  T902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.661941][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.664729][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.713015][ T9335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1307'.
[  188.721912][ T9337] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  188.798675][ T9343] Cannot find del_set index 2 as target
[  188.853591][ T9347] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1312'.
[  188.860240][ T9347] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  189.745460][   T33] audit: type=1326 audit(1778610070.837:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.5.1323" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b739cdd9 code=0x7ffc0000
[  189.764244][   T33] audit: type=1326 audit(1778610070.837:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.5.1323" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b739cdd9 code=0x7ffc0000
[  189.785678][ T9369] loop0: detected capacity change from 0 to 40427
[  189.790521][ T9369] F2FS-fs (loop0): invalid crc value
[  189.800248][   T33] audit: type=1326 audit(1778610070.837:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.5.1323" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b739cdd9 code=0x7ffc0000
[  189.835839][   T33] audit: type=1326 audit(1778610070.837:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.5.1323" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b739cdd9 code=0x7ffc0000
[  189.836544][ T9369] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  189.864562][   T33] audit: type=1326 audit(1778610070.837:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.5.1323" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f92b739cdd9 code=0x7ffc0000
[  189.885557][   T33] audit: type=1326 audit(1778610070.837:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.5.1323" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b739cdd9 code=0x7ffc0000
[  189.895131][   T33] audit: type=1326 audit(1778610070.887:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.5.1323" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92b735d60e code=0x7ffc0000
[  189.905865][ T9369] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  189.914848][   T33] audit: type=1326 audit(1778610070.897:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.5.1323" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92b735d60e code=0x7ffc0000
[  189.926513][   T33] audit: type=1326 audit(1778610070.907:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.5.1323" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92b735d60e code=0x7ffc0000
[  189.938676][   T33] audit: type=1326 audit(1778610070.907:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.5.1323" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92b735d60e code=0x7ffc0000
[  190.055233][ T5621] syz-executor: attempt to access beyond end of device
[  190.055233][ T5621] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  190.067739][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1324'.
[  190.085023][ T9382] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1324'.
[  190.115875][ T5621] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  190.115893][ T5621] Tainted: [L]=SOFTLOCKUP
[  190.115896][ T5621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.115901][ T5621] Call Trace:
[  190.115904][ T5621]  <TASK>
[  190.115908][ T5621]  dump_stack_lvl+0xe8/0x150
[  190.115923][ T5621]  f2fs_stop_checkpoint+0x3c7/0x590
[  190.115935][ T5621]  f2fs_write_end_io+0x1274/0x1740
[  190.115954][ T5621]  __submit_merged_bio+0x256/0x6a0
[  190.115966][ T5621]  __submit_merged_write_cond+0x3c9/0x4e0
[  190.115978][ T5621]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  190.115996][ T5621]  f2fs_write_data_pages+0x287e/0x34f0
[  190.116006][ T5621]  ? unwind_next_frame+0xa6/0x2550
[  190.116030][ T5621]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  190.116039][ T5621]  ? is_bpf_text_address+0x26/0x2b0
[  190.116053][ T5621]  ? arch_stack_walk+0xfb/0x150
[  190.116076][ T5621]  ? add_lock_to_list+0xc7/0x100
[  190.116087][ T5621]  ? lockdep_unlock+0x5d/0xd0
[  190.116093][ T5621]  ? __lock_acquire+0x146e/0x2cf0
[  190.116113][ T5621]  ? do_raw_spin_lock+0x12b/0x2f0
[  190.116129][ T5621]  ? do_raw_spin_unlock+0x4d/0x210
[  190.116141][ T5621]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  190.116151][ T5621]  do_writepages+0x32e/0x550
[  190.116164][ T5621]  ? do_raw_spin_unlock+0x4d/0x210
[  190.116177][ T5621]  filemap_fdatawrite+0x1e9/0x2f0
[  190.116187][ T5621]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  190.116214][ T5621]  ? do_raw_spin_unlock+0x4d/0x210
[  190.116227][ T5621]  f2fs_sync_dirty_inodes+0x30e/0x830
[  190.116244][ T5621]  f2fs_write_checkpoint+0x9df/0x26a0
[  190.116254][ T5621]  ? __lock_acquire+0x6b5/0x2cf0
[  190.116275][ T5621]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  190.116309][ T5621]  kill_f2fs_super+0x314/0x730
[  190.116321][ T5621]  ? __pfx_kill_f2fs_super+0x10/0x10
[  190.116337][ T5621]  ? lockdep_hardirqs_on+0x7a/0x110
