last executing test programs:

2m30.440137456s ago: executing program 1 (id=118):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c"], 0xfdef)

2m30.322690861s ago: executing program 1 (id=119):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r1 = inotify_init1(0x80800)
inotify_add_watch(r1, &(0x7f0000000380)='./file0\x00', 0x10000040)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r2, 0x2000009)
sendfile(r0, r2, 0x0, 0x20000000000006)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
tee(r3, r4, 0x8000000000003, 0x0)

2m30.193182874s ago: executing program 1 (id=120):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0)

2m30.192910222s ago: executing program 1 (id=121):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x3800813, &(0x7f0000000480)={[{@cruft}, {@map_acorn}, {@unhide}, {@session={'session', 0x3d, 0x31}}, {@nojoliet}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@nocompress}, {@overriderock}, {}, {@block={'block', 0x3d, 0x200}}, {}, {@overriderock}, {@nojoliet}, {@mode={'mode', 0x3d, 0xf}}]}, 0x1, 0xa61, &(0x7f0000001cc0)="$eJzs3c1vHGcZAPBn1nbsuiVJ21BK1MablKRua5y1QxOsHorjXTtbbC+yHakRh6Y0DopiKLQgtRVSUwlxagUSiAPcKk6cKvVCOaBeENzoiQMS6r9QcQqnRTO7a+/au17b+Kvp7+fs7nw8877P7Mw7b/ZrJvh8qR5rGatWs9sOx6/+cR8y5hC7XPz0/Q/eS2/v3Ikj0RPPJn+KGIiIfERvRDwa0TdVXKjMdSnodsT1iPg4IomI/qg9bsn1SH4ZD6yNfxzJ79N6Ozqy1ZLppsoX2kHvfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcBglU8VCYSw5EuX5qy/mayLyG0wVFypJVKsb5zSWqfkou+p38tFmdfY26k7/DQw0LvX96Im1kEciIn8mHquNPZZdkLx/IN66/5Hjzz3cm6stm7TJcxf0b73Y19986/bLKyvLr7WdmyS7mNUhU9tHZkrz5cVKeW5yppQvL1byExcvFs5fmV7MT5dnS4vXFpdKc/mphdLkUmUhPzz1VH5sYuJCvjR6rXJ1fqY4OltqTLz09fFC4WL+hdHvlCYXFivz518YXZy6Up6dLc/PZDHp7DTmUrojfru8lF8qTc7l8zdvrSxfWJdZT6zbf9OgsW7rkwaNdwsaL4yPj42Nj4+9U7969uqEi89OPHupUOgt1DwQ9YHYELFHOy2Hy32dN/MeHMVhZ3K1/j9iNsoxH1fjxci3/ZuKYixEJeY6zK9r9P9nz5c2rTay/rvW/9d7+d6m+SfTuzNxqj46MJDdb+j/O+Syf3+vx5vxVtyOl2MlVmI5XjvwjPb3byZKMR/lWIxKlGMuJrMp+fqUfEzExbgYhXgprsRQLEZvTEc5ZqMUi3EtFmMpStkeNRULUYrJWIpKLEQ+hmMqnop8jMVETMSFyEcpRuNaVOJqzMdMFGMyK+Vm3Mqe9wub5LgaNLaVoPFNgjZ05p36/1XrFymt/88J96Dcplt5D47isDPVev9/pHvo8FTLaO/eJQUAAADsqq/+PY6eeOhv/45I4vHsM/np8mypcNBpAQAAALso+7reY+lDXzr0eCRe/wMAAMC9Jsl+Y5dExGAM1YYav4TyJgAAAADcI7LP/09FMrQ2wet/AAAAuMesO8d+m3Psdo1IRhqn/83fqD3eqEfUxpLB6fJsaXSqMvvcWJzLzjKQ/dJgQ2k9EUlf9vODp+N0Ler0YO1xcK3EtM6BNGps9LmxeDrO1Fdk+In04YnhNpHjtcgna5FPNkf2REvkhTQSAO51Zzbpj7fa/z8dI7WIkZNZl997sqUP7sl61oKeFQAOi9Vr7Py3fkmzNv3/qdq5AU516v+/scnr/zTiobg5VPtKwWi8Eq/GStyIkah/42CoXamNqxHUvoYw0uXdgMH6VxY+uZSLkQ3vBwysrmtz7HKMx0jbdwSayk0aOVyoxfXs1VYAgP11ZtN+uNH/Z2+Sd+z/RzZ//d/U5/pKIQAcBqtXsN/uwNDWgw96HQGAVnppAAAAAAAAAAAAAAAAAAAAAAAAAAAA2H1bOoH/P85FrKwsR+z0YgFtBj7565+/1DHm3fsjBraT4eYDudiVnPsjYlfWvTGQ7HaBt3siYlcL3MbA87HtpdJtfBCp3usDyZ2swf5f5RzwgQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9kUT0tJuei+iPiEJEnN//rPbOnYNOYLfkd7ZYcjfuxhtxdLfTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4oquf/z8Xtcf7a5OiNxdxNiKuR8R3DzrH7RjoMv/uPuVx+Pwgu286/38uoi+qSfRGtVqtRiR9U8WFyly6KyT96fxP3//gvfTWsci3GwMbr6qQFpDW0HJxiXoNTVP6Wpd6MFtqsLj8+u2fvPqjfPFytmNeXpqeLc7NLHxrLfCR5MPaJRCaL4PQyPdnZ//yq6bJR+qVfxi9nVZkfb3TWb3FjfV+pd3SHerdglsry+NpTUulF5d++sNc86yH4nTEE8MRw601fT+9dajp9Prns1XyWfKL5Gj8Nq5n2z99NpJqkm6iY0k9ZGV59JVXV26s5vT2rTeaCjgeQxFxo7WVdclpKJJO+aQHm8j13by1slzIgtK7E13K21RTiWNrz2vLOjyY7TKD21qHfOd1yHR53usZXVifUTVtJL/+8cNxbtMt3d+mxHNdamwr+Sz5V3Il/hk/b7r+Ry7d/mejbetsU0QWmbsvXZ9sT2me19K8cmfX1ny8ecZL68vs2CrZA+/G9+Kbq9s/lx3/m9vNeId2s3o8er5pYod202haHdpFf2tL3dAu6rq1i40t9Q/HNvQorbXGiXU9Uv3o02mZep4nalEd8vxyPBPRe3JbR5RnuhxRui2/0/b/u2Q4/hN3XP8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4/JKInnbTcxFnI+J4RBxLx/MR1fUxd3ZQX24w2Umau2YnOX/+JB1XNLkbd+ONOLrfGQEAAAAAAACwNy4XP33/g/fSW/Z5fE98LVefk4/ojYjjyW/6pooLlbkuBfVFXG98pD/QPqTD5Lie3j2wNv5xOvZol/oO9usDAPC59r8AAAD//2xZa78=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