[  190.116380][ T5621]  deactivate_locked_super+0xbc/0x130
[  190.116394][ T5621]  cleanup_mnt+0x437/0x4d0
[  190.116406][ T5621]  ? _raw_spin_unlock_irq+0x23/0x50
[  190.116419][ T5621]  task_work_run+0x1d9/0x270
[  190.116432][ T5621]  ? __pfx_task_work_run+0x10/0x10
[  190.116447][ T5621]  exit_to_user_mode_loop+0xf3/0x4d0
[  190.116455][ T5621]  ? rcu_is_watching+0x15/0xb0
[  190.116466][ T5621]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.116475][ T5621]  do_syscall_64+0x33e/0xf80
[  190.116501][ T5621]  ? trace_irq_disable+0x3b/0x140
[  190.116516][ T5621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.116524][ T5621] RIP: 0033:0x7f28d839e017
[  190.116533][ T5621] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  190.116541][ T5621] RSP: 002b:00007ffd57302d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  190.116550][ T5621] RAX: 0000000000000000 RBX: 00007f28d8432120 RCX: 00007f28d839e017
[  190.116556][ T5621] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd57302e20
[  190.116561][ T5621] RBP: 00007ffd57302e20 R08: 00007ffd57303e20 R09: 00000000ffffffff
[  190.116566][ T5621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd57303eb0
[  190.116575][ T5621] R13: 00007f28d8432120 R14: 000000000002e5b6 R15: 00007ffd57303ef0
[  190.116589][ T5621]  </TASK>
[  190.116593][ T5621] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  190.413002][ T4999] Bluetooth: hci1: command tx timeout
[  190.566549][ T9384] loop1: detected capacity change from 0 to 32768
[  190.605209][ T9384] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  190.645233][ T9384] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  190.674666][ T9384] XFS (loop1): Starting recovery (logdev: internal)
[  190.702580][ T9384] XFS (loop1): Ending recovery (logdev: internal)
[  190.741154][ T5618] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  191.428717][ T9429] loop1: detected capacity change from 0 to 512
[  191.807483][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1335'.
[  192.369922][ T9444] loop0: detected capacity change from 0 to 32768
[  192.374000][ T9444] btrfs: Deprecated parameter 'usebackuproot'
[  192.376435][ T9444] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  192.394691][ T9444] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1336 (9444)
[  192.415014][ T9444] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  192.418768][ T9444] BTRFS info (device loop0): using crc32c checksum algorithm
[  192.610817][ T1112] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  192.623980][ T9444] BTRFS error (device loop0): failed to load root extent
[  192.626974][ T9444] BTRFS warning (device loop0): try to load backup roots slot 1
[  192.631358][  T902] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  192.637739][ T9444] BTRFS warning (device loop0): couldn't read tree root
[  192.640799][ T9444] BTRFS warning (device loop0): try to load backup roots slot 2
[  192.644171][   T26] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  192.648798][ T9444] BTRFS warning (device loop0): couldn't read tree root
[  192.651983][ T9444] BTRFS warning (device loop0): try to load backup roots slot 3
[  192.680568][ T9444] BTRFS info (device loop0): rebuilding free space tree
[  192.719625][ T9444] BTRFS info (device loop0): disabling free space tree
[  192.722418][ T9444] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  192.727508][ T9444] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  192.742441][ T9444] BTRFS info (device loop0): checking UUID tree
[  192.780558][ T9444] BTRFS info (device loop0): enabling ssd optimizations
[  192.783510][ T9444] BTRFS info (device loop0): using spread ssd allocation scheme
[  192.786520][ T9444] BTRFS info (device loop0): turning on async discard
[  192.794824][ T9444] BTRFS info (device loop0): force clearing of disk cache
[  192.797676][ T9444] BTRFS info (device loop0): enabling auto defrag
[  192.800428][ T9444] BTRFS info (device loop0): trying to use backup root at mount time
[  192.804252][ T9444] BTRFS info (device loop0): use zstd compression, level 3
[  193.195187][ T5621] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.605698][ T9479] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.771063][  T797] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  193.930291][  T797] usb 6-1: Using ep0 maxpacket: 8
[  193.936156][  T797] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  193.941235][  T797] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  193.945994][  T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  193.950198][  T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  193.953246][  T797] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  193.961625][  T797] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  193.965324][  T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  193.968443][  T797] usb 6-1: Product: syz
[  193.969958][  T797] usb 6-1: Manufacturer: syz
[  193.971392][  T797] usb 6-1: SerialNumber: syz
[  193.974979][  T797] usb 6-1: config 0 descriptor??