2m30.142576416s ago: executing program 1 (id=122):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x3e, 0x907, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x4, 0x0, 0x1, [@typed={0xc, 0xf, 0x0, 0x0, @u64=0x90}]}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800)

2m29.95335717s ago: executing program 1 (id=123):
r0 = syz_clone(0x2008411, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)

2m29.908394315s ago: executing program 32 (id=123):
r0 = syz_clone(0x2008411, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)

1m45.218128111s ago: executing program 2 (id=797):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0xe}}}, 0x24}}, 0x40004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)

1m45.217849431s ago: executing program 2 (id=798):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="4daa000000000000791098000000000018090000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x18, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c)

1m45.148789671s ago: executing program 2 (id=799):
io_setup(0x7d, &(0x7f0000000600)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)
migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa)

1m45.029076528s ago: executing program 2 (id=803):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nodiscard}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x40}}, {@grpjquota}, {@errors_remount}, {@init_itable}]}, 0x1, 0x4c5, &(0x7f0000000540)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x8e7})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0)

1m44.917237897s ago: executing program 2 (id=804):
r0 = socket$pppoe(0x18, 0x1, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000006c0)="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", 0x29a, 0x8014, 0x0, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)
recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0xfffffffffffffe1f, 0x0}, 0x1}], 0x3fffffffffffd3c, 0x40018003, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0)

1m42.830094937s ago: executing program 2 (id=818):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x2d, 0x0, "43454aaffb47c1dfdb641478600c76da8eaa4a4664404b8d1e9732f885e6c6ca9c3e416e20694831073c979cfc242672dc2689ad8e2243b6805a5d9b021a6431208ce130fba79482151714901bfd1768"}, 0xd8)

1m42.768087215s ago: executing program 33 (id=818):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x2d, 0x0, "43454aaffb47c1dfdb641478600c76da8eaa4a4664404b8d1e9732f885e6c6ca9c3e416e20694831073c979cfc242672dc2689ad8e2243b6805a5d9b021a6431208ce130fba79482151714901bfd1768"}, 0xd8)

53.565687059s ago: executing program 3 (id=1456):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x242, 0x161)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe89)
r3 = socket(0x1d, 0x2, 0x6)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000480)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b6800000cc9", 0x26, 0x24000094, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r2, 0x1e, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0), 0x0, 0x0}, 0x40)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

52.385957769s ago: executing program 3 (id=1463):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x782e971e})

52.38543285s ago: executing program 3 (id=1465):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x80001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0xe, &(0x7f0000000480)={@link_local, @local, @void, {@mpls_mc}}, 0x0)
write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "d2487b822050386f", "4946115b8e1acab11dda0ee7d5239a0ff818a4b776b238dccb81bfd9652cb934", "f728d519", "0cb42238c52f3b48"}, 0x38)
sendfile(r0, r1, &(0x7f0000000100)=0x10, 0x10001)

52.311330241s ago: executing program 3 (id=1467):
syz_mount_image$jfs(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x20108c2, &(0x7f0000000e40)=ANY=[], 0xff, 0x61f8, &(0x7f00000128c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xb8)
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

52.132353019s ago: executing program 3 (id=1472):
syz_open_pts(0xffffffffffffffff, 0xe02)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x800200, 0x0, 0x50323234, 0x7, 0xfffffffd, 0x0, 0x3}})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
accept4(r2, 0x0, &(0x7f0000000240), 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
syz_usb_control_io$uac1(r7, 0x0, 0x0)
syz_usb_control_io$uac1(r7, &(0x7f0000000040)={0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000093f750f5f238d81091cbf1816a7b667b8b53f1624b9d1cb8e14ca10c0dd54445ebe85acd4395484a96d41e4ec9e531dff489bce3ef381943b31e109744ee5f9a92cafba2620b4c80605248b6a6368ab28262e444d01df43ef761b2429c663964fd6fd7784862f7fba6a4dc8ae362cabf6516b411aa573af11803e44d12d30a910ecb1c3f162b2132347bb9d774accb4ef2a2c87c5790b4c87f4c486db8f9332c3162551197ab9075dda936b94945e2320564e94758feebecba3dfdd67822a020046488ce8166b7153e751cbb8f071751068ab57c271434f07fe150b8b66ca2114a677037442947c40fddb425ed202"], &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, 0x0)

51.866302799s ago: executing program 3 (id=1473):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
chmod(&(0x7f0000000180)='./file0\x00', 0x1d0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1a1)
fcntl$setlease(r3, 0x400, 0x1)

51.76577304s ago: executing program 34 (id=1473):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
chmod(&(0x7f0000000180)='./file0\x00', 0x1d0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1a1)
fcntl$setlease(r3, 0x400, 0x1)