[  193.999323][   T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  194.149771][   T24] usb 2-1: Using ep0 maxpacket: 32
[  194.153521][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  194.157212][   T24] usb 2-1: config 1 interface 0 altsetting 58 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.160796][   T24] usb 2-1: config 1 interface 0 altsetting 58 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.163806][   T24] usb 2-1: config 1 interface 0 has no altsetting 0
[  194.168528][   T24] usb 2-1: New USB device found, idVendor=056e, idProduct=018c, bcdDevice= 0.00
[  194.171301][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.173580][   T24] usb 2-1: Product: syz
[  194.174933][   T24] usb 2-1: Manufacturer: syz
[  194.176391][   T24] usb 2-1: SerialNumber: syz
[  194.198029][  T797] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  194.200474][  T797] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  194.401367][  T797] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71
[  194.405039][  T797] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[  194.408485][  T797] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5
[  194.414893][  T797] usb 6-1: USB disconnect, device number 2
[  194.783058][ T9493] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1348'.
[  195.117790][ T9506] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  195.129003][ T9506] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  195.135871][ T9506] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  195.523679][ T9516] loop0: detected capacity change from 0 to 1764
[  195.821190][   T24] hid_parser_main: 7 callbacks suppressed
[  195.821366][   T24] elecom 0003:056E:018C.0006: unknown main item tag 0x0
[  195.838251][   T24] elecom 0003:056E:018C.0006: unknown main item tag 0x0
[  195.870318][   T24] elecom 0003:056E:018C.0006: unknown main item tag 0x0
[  195.880528][   T24] elecom 0003:056E:018C.0006: unknown main item tag 0x0
[  195.892432][   T24] elecom 0003:056E:018C.0006: unknown main item tag 0x0
[  195.903025][   T24] elecom 0003:056E:018C.0006: unknown main item tag 0x0
[  195.906324][ T9519] netlink: 'syz.5.1359': attribute type 30 has an invalid length.
[  195.913858][   T24] elecom 0003:056E:018C.0006: unknown main item tag 0x0
[  195.933521][   T24] elecom 0003:056E:018C.0006: unknown main item tag 0x0
[  195.937621][   T24] elecom 0003:056E:018C.0006: unknown main item tag 0x0
[  195.954725][   T24] elecom 0003:056E:018C.0006: unknown main item tag 0x0
[  196.184193][   T24] elecom 0003:056E:018C.0006: hidraw0: USB HID v0.06 Device [syz syz] on usb-dummy_hcd.1-1/input0
[  196.343651][   T24] usb 2-1: USB disconnect, device number 14
[  196.980657][ T5630] Bluetooth: hci0: command 0x0401 tx timeout
[  197.149226][ T9024] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  197.300060][ T9024] usb 6-1: Using ep0 maxpacket: 16
[  197.308142][ T9024] usb 6-1: config index 0 descriptor too short (expected 1810, got 18)
[  197.313171][ T9527] tipc: Started in network mode
[  197.320321][ T9024] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6
[  197.326998][ T9527] tipc: Node identity , cluster identity 4711
[  197.330060][ T9024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.340870][ T9024] usb 6-1: config 0 descriptor??
[  197.371120][ T9024] gspca_main: etoms-2.14.0 probing 102c:6151
[  197.562162][ T9533] xt_TPROXY: Can be used only with -p tcp or -p udp
[  197.665452][ T9024] usb 6-1: USB disconnect, device number 3
[  197.893783][ T9544] loop0: detected capacity change from 0 to 256
[  197.911321][ T9544] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d)
[  197.957729][ T9546] No source specified
[  198.218189][ T9558] cgroup: fork rejected by pids controller in /syz5
[  198.378107][ T9563] loop0: detected capacity change from 0 to 512
[  198.393305][ T9563] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  198.430048][ T9563] EXT4-fs (loop0): 1 truncate cleaned up
[  198.434225][ T9563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.517127][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.141719][ T5699] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.150432][ T5678] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  199.224901][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  199.238285][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  199.255614][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  199.267385][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  199.277028][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  199.339276][ T5678] usb 1-1: Using ep0 maxpacket: 8
[  199.362417][ T5678] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  199.366951][ T5678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.379155][ T5678] usb 1-1: Product: syz
[  199.386159][ T5678] usb 1-1: Manufacturer: syz
[  199.394828][ T5678] usb 1-1: SerialNumber: syz
[  199.421050][ T5678] usb 1-1: config 0 descriptor??