18.277284626s ago: executing program 4 (id=1910):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
clock_settime(0xfffffffb, &(0x7f0000000140))

18.212943017s ago: executing program 4 (id=1911):
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

18.163046288s ago: executing program 4 (id=1912):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600))
ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0)

18.100696102s ago: executing program 4 (id=1913):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17.482585684s ago: executing program 0 (id=1919):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x40)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x3, {0xa, 0x10, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10017}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x44}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
chdir(&(0x7f0000000100)='./file0\x00')
rmdir(0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
prctl$PR_SET_PTRACER(0x59616d61, r2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6)
getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x74bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x3c}}, 0x84000)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x12a13, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x20004000)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))

16.763495808s ago: executing program 5 (id=1922):
syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000000)='./bus\x00', 0xc5a, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYBLOB="527aba7f34c75b760c24c172d26cedacfd7826b7584ab27c0f589ae09bc43513eb03a5391266f5d82d8b0f50fae8eed190793aac28b51c57df8f0fd700d2a0b9dbe32283b43aa4da6a3039bab48400d7c91de788f1b6029064c41fadddcd1849b09c2a9486603222db7e31746c9dbcc4ecc4270e52c8f1fe03ad9b70b8d02390955ff1fea8ffc0644bd58174ded0206e65018cd8ba58126e4a8779ed67108b3a2bfad50d129d4e5a15e77fb1e6b7c6dd49386579afd64207d2259f47595a6301b1f216f4cfc874976bfd8d335dae12eca4bb034bfb341f84cd", @ANYRES16=0x0], 0x2, 0x5c8, &(0x7f0000000f00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)

16.713946915s ago: executing program 5 (id=1923):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0xc, 0x1, &(0x7f00000001c0)="87", 0x9, 0x1, 0xc45, 0x1010, 0x8b, 0x0, 0x4, 'syz0\x00'})

16.713698611s ago: executing program 5 (id=1924):
syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000400)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6e6f64655f0dcbcc28b5ef6f8b2c6a6f75726e616c5f666c7573685f64697361626c65642c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656c696d69745f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c00"], 0x1, 0x5939, &(0x7f0000000940)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)

16.5004213s ago: executing program 0 (id=1925):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000440)=@ethtool_gfeatures={0x29}})

16.432834951s ago: executing program 0 (id=1926):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0xfffb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0xc73f, 0x81, 0x1})

16.317505978s ago: executing program 0 (id=1927):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@setlink={0x50, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x50}}, 0x0)

16.316878898s ago: executing program 5 (id=1928):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1, 0x7, 0x100000000}, 0x7}, 0x20, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_dev$media(&(0x7f00000001c0), 0x10, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000040)={0x0, 0x6, 0x0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000005c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x9, 0x1, 0x2, 0x2, 0xd, 0x6e}, 0x20)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x60, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x47}]}, 0x60}}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)

16.316639525s ago: executing program 0 (id=1929):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x38, r1, 0x8d61ddcfedb48df, 0x0, 0x1000000, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x38}}, 0x0)

16.316056171s ago: executing program 0 (id=1930):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0)

8.157438549s ago: executing program 5 (id=1931):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8948, &(0x7f0000000200)={'bond0\x00', 0x10000})

5.696303174s ago: executing program 4 (id=1932):
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x15, &(0x7f0000000140)={[{@norecovery}]}, 0xfe, 0x479, &(0x7f0000000940)="$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")
quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

5.696082979s ago: executing program 5 (id=1933):
r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103})
io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/84, 0x54}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000e00)=""/41, 0x29}], 0x1}, 0x1}], 0x2, 0x40000000, 0x0)
write(r3, &(0x7f0000000200)='~', 0x1)

2.058068258s ago: executing program 4 (id=1934):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00006e6000/0x2000)=nil)
syz_clone(0x201200, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 35 (id=1930):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0)

kernel console output (not intermixed with test programs):