[  199.438835][ T5678] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244)
[  199.552657][ T5699] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.694946][ T5699] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.777128][ T5699] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.862475][ T5678] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  199.872467][ T5678] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  199.882962][ T5678] usb 1-1: USB disconnect, device number 16
[  200.026527][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  200.033196][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  200.208123][ T5699] bridge_slave_1: left allmulticast mode
[  200.212925][ T5699] bridge_slave_1: left promiscuous mode
[  200.219379][ T5699] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.222778][ T9595] fuse: root generation should be zero
[  200.231631][ T5699] bridge_slave_0: left allmulticast mode
[  200.237416][ T5699] bridge_slave_0: left promiscuous mode
[  200.246431][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.823263][ T9612] loop0: detected capacity change from 0 to 32768
[  200.827326][ T9612] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1387 (9612)
[  200.854342][ T9612] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  200.856902][ T5699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.858509][ T9612] BTRFS info (device loop0): using sha256 checksum algorithm
[  200.877065][ T5699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.887121][ T5699] bond0 (unregistering): Released all slaves
[  200.897838][ T5356] 8021q: adding VLAN 0 to HW filter on device eth13
[  200.944981][ T9612] BTRFS info (device loop0): setting nodatasum
[  200.947470][ T9612] BTRFS info (device loop0): enabling ssd optimizations
[  200.950583][ T9612] BTRFS info (device loop0): turning on async discard
[  200.953213][ T9612] BTRFS info (device loop0): enabling free space tree
[  201.024841][   T33] kauditd_printk_skb: 14 callbacks suppressed
[  201.024863][   T33] audit: type=1800 audit(1778610082.112:645): pid=9612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1387" name="file1" dev="loop0" ino=260 res=0 errno=0
[  201.340272][ T9575] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.342446][ T9575] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.344737][ T9575] bridge_slave_0: entered allmulticast mode
[  201.347523][ T9575] bridge_slave_0: entered promiscuous mode
[  201.363118][ T5621] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  201.379641][ T4999] Bluetooth: hci1: command tx timeout
[  201.626056][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1389'.
[  201.923886][ T9575] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.931171][ T9575] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.936405][ T9575] bridge_slave_1: entered allmulticast mode
[  201.941705][ T9575] bridge_slave_1: entered promiscuous mode
[  202.029158][ T9575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.061812][ T9575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.246926][ T5699] hsr_slave_0: left promiscuous mode
[  202.278483][ T5699] hsr_slave_1: left promiscuous mode
[  202.286688][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.290007][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.301036][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.303385][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.318044][ T9652] evm: overlay not supported
[  202.342790][ T5699] veth1_macvtap: left promiscuous mode
[  202.345018][ T5699] veth0_macvtap: left promiscuous mode
[  202.357198][ T5699] veth1_vlan: left promiscuous mode
[  202.359761][ T5699] veth0_vlan: left promiscuous mode
[  202.538437][ T9656] loop1: detected capacity change from 0 to 32768
[  202.557643][ T9656] JBD2: Ignoring recovery information on journal
[  202.622177][ T9656] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  202.638597][ T9656] (syz.1.1393,9656,1):ocfs2_find_entry:1111 ERROR: status = -117
[  202.656272][ T9656] (syz.1.1393,9656,1):ocfs2_find_entry:1111 ERROR: status = -117
[  202.661441][ T9656] (syz.1.1393,9656,1):ocfs2_symlink:2078 ERROR: status = -117
[  202.714517][ T5699] team0 (unregistering): Port device team_slave_1 removed
[  202.722963][ T5618] ocfs2: Unmounting device (7,1) on (node local)
[  202.756084][ T5699] team0 (unregistering): Port device team_slave_0 removed
[  202.887435][ T9575] team0: Port device team_slave_0 added
[  202.896548][ T9575] team0: Port device team_slave_1 added
[  202.971140][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.976618][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  202.998607][ T9575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.015104][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.021934][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  203.045695][ T9575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.101136][ T5692] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  203.144998][ T9575] hsr_slave_0: entered promiscuous mode
[  203.147883][ T9575] hsr_slave_1: entered promiscuous mode
[  203.249203][ T5692] usb 2-1: Using ep0 maxpacket: 32
[  203.258334][ T5692] usb 2-1: config 0 has an invalid interface number: 16 but max is 0
[  203.260800][ T5692] usb 2-1: config 0 has no interface number 0
[  203.263150][ T5692] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  203.273024][ T5692] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  203.283657][ T5692] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  203.317618][ T5692] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  203.323476][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.336461][ T5692] usb 2-1: Product: syz
[  203.340728][ T5692] usb 2-1: Manufacturer: syz
[  203.342156][ T5692] usb 2-1: SerialNumber: syz
[  203.352914][ T5692] usb 2-1: config 0 descriptor??
[  203.372505][ T9662] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  203.382803][ T5692] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  203.459855][ T4999] Bluetooth: hci1: command tx timeout
[  203.738574][ T5692] snd-usb-audio 2-1:0.16: probe with driver snd-usb-audio failed with error -12
[  203.748980][ T5692] usb 2-1: USB disconnect, device number 15
[  203.815043][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  203.848477][ T5356] 8021q: adding VLAN 0 to HW filter on device eth14
[  204.000511][ T9697] loop0: detected capacity change from 0 to 256
[  204.180936][ T9703] netlink: 'syz.0.1405': attribute type 3 has an invalid length.
[  204.240562][ T9703] netlink: 'syz.0.1405': attribute type 3 has an invalid length.
[  204.858619][ T9575] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  204.865610][ T9575] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  204.868520][ T9575] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  204.878577][ T9575] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  204.882355][ T9575] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  204.890921][ T9575] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  204.900757][ T9575] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  204.913542][ T9575] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  204.979469][ T9024] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  205.018645][ T9575] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.034589][ T9575] 8021q: adding VLAN 0 to HW filter on device team0
[  205.042187][ T8267] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.044944][ T8267] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.061528][ T8267] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.064399][ T8267] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.073306][ T9754] Bluetooth: hci0: unsupported parameter 256
[  205.093985][ T9575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  205.109332][ T9754] Bluetooth: hci0: invalid length 0, exp 2 for type 9
[  205.152469][ T9024] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  205.156583][ T9024] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  205.168146][ T9024] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  205.175636][ T9024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.179542][ T9024] usb 1-1: Product: syz
[  205.185766][ T9024] usb 1-1: Manufacturer: syz
[  205.187770][ T9024] usb 1-1: SerialNumber: syz
[  205.196010][ T9024] usb 1-1: config 0 descriptor??
[  205.204408][ T9735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  205.208392][ T9735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  205.427515][ T9735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  205.437646][ T9735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  205.539598][ T4999] Bluetooth: hci1: command tx timeout
[  205.569766][ T9575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.764619][ T9575] veth0_vlan: entered promiscuous mode
[  205.773421][ T9575] veth1_vlan: entered promiscuous mode
[  205.799897][ T9575] veth0_macvtap: entered promiscuous mode
[  205.808959][ T9575] veth1_macvtap: entered promiscuous mode
[  205.821899][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.832798][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.850462][ T7107] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.864816][ T7107] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.870813][ T7107] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.887822][ T7107] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.980038][ T8276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.984098][ T8276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.003150][ T9786] loop1: detected capacity change from 0 to 1024
[  206.018450][ T9786] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  206.051223][ T8267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.053844][ T8267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.127825][ T9789] 9pnet_fd: p9_fd_create_unix (9789): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  206.235980][ T9797] netlink: 'syz.1.1430': attribute type 4 has an invalid length.
[  207.592340][ T9817] netlink: 'syz.5.1436': attribute type 21 has an invalid length.
[  207.595592][ T9817] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1436'.
[  207.600208][ T9817] netlink: 'syz.5.1436': attribute type 4 has an invalid length.
[  207.603400][ T9817] netlink: 'syz.5.1436': attribute type 5 has an invalid length.
[  207.606478][ T9817] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1436'.
[  207.830294][ T9819] loop1: detected capacity change from 0 to 2048
[  207.873348][ T9820] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  207.962315][ T9820] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  207.966049][ T9820] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  207.978936][ T9820] Remounting filesystem read-only
[  207.986538][ T5618] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  208.004209][ T9024] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  208.064508][ T9024] dm9601 1-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 06:00:00:00:00:00
[  208.076599][ T9024] usb 1-1: USB disconnect, device number 17
[  208.080425][ T9024] dm9601 1-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet
[  208.818819][ T9835] loop5: detected capacity change from 0 to 32768
[  208.825625][ T9835] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1445 (9835)
[  208.865096][ T9835] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  208.869117][ T9835] BTRFS info (device loop5): using sha256 checksum algorithm
[  208.990399][ T9835] BTRFS info (device loop5): enabling ssd optimizations
[  208.993212][ T9835] BTRFS info (device loop5): turning on async discard
[  208.995809][ T9835] BTRFS info (device loop5): enabling free space tree
[  209.191831][ T9858] ceph: No source
[  209.216500][ T9857] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1445'.