76 interface 122 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  111.798174][ T1270] usb 4-1: config 176 interface 122 has no altsetting 0
[  111.817677][ T1270] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  111.833325][ T1270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.846755][ T1270] usb 4-1: Product: syz
[  111.849609][ T1270] usb 4-1: Manufacturer: syz
[  111.857188][ T1270] usb 4-1: SerialNumber: syz
[  111.869689][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  111.877960][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  111.878029][ T5886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.885133][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  111.888877][ T5886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.892434][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  111.895893][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  111.896071][ T5886] bond0 (unregistering): Released all slaves
[  111.904674][ T5247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  111.908252][ T5247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  111.914054][ T5247] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  111.917722][ T5247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  111.924385][ T5247] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  111.950045][ T8131] lo speed is unknown, defaulting to 1000
[  111.952603][ T5886] tipc: Disabling bearer <udp:s>
[  111.956932][ T5886] tipc: Left network mode
[  112.095258][ T1270] radioshark2 4-1:176.122: Invalid radioSHARK2 device
[  112.098038][ T1270] radioshark2 4-1:176.122: probe with driver radioshark2 failed with error -22
[  112.132612][ T1270] usbhid 4-1:176.122: couldn't find an input interrupt endpoint
[  112.152026][ T1270] usb 4-1: USB disconnect, device number 9
[  112.153558][ T8131] chnl_net:caif_netlink_parms(): no params data found
[  112.186371][ T5886] hsr_slave_0: left promiscuous mode
[  112.188570][ T5886] hsr_slave_1: left promiscuous mode
[  112.199509][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.203986][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.248407][ T5886] team0 (unregistering): Port device team_slave_1 removed
[  112.264166][ T5886] team0 (unregistering): Port device team_slave_0 removed
[  112.405373][ T8131] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.407615][ T8131] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.413869][ T8131] bridge_slave_0: entered allmulticast mode
[  112.417186][ T8131] bridge_slave_0: entered promiscuous mode
[  112.420304][ T8149] netlink: 104 bytes leftover after parsing attributes in process `syz.0.822'.
[  112.428335][ T8149] netlink: 104 bytes leftover after parsing attributes in process `syz.0.822'.
[  112.432833][ T8131] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.436401][ T8131] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.438902][ T8131] bridge_slave_1: entered allmulticast mode
[  112.447201][ T8131] bridge_slave_1: entered promiscuous mode
[  112.492822][ T8131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.498315][ T8131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.533983][ T1270] IPVS: starting estimator thread 0...
[  112.546647][ T8131] team0: Port device team_slave_0 added
[  112.550674][ T8131] team0: Port device team_slave_1 added
[  112.598499][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.601653][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.612264][ T8131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.633393][ T5886] IPVS: stop unused estimator thread 0...
[  112.635904][ T8163] IPVS: using max 69 ests per chain, 165600 per kthread
[  112.639025][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.642535][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.654424][ T8131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.706478][ T8131] hsr_slave_0: entered promiscuous mode
[  112.709355][ T8131] hsr_slave_1: entered promiscuous mode
[  112.727650][ T8131] debugfs: 'hsr0' already exists in 'hsr'
[  112.729971][ T8131] Cannot create hsr debugfs directory
[  112.777098][ T8181] loop3: detected capacity change from 0 to 8
[  112.900684][ T8131] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  112.904224][ T8131] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  112.908211][ T8131] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  112.918266][ T8131] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  112.991637][ T8131] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.994015][ T8131] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.996533][ T8131] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.997145][ T8186] loop3: detected capacity change from 0 to 32768
[  112.999237][ T8131] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.002999][ T8186] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.834 (8186)
[  113.027039][ T8186] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  113.031510][ T8186] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  113.034906][ T8186] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  113.093654][ T8131] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.104963][ T8186] BTRFS info (device loop3): rebuilding free space tree
[  113.113302][ T8186] BTRFS info (device loop3): disabling free space tree
[  113.116031][ T8186] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  113.119689][ T8186] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  113.127193][ T8186] BTRFS info (device loop3): enabling ssd optimizations
[  113.129910][ T8186] BTRFS info (device loop3): turning off barriers
[  113.132584][ T8186] BTRFS info (device loop3): turning on flush-on-commit
[  113.135337][ T8186] BTRFS info (device loop3): enabling disk space caching
[  113.138132][ T8186] BTRFS info (device loop3): force clearing of disk cache
[  113.141004][ T8186] BTRFS info (device loop3): doing ref verification
[  113.143500][ T8186] BTRFS info (device loop3): use lzo compression, level 0
[  113.161142][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.164394][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.174096][ T8131] 8021q: adding VLAN 0 to HW filter on device team0
[  113.184136][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.186302][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.212795][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.216128][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.218900][ T6232] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  113.276553][ T8131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  113.454284][ T8131] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.695259][ T8241] lo: Caught tx_queue_len zero misconfig
[  113.702442][ T8131] veth0_vlan: entered promiscuous mode
[  113.706731][ T8131] veth1_vlan: entered promiscuous mode
[  113.728984][ T8131] veth0_macvtap: entered promiscuous mode
[  113.735157][ T8131] veth1_macvtap: entered promiscuous mode
[  113.747209][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.755019][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.760067][ T5886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.764886][ T5886] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.780973][ T5886] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.786145][ T5886] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.815208][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.818212][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.835790][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.839038][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.951314][ T5247] Bluetooth: hci1: command tx timeout
[  114.235524][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.844'.
[  114.663383][ T4581] libceph: connect (1)[c::]:6789 error -101
[  114.681443][ T4581] libceph: mon0 (1)[c::]:6789 connect error
[  114.835566][ T8259] ceph: No mds server is up or the cluster is laggy
[  114.941000][ T5314] libceph: connect (1)[c::]:6789 error -101
[  114.944072][ T5314] libceph: mon0 (1)[c::]:6789 connect error
[  115.142117][ T8269] loop4: detected capacity change from 0 to 512
[  115.159944][ T8269] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  115.173021][ T8269] EXT4-fs (loop4): orphan cleanup on readonly fs
[  115.185018][ T8269] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.848: iget: bad i_size value: 360287970189639680
[  115.192942][ T8269] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.848: couldn't read orphan inode 15 (err -117)
[  115.200356][ T8269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  115.209250][ T8269] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.379811][ T8284] program syz.0.855 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  116.003346][ T8302] loop3: detected capacity change from 0 to 32768
[  116.038162][ T5247] Bluetooth: hci1: command tx timeout
[  116.076506][ T8302] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  116.076554][ T8302]   allowing incompatible features above 0.0: (unknown version)
[  116.076567][ T8302]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  116.148123][ T8323] netlink: 348 bytes leftover after parsing attributes in process `syz.4.869'.
[  116.159106][ T8302] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  116.177991][ T8302] bcachefs (loop3): initializing new filesystem
[  116.211643][ T8302] bcachefs (loop3): going read-write
[  116.227108][ T8302] bcachefs (loop3): marking superblocks
[  116.242755][ T8302] bcachefs (loop3): initializing freespace
[  116.251825][ T8302] bcachefs (loop3): done initializing freespace
[  116.302204][ T8302] bcachefs (loop3): reading snapshots table
[  116.304572][ T8302] bcachefs (loop3): reading snapshots done
[  116.315984][ T8302] bcachefs (loop3): done starting filesystem
[  116.423673][ T6232] bcachefs (loop3): shutting down
[  116.431550][ T6232] bcachefs (loop3): going read-only
[  116.466137][ T6232] bcachefs (loop3): finished waiting for writes to stop
[  116.471357][ T6232] bcachefs (loop3): flushing journal and stopping allocators, journal seq 6
[  116.514081][ T6232] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 8
[  116.538059][ T6232] bcachefs (loop3): clean shutdown complete, journal seq 9
[  116.543203][ T6232] bcachefs (loop3): marking filesystem clean
[  116.558450][ T6232] bcachefs (loop3): shutdown complete
[  116.634761][ T8336] loop4: detected capacity change from 0 to 764
[  116.655210][ T8336] Symlink component flag not implemented
[  116.657577][ T8336] Symlink component flag not implemented (7)
[  117.510636][ T8354] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  117.513548][ T8354] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  117.683850][ T8354] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  117.891756][ T8362] netlink: 'syz.0.883': attribute type 1 has an invalid length.
[  117.894678][ T8362] netlink: 172 bytes leftover after parsing attributes in process `syz.0.883'.
[  117.993236][ T8369] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  118.268663][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.890'.
[  118.317580][ T8385] usb usb1: usbfs: process 8385 (syz.3.892) did not claim interface 0 before use
[  118.384627][ T8387] loop3: detected capacity change from 0 to 4096
[  118.390806][ T8387] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  118.410312][ T8387] ntfs3(loop3): ino=1a, mi_enum_attr
[  118.413242][ T8387] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  118.416215][ T8387] ntfs3(loop3): ino=1a, mi_enum_attr
[  118.418656][ T8387] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  118.720753][   T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  118.871248][   T10] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  118.879155][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  118.883451][   T10] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  118.891743][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  118.895640][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  118.899335][   T10] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  118.904663][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  118.908440][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  118.913156][   T10] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  118.917644][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  118.922617][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  118.926357][   T10] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  118.931187][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  118.935371][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  118.938970][   T10] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  118.944407][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  118.948342][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  118.955832][   T10] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  118.962674][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  118.969744][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  118.973908][   T10] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  118.978689][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  118.983659][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  118.987169][   T10] usb 4-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  118.991839][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  118.998627][   T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  119.003520][   T10] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  119.006833][   T10] usb 4-1: Product: syz
[  119.008497][   T10] usb 4-1: Manufacturer: syz
[  119.011497][   T10] usb 4-1: SerialNumber: syz
[  119.015227][   T10] usb 4-1: config 0 descriptor??
[  119.021508][   T10] yurex 4-1:0.0: Could not find endpoints
[  119.221738][   T47] usb 4-1: USB disconnect, device number 10
[  119.470705][ T5847] Bluetooth: hci1: command 0x0419 tx timeout
[  120.041544][ T8420] netlink: 'syz.3.907': attribute type 1 has an invalid length.
[  120.044535][ T8420] netlink: 224 bytes leftover after parsing attributes in process `syz.3.907'.
[  120.257010][ T8422] loop4: detected capacity change from 0 to 32768
[  120.275690][ T8422] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  120.313302][ T8131] ocfs2: Unmounting device (7,4) on (node local)
[  120.487330][ T8457] loop4: detected capacity change from 0 to 256
[  120.495645][ T8457] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  120.541768][ T8463] netlink: 40 bytes leftover after parsing attributes in process `syz.0.926'.
[  120.545408][ T8463] tipc: Invalid UDP bearer configuration
[  120.545429][ T8463] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  120.850761][ T5907] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  121.002269][ T5907] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  121.006490][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.011975][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.016738][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  121.024148][ T5907] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  121.027669][ T5907] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  121.031347][ T5907] usb 4-1: Manufacturer: syz