[  209.929261][ T9024] usb 2-1: new low-speed USB device number 16 using dummy_hcd
[  210.106772][ T9024] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  210.110607][ T9024] usb 2-1: config 0 has no interface number 0
[  210.114427][ T9024] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  210.128756][ T9024] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  210.143139][ T9024] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  210.150828][ T9024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.164380][ T9024] usb 2-1: config 0 descriptor??
[  210.168936][ T9867] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  210.201413][ T9024] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  210.532912][   T24] usb 2-1: USB disconnect, device number 16
[  210.653534][ T9575] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  211.145933][ T9896] loop1: detected capacity change from 0 to 128
[  211.156017][ T9896] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  211.163606][ T9896] hpfs: filesystem error: improperly stopped
[  211.165875][ T9896] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  211.168658][ T9896] hpfs: You really don't want any checks? You are crazy...
[  211.173640][ T9896] hpfs: hpfs_map_sector(): read error
[  211.175275][ T9896] hpfs: code page support is disabled
[  211.177157][ T9896] hpfs: hpfs_map_4sectors(): unaligned read
[  211.178844][ T9896] hpfs: hpfs_map_4sectors(): unaligned read
[  211.181097][ T9896] hpfs: filesystem error: unable to find root dir
[  211.317470][ T9900] loop5: detected capacity change from 0 to 4096
[  211.365265][ T9903] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  211.388720][ T9900] NILFS error (device loop5): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1
[  211.407840][ T9900] Remounting filesystem read-only
[  211.427456][ T9902] loop1: detected capacity change from 0 to 32768
[  211.432201][ T9902] (syz.1.1469,9902,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  211.438956][ T9902] (syz.1.1469,9902,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  211.453856][ T9902] JBD2: Ignoring recovery information on journal
[  211.504207][ T9902] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  211.592876][ T5618] ocfs2: Unmounting device (7,1) on (node local)
[  211.773190][ T9912] program syz.1.1471 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  211.860208][ T9916] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1474'.
[  211.863458][ T9916] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1474'.
[  212.126066][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881b4770400: rx timeout, send abort
[  212.139161][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881b4770400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  212.243756][ T9910] loop5: detected capacity change from 0 to 131072
[  212.251395][ T9910] F2FS-fs (loop5): invalid crc value
[  212.301423][ T9910] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  212.309448][ T9910] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  212.492224][ T9936] syzkaller1: entered allmulticast mode
[  212.706244][ T9944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1486'.
[  212.767378][ T9946] loop1: detected capacity change from 0 to 764
[  212.960441][ T9787] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  213.055077][ T9958] macvlan0: entered promiscuous mode
[  213.061663][ T9958] netlink: 'syz.5.1483': attribute type 2 has an invalid length.
[  213.070237][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1483'.
[  213.158246][ T9787] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  213.162493][ T9787] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253
[  213.202690][ T9787] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  213.206276][ T9787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.210252][ T9787] usb 1-1: Product: syz
[  213.212803][ T9787] usb 1-1: Manufacturer: syz
[  213.215112][ T9787] usb 1-1: SerialNumber: syz
[  213.229952][ T9787] usb 1-1: config 0 descriptor??
[  213.243078][ T9787] gspca_main: sunplus-2.14.0 probing 055f:c630