[  121.034516][ T5907] usb 4-1: config 0 descriptor??
[  121.444333][ T5907] appleir 0003:05AC:8243.0005: unknown main item tag 0x0
[  121.449207][ T5907] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  121.550833][ T5847] Bluetooth: hci1: command 0x0419 tx timeout
[  121.582908][ T8472] loop4: detected capacity change from 0 to 32768
[  121.591319][ T8472] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.929 (8472)
[  121.603520][ T8472] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  121.606774][ T8472] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  121.660703][ T8472] BTRFS info (device loop4): enabling ssd optimizations
[  121.665416][ T8472] BTRFS info (device loop4): enabling free space tree
[  121.693878][ T8131] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  121.702304][ T1270] usb 4-1: USB disconnect, device number 11
[  121.946999][ T8505] loop4: detected capacity change from 0 to 1024
[  121.950303][ T8505] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (61418!=35945)
[  121.954257][ T8505] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  121.958729][ T8505] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  121.965415][ T8505] EXT4-fs (loop4): orphan cleanup on readonly fs
[  121.967960][ T8505] EXT4-fs error (device loop4): ext4_quota_enable:7128: inode #3: comm syz.4.937: iget: bad i_size value: 1407374883559424
[  121.973322][ T8505] EXT4-fs error (device loop4): ext4_quota_enable:7131: comm syz.4.937: Bad quota inode: 3, type: 0
[  121.977759][ T8505] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  121.983447][ T8505] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  121.986627][ T8505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  121.995942][ T8505] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (61418!=35945)
[  122.011581][ T8131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.165676][ T8514] kAFS: unable to lookup cell 'syz169@=R'
[  122.398314][ T8516] loop4: detected capacity change from 0 to 40427
[  122.416284][ T8516] F2FS-fs (loop4): invalid crc value
[  122.462936][ T8516] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  122.467235][ T8516] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  122.515649][ T8131] syz-executor: attempt to access beyond end of device
[  122.515649][ T8131] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  122.521194][ T8131] CPU: 1 UID: 0 PID: 8131 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  122.521212][ T8131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  122.521221][ T8131] Call Trace:
[  122.521227][ T8131]  <TASK>
[  122.521233][ T8131]  dump_stack_lvl+0x189/0x250
[  122.521254][ T8131]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.521269][ T8131]  ? __pfx_queue_work_on+0x10/0x10
[  122.521282][ T8131]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  122.521300][ T8131]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  122.521319][ T8131]  f2fs_handle_critical_error+0x37c/0x540
[  122.521340][ T8131]  f2fs_write_end_io+0x886/0xb60
[  122.521358][ T8131]  __submit_merged_bio+0x27a/0x6a0
[  122.521377][ T8131]  __submit_merged_write_cond+0x255/0x530
[  122.521396][ T8131]  f2fs_write_data_pages+0x261d/0x3000
[  122.521415][ T8131]  ? arch_stack_walk+0xfc/0x150
[  122.521439][ T8131]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  122.521464][ T8131]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  122.521484][ T8131]  ? rcu_is_watching+0x15/0xb0
[  122.521508][ T8131]  ? folios_put_refs+0x559/0x640
[  122.521525][ T8131]  ? __pfx_folios_put_refs+0x10/0x10
[  122.521538][ T8131]  ? rcu_is_watching+0x15/0xb0
[  122.521550][ T8131]  ? lru_add+0xa2f/0xd80
[  122.521563][ T8131]  ? lru_add+0x198/0xd80
[  122.521576][ T8131]  ? do_raw_spin_lock+0x121/0x290
[  122.521595][ T8131]  ? do_raw_spin_unlock+0x4d/0x240
[  122.521610][ T8131]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  122.521630][ T8131]  do_writepages+0x32e/0x550
[  122.521648][ T8131]  ? rcu_is_watching+0x15/0xb0
[  122.521661][ T8131]  ? do_raw_spin_unlock+0x4d/0x240
[  122.521676][ T8131]  filemap_fdatawrite+0x199/0x240
[  122.521694][ T8131]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  122.521722][ T8131]  ? rcu_is_watching+0x15/0xb0
[  122.521735][ T8131]  ? do_raw_spin_unlock+0x4d/0x240
[  122.521751][ T8131]  f2fs_sync_dirty_inodes+0x31f/0x830
[  122.521769][ T8131]  f2fs_write_checkpoint+0x95a/0x1df0
[  122.521789][ T8131]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  122.521815][ T8131]  ? kill_f2fs_super+0x298/0x6c0
[  122.521829][ T8131]  kill_f2fs_super+0x2c3/0x6c0
[  122.521843][ T8131]  ? __pfx_kill_f2fs_super+0x10/0x10
[  122.521855][ T8131]  ? radix_tree_delete_item+0x2b6/0x400
[  122.521874][ T8131]  ? shrinker_free+0x2ce/0x3e0
[  122.521889][ T8131]  deactivate_locked_super+0xbc/0x130
[  122.521904][ T8131]  cleanup_mnt+0x425/0x4c0
[  122.521919][ T8131]  task_work_run+0x1d4/0x260
[  122.521937][ T8131]  ? __pfx_task_work_run+0x10/0x10
[  122.521953][ T8131]  ? __x64_sys_umount+0x122/0x160
[  122.521969][ T8131]  ? __pfx___x64_sys_umount+0x10/0x10
[  122.521986][ T8131]  ? rcu_is_watching+0x15/0xb0
[  122.521999][ T8131]  exit_to_user_mode_loop+0xec/0x110
[  122.522017][ T8131]  do_syscall_64+0x2bd/0x3b0
[  122.522036][ T8131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.522074][ T8131]  ? exc_page_fault+0x9f/0xf0
[  122.522093][ T8131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.522106][ T8131] RIP: 0033:0x7fbb6098ff17
[  122.522118][ T8131] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  122.522130][ T8131] RSP: 002b:00007fff22874ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  122.522146][ T8131] RAX: 0000000000000000 RBX: 00007fbb60a11c05 RCX: 00007fbb6098ff17
[  122.522155][ T8131] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff22874da0
[  122.522163][ T8131] RBP: 00007fff22874da0 R08: 0000000000000000 R09: 0000000000000000
[  122.522171][ T8131] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff22875e30
[  122.522180][ T8131] R13: 00007fbb60a11c05 R14: 000000000001de06 R15: 00007fff22875e70
[  122.522194][ T8131]  </TASK>
[  122.522200][ T8131] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  122.734451][ T8548] loop3: detected capacity change from 0 to 64
[  122.736949][ T8548] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  122.916594][ T8564] netlink: 'syz.4.961': attribute type 21 has an invalid length.
[  122.919159][ T8564] netlink: 128 bytes leftover after parsing attributes in process `syz.4.961'.
[  122.923406][ T8564] netlink: 'syz.4.961': attribute type 4 has an invalid length.
[  122.926311][ T8564] netlink: 3 bytes leftover after parsing attributes in process `syz.4.961'.
[  123.298273][ T8577] loop4: detected capacity change from 0 to 256
[  123.307478][ T8577] FAT-fs (loop4): Directory bread(block 1285) failed
[  123.313546][ T8577] FAT-fs (loop4): Directory bread(block 1285) failed
[  123.318657][ T8577] FAT-fs (loop4): FAT read failed (blocknr 1281)
[  123.475972][ T8584] loop4: detected capacity change from 0 to 32768
[  123.479087][ T8584] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.967 (8584)
[  123.493321][ T8584] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  123.496490][ T8584] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  123.516370][ T8584] BTRFS info (device loop4): enabling ssd optimizations
[  123.518555][ T8584] BTRFS info (device loop4): enabling free space tree
[  123.522029][ T8584] BTRFS info (device loop4): use lzo compression, level 0
[  123.559644][ T8131] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  123.602328][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.968'.
[  123.630759][ T5847] Bluetooth: hci1: command 0x0419 tx timeout
[  124.104650][ T8618] loop4: detected capacity change from 0 to 32768
[  124.129713][ T8618] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  124.138479][ T8618] XFS (loop4): Ending clean mount
[  124.141487][ T8618] XFS (loop4): Quotacheck needed: Please wait.
[  124.146545][ T8618] XFS (loop4): Quotacheck: Done.
[  124.170096][ T8131] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  124.173281][ T1270] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  124.266727][ T8650] Bluetooth: MGMT ver 1.23
[  124.321616][ T1270] usb 4-1: Using ep0 maxpacket: 32
[  124.325021][ T1270] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  124.328119][ T1270] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  124.332172][ T1270] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  124.335543][ T1270] usb 4-1: config 1 has no interface number 0
[  124.337754][ T1270] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  124.342901][ T1270] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  124.348835][ T1270] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  124.354346][ T1270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.369835][ T1270] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  124.566980][ T1270] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  124.732013][ T8681] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.998'.
[  124.735269][ T8681] netlink: 5 bytes leftover after parsing attributes in process `syz.0.998'.
[  124.987035][   T47] usb 4-1: USB disconnect, device number 12
[  124.992364][   T47] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  125.020814][ T8690] loop4: detected capacity change from 0 to 32768
[  125.027561][ T8690] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1001 (8690)
[  125.049290][ T8690] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  125.054206][ T8690] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  125.154725][ T8690] BTRFS info (device loop4): enabling ssd optimizations
[  125.157495][ T8690] BTRFS info (device loop4): enabling free space tree
[  125.178388][ T8131] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  125.369170][ T8713] loop4: detected capacity change from 0 to 32768
[  125.372429][ T8713] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1004 (8713)
[  125.381908][ T8713] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  125.385346][ T8713] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  125.442072][ T8713] BTRFS info (device loop4): enabling ssd optimizations
[  125.444428][ T8713] BTRFS info (device loop4): turning on async discard
[  125.446698][ T8713] BTRFS info (device loop4): enabling free space tree
[  125.454972][   T28] BTRFS warning (device loop4): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x59db5ebf level 0
[  125.459825][ T8713] BTRFS: error (device loop4) in btrfs_fill_super:988: errno=-5 IO failure
[  125.467130][ T8713] BTRFS error (device loop4 state E): commit super ret -30
[  125.705649][ T8746] loop4: detected capacity change from 0 to 32768
[  125.720368][ T8746] JBD2: Ignoring recovery information on journal
[  125.725028][ T5847] Bluetooth: hci1: command 0x0419 tx timeout
[  125.749575][ T8746] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  125.771024][ T5893] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  125.789217][ T8131] ocfs2: Unmounting device (7,4) on (node local)
[  125.932709][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1018'.
[  125.932847][ T5893] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  125.941717][ T5893] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  125.945240][ T5893] usb 4-1: config 1 interface 0 has no altsetting 0
[  125.963459][ T5893] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  125.972321][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.975411][ T5893] usb 4-1: Product: syz
[  125.977056][ T5893] usb 4-1: Manufacturer: syz
[  125.978756][ T5893] usb 4-1: SerialNumber: syz
[  126.051180][ T8743] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  126.053557][ T8743] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  126.611936][ T8784] netlink: 'syz.0.1029': attribute type 7 has an invalid length.
[  126.618426][ T8784] : entered promiscuous mode
[  126.737328][ T8794] Bluetooth: hci0: Opcode 0x080f failed: -22
[  127.075773][ T8813] netlink: 'syz.0.1044': attribute type 5 has an invalid length.
[  127.081986][ T5893] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4a:dd:ec:e6:23:5b
[  127.089463][ T5893] rtl8150 4-1:1.0: eth9: rtl8150 is detected
[  127.097288][ T5893] usb 4-1: USB disconnect, device number 13
[  127.231876][ T8826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1050'.
[  127.266257][   T33] audit: type=1326 audit(1755846154.237:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8827 comm="syz.0.1051" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f582078ebe9 code=0x0
[  127.540554][   T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  127.710827][   T47] usb 5-1: Using ep0 maxpacket: 8
[  127.716971][   T47] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  127.726737][   T47] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  127.733779][   T47] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.741984][   T47] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  127.745595][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.748908][   T47] usb 5-1: Product: syz
[  127.751827][   T47] usb 5-1: Manufacturer: syz
[  127.753731][   T47] usb 5-1: SerialNumber: syz
[  127.790530][ T5847] Bluetooth: hci1: command 0x0419 tx timeout
[  128.222402][   T47] usb 5-1: 0:2 : does not exist
[  128.427497][   T47] usb 5-1: USB disconnect, device number 2
[  128.621983][ T6175] udevd[6175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  128.750531][ T5847] Bluetooth: hci0: command tx timeout
[  128.843817][ T8867] loop3: detected capacity change from 0 to 128
[  128.848730][ T8867] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  128.914428][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'.
[  128.955699][ T8875] loop6: detected capacity change from 0 to 7
[  128.958374][ T8875] Dev loop6: unable to read RDB block 7
[  128.960825][ T8875]  loop6: AHDI p2 p3
[  128.962272][ T8875] loop6: partition table partially beyond EOD, truncated
[  128.965049][ T8875] loop6: p2 start 3876867210 is beyond EOD, truncated
[  129.002986][ T8879] loop3: detected capacity change from 0 to 1024
[  129.006382][ T8879] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  129.064566][ T8885] team0: Device gtp0 is of different type
[  129.289706][ T8893] loop3: detected capacity change from 0 to 32768
[  129.452654][ T5907] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[  129.644533][ T5907] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  129.647605][ T5907] usb 5-1: config 0 has no interface number 0
[  129.649903][ T5907] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  129.654624][ T5907] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  129.654772][ T8925] loop3: detected capacity change from 0 to 128