[  213.624771][ T9969] openvswitch: netlink: IP tunnel dst address not specified
[  213.629995][    C1] ------------[ cut here ]------------
[  213.632727][    C1] sk->sk_forward_alloc
[  213.632745][    C1] WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x62d/0x740, CPU#1: swapper/1/0
[  213.641662][    C1] Modules linked in:
[  213.643775][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  213.647701][    C1] Tainted: [L]=SOFTLOCKUP
[  213.649464][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.653322][    C1] RIP: 0010:inet_sock_destruct+0x62d/0x740
[  213.655608][    C1] Code: 0f 0b 90 e9 58 fe ff ff e8 e0 78 9e f7 90 0f 0b 90 e9 8b fe ff ff e8 d2 78 9e f7 90 0f 0b 90 e9 b1 fe ff ff e8 c4 78 9e f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc
[  213.663018][    C1] RSP: 0018:ffffc90000a08d20 EFLAGS: 00010246
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  213.665421][    C1] RAX: ffffffff8a27490c RBX: dffffc0000000000 RCX: ffff8881604f0000
[  213.668593][    C1] RDX: 0000000000000100 RSI: 0000000000000e50 RDI: 0000000000000000
[  213.671761][    C1] RBP: 0000000000000e50 R08: ffff8881101e3e27 R09: 1ffff1102203c7c4
[  213.674775][    C1] R10: dffffc0000000000 R11: ffffed102203c7c5 R12: ffff8881101e3b80
[  213.677849][    C1] R13: ffff8881101e4088 R14: ffff8881101e3e0c R15: ffffffff8feaf3c0
[  213.681013][    C1] FS:  0000000000000000(0000) GS:ffff8882a928c000(0000) knlGS:0000000000000000
[  213.684456][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  213.687023][    C1] CR2: 00007fdc25d4da08 CR3: 0000000172f0e000 CR4: 00000000000006f0
[  213.690243][    C1] Call Trace:
[  213.691575][    C1]  <IRQ>
[  213.692702][    C1]  ? __pfx_udp_destruct_sock+0x10/0x10
[  213.694860][    C1]  __sk_destruct+0x8d/0x9d0
[  213.696714][    C1]  ? rcu_core+0x751/0x1070
[  213.698492][    C1]  ? __pfx___sk_destruct+0x10/0x10
[  213.700615][    C1]  rcu_core+0x7cd/0x1070
[  213.702280][    C1]  ? __pfx_rcu_core+0x10/0x10
[  213.704198][    C1]  ? sched_balance_domains+0x7ea/0x900
[  213.706411][    C1]  ? sched_balance_domains+0xf9/0x900
[  213.708696][    C1]  handle_softirqs+0x22a/0x840
[  213.710708][    C1]  ? __irq_exit_rcu+0xca/0x220
[  213.712620][    C1]  __irq_exit_rcu+0xca/0x220
[  213.714438][    C1]  irq_exit_rcu+0x9/0x30
[  213.716112][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  213.718314][    C1]  </IRQ>
[  213.719740][    C1]  <TASK>
[  213.720943][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  213.723255][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  213.725442][    C1] Code: 9b 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 a1 20 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  213.732750][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000202
[  213.735152][    C1] RAX: 000000000019af15 RBX: ffffffff819a93ba RCX: 0000000080000001
[  213.738205][    C1] RDX: 0000000000000001 RSI: ffffffff8dfa6938 RDI: ffffffff8c28b060
[  213.741261][    C1] RBP: ffffc90000197f10 R08: ffff88823c6339db R09: 1ffff110478c673b
[  213.744309][    C1] R10: dffffc0000000000 R11: ffffed10478c673c R12: 0000000000000001
[  213.747320][    C1] R13: 1ffff1102c09e000 R14: 0000000000000001 R15: 1ffff1102c09e000
[  213.750417][    C1]  ? do_idle+0x36a/0x5f0
[  213.752065][    C1]  default_idle+0x9/0x20
[  213.753759][    C1]  default_idle_call+0x72/0xb0
[  213.755828][    C1]  do_idle+0x36a/0x5f0
[  213.757412][    C1]  ? __pfx_do_idle+0x10/0x10
[  213.759285][    C1]  cpu_startup_entry+0x43/0x60
[  213.761159][    C1]  start_secondary+0x101/0x110
[  213.763021][    C1]  common_startup_64+0x13e/0x147
[  213.764951][    C1]  </TASK>
[  213.766159][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  213.768946][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  213.772797][    C1] Tainted: [L]=SOFTLOCKUP
[  213.774091][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.777135][    C1] Call Trace:
[  213.778141][    C1]  <IRQ>
[  213.778992][    C1]  vpanic+0x56c/0xa60
[  213.780180][    C1]  ? __pfx__printk+0x10/0x10
[  213.781538][    C1]  ? __pfx_vpanic+0x10/0x10
[  213.782869][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  213.784427][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  213.785950][    C1]  panic+0xc5/0xd0
[  213.787054][    C1]  ? __pfx_panic+0x10/0x10
[  213.788362][    C1]  ? common_startup_64+0x13e/0x147
[  213.789847][    C1]  __warn+0x315/0x4c0
[  213.791029][    C1]  ? inet_sock_destruct+0x62d/0x740
[  213.792572][    C1]  ? inet_sock_destruct+0x62d/0x740
[  213.794112][    C1]  __report_bug+0x29a/0x540
[  213.795599][    C1]  ? kasan_save_track+0x3e/0x80
[  213.797308][    C1]  ? kasan_save_free_info+0x46/0x50
[  213.799329][    C1]  ? __kasan_slab_free+0x5c/0x80
[  213.801246][    C1]  ? inet_sock_destruct+0x62d/0x740
[  213.803336][    C1]  ? __pfx___report_bug+0x10/0x10
[  213.805223][    C1]  ? do_idle+0x36a/0x5f0
[  213.806760][    C1]  ? cpu_startup_entry+0x43/0x60
[  213.808339][    C1]  ? start_secondary+0x101/0x110
[  213.809906][    C1]  ? common_startup_64+0x13e/0x147
[  213.811522][    C1]  ? inet_sock_destruct+0x62d/0x740
[  213.813188][    C1]  report_bug+0x16a/0x220
[  213.814738][    C1]  ? inet_sock_destruct+0x62d/0x740
[  213.816912][    C1]  ? inet_sock_destruct+0x62f/0x740
[  213.819053][    C1]  handle_bug+0x9c/0x200
[  213.820843][    C1]  exc_invalid_op+0x1a/0x50
[  213.822555][    C1]  asm_exc_invalid_op+0x1a/0x20
[  213.824088][    C1] RIP: 0010:inet_sock_destruct+0x62d/0x740
[  213.826383][    C1] Code: 0f 0b 90 e9 58 fe ff ff e8 e0 78 9e f7 90 0f 0b 90 e9 8b fe ff ff e8 d2 78 9e f7 90 0f 0b 90 e9 b1 fe ff ff e8 c4 78 9e f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc
[  213.832852][    C1] RSP: 0018:ffffc90000a08d20 EFLAGS: 00010246
[  213.834852][    C1] RAX: ffffffff8a27490c RBX: dffffc0000000000 RCX: ffff8881604f0000
[  213.837475][    C1] RDX: 0000000000000100 RSI: 0000000000000e50 RDI: 0000000000000000
[  213.840019][    C1] RBP: 0000000000000e50 R08: ffff8881101e3e27 R09: 1ffff1102203c7c4
[  213.843069][    C1] R10: dffffc0000000000 R11: ffffed102203c7c5 R12: ffff8881101e3b80
[  213.845563][    C1] R13: ffff8881101e4088 R14: ffff8881101e3e0c R15: ffffffff8feaf3c0
[  213.848069][    C1]  ? inet_sock_destruct+0x62c/0x740
[  213.849842][    C1]  ? __pfx_udp_destruct_sock+0x10/0x10
[  213.852218][    C1]  __sk_destruct+0x8d/0x9d0
[  213.853949][    C1]  ? rcu_core+0x751/0x1070
[  213.855837][    C1]  ? __pfx___sk_destruct+0x10/0x10
[  213.858006][    C1]  rcu_core+0x7cd/0x1070
[  213.859403][    C1]  ? __pfx_rcu_core+0x10/0x10
[  213.860896][    C1]  ? sched_balance_domains+0x7ea/0x900
[  213.862702][    C1]  ? sched_balance_domains+0xf9/0x900
[  213.864400][    C1]  handle_softirqs+0x22a/0x840
[  213.865840][    C1]  ? __irq_exit_rcu+0xca/0x220
[  213.867332][    C1]  __irq_exit_rcu+0xca/0x220
[  213.868760][    C1]  irq_exit_rcu+0x9/0x30
[  213.870125][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  213.871901][    C1]  </IRQ>
[  213.872838][    C1]  <TASK>
[  213.873776][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  213.875957][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  213.878346][    C1] Code: 9b 7d 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 a1 20 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  213.886516][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000202
[  213.889129][    C1] RAX: 000000000019af15 RBX: ffffffff819a93ba RCX: 0000000080000001
[  213.892536][    C1] RDX: 0000000000000001 RSI: ffffffff8dfa6938 RDI: ffffffff8c28b060
[  213.896016][    C1] RBP: ffffc90000197f10 R08: ffff88823c6339db R09: 1ffff110478c673b
[  213.899415][    C1] R10: dffffc0000000000 R11: ffffed10478c673c R12: 0000000000000001
[  213.902788][    C1] R13: 1ffff1102c09e000 R14: 0000000000000001 R15: 1ffff1102c09e000
[  213.906255][    C1]  ? do_idle+0x36a/0x5f0
[  213.908159][    C1]  default_idle+0x9/0x20
[  213.910021][    C1]  default_idle_call+0x72/0xb0
[  213.912084][    C1]  do_idle+0x36a/0x5f0
[  213.913729][    C1]  ? __pfx_do_idle+0x10/0x10
[  213.915576][    C1]  cpu_startup_entry+0x43/0x60
[  213.917476][    C1]  start_secondary+0x101/0x110
[  213.919322][    C1]  common_startup_64+0x13e/0x147
[  213.921299][    C1]  </TASK>
[  213.923287][    C1] Kernel Offset: disabled
[  213.924967][    C1] Rebooting in 86400 seconds..