[  129.658436][ T5907] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  129.658451][ T5907] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  129.658463][ T5907] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  129.658472][ T5907] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  129.658494][ T5907] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  129.658503][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.669961][ T5907] usb 5-1: config 0 descriptor??
[  129.693925][ T8897] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  129.701240][ T8925] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  129.701578][ T5907] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  129.920631][   T47] usb 5-1: USB disconnect, device number 3
[  129.927174][   T47] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  130.010815][ T5893] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  130.161622][ T5893] usb 4-1: not running at top speed; connect to a high speed hub
[  130.165473][ T5893] usb 4-1: config 2 has an invalid interface number: 33 but max is 0
[  130.168521][ T5893] usb 4-1: config 2 has no interface number 0
[  130.171170][ T5893] usb 4-1: config 2 interface 33 has no altsetting 0
[  130.176031][ T5893] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02
[  130.179590][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.183285][ T5893] usb 4-1: Product: syz
[  130.184971][ T5893] usb 4-1: Manufacturer: syz
[  130.186803][ T5893] usb 4-1: SerialNumber: syz
[  130.403065][ T5893] go7007 4-1:2.33: probe with driver go7007 failed with error -12
[  130.408189][ T5893] usb 4-1: USB disconnect, device number 14
[  131.234785][ T8955] loop3: detected capacity change from 0 to 32768
[  131.244499][ T8955] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  131.247561][ T5863] (kworker/u8:3,5863,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  131.270557][ T6232] ocfs2: Unmounting device (7,3) on (node local)
[  131.370318][ T8961] IPVS: Scheduler module ip_vs_sip not found
[  132.219963][ T8983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1122'.
[  132.371823][ T8992] loop4: detected capacity change from 0 to 128
[  132.379488][ T8992] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  132.385030][ T8992] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.452758][ T8131] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  132.681894][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.681979][ T9011] loop4: detected capacity change from 0 to 256
[  132.684454][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.700116][ T9011] FAT-fs (loop4): Directory bread(block 64) failed
[  132.714063][ T9011] FAT-fs (loop4): Directory bread(block 65) failed
[  132.730656][ T9011] FAT-fs (loop4): Directory bread(block 66) failed
[  132.733217][ T9011] FAT-fs (loop4): Directory bread(block 67) failed
[  132.735710][ T9011] FAT-fs (loop4): Directory bread(block 68) failed
[  132.738188][ T9011] FAT-fs (loop4): Directory bread(block 69) failed
[  132.759837][ T8998] loop3: detected capacity change from 0 to 32768
[  132.762055][ T9011] FAT-fs (loop4): Directory bread(block 70) failed
[  132.762080][ T9011] FAT-fs (loop4): Directory bread(block 71) failed
[  132.762125][ T9011] FAT-fs (loop4): Directory bread(block 72) failed
[  132.762139][ T9011] FAT-fs (loop4): Directory bread(block 73) failed
[  132.792115][ T8998] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1129 (8998)
[  132.810100][ T8998] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  132.817456][ T8998] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  132.926672][ T8998] BTRFS info (device loop3): enabling ssd optimizations
[  132.929006][ T8998] BTRFS info (device loop3): enabling free space tree
[  132.931917][ T8998] BTRFS info (device loop3): use zstd compression, level 3
[  132.972550][ T6232] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  133.064969][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1135'.
[  133.199797][ T9032] loop4: detected capacity change from 0 to 32768
[  133.205041][ T9055] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  133.208191][ T9032] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1133 (9032)
[  133.227264][ T9032] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  133.241366][ T9032] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  133.268809][ T9032] BTRFS info (device loop4): enabling ssd optimizations
[  133.278345][ T9032] BTRFS info (device loop4): enabling free space tree
[  133.328005][   T33] audit: type=1326 audit(1755846160.297:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.0.1143" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582078ebe9 code=0x7ffc0000
[  133.346256][ T8131] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  133.352857][   T33] audit: type=1326 audit(1755846160.297:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.0.1143" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f582078ebe9 code=0x7ffc0000
[  133.517474][ T9093] netlink: 'syz.4.1150': attribute type 1 has an invalid length.
[  133.542253][ T9093] bond1: (slave gretap1): making interface the new active one
[  133.546254][ T9093] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  133.549817][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'.
[  133.651194][ T9107] loop3: detected capacity change from 0 to 128
[  133.658699][ T9107] EXT4-fs: Ignoring removed nobh option
[  133.662960][ T9107] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  133.667872][ T9107] ext4 filesystem being mounted at /299/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  133.692296][ T6232] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  134.011906][ T5907] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  134.161860][ T9126] loop3: detected capacity change from 0 to 32768
[  134.170636][ T5907] usb 5-1: Using ep0 maxpacket: 16
[  134.177156][ T5907] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  134.183454][ T5907] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  134.191841][ T5907] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  134.195417][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.198551][ T5907] usb 5-1: Product: syz
[  134.200203][ T5907] usb 5-1: Manufacturer: syz
[  134.203110][ T5907] usb 5-1: SerialNumber: syz
[  134.477483][ T5907] usb 5-1: 0:2 : does not exist
[  134.550467][   T47] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  134.701088][   T47] usb 4-1: Using ep0 maxpacket: 32
[  134.705732][   T47] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  134.709265][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.714518][   T47] usb 4-1: config 0 descriptor??
[  134.723877][   T47] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  134.736327][   T47] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8
[  134.964428][   T47] usb 4-1: USB disconnect, device number 15
[  135.193016][ T9144] loop4: detected capacity change from 0 to 4096
[  135.210771][ T9145] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.265448][ T5907] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  135.279123][ T5907] usb 5-1: USB disconnect, device number 4
[  135.297062][ T6175] udevd[6175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  135.303067][ T9149] loop4: detected capacity change from 0 to 1024
[  135.310016][ T9149] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  135.318205][ T9149] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  135.330114][ T9149] EXT4-fs (loop4): invalid journal inode
[  135.332288][ T9149] EXT4-fs (loop4): can't get journal size
[  135.335477][ T9149] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 17104912: comm syz.4.1172: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  135.340902][ T9149] EXT4-fs (loop4): failed to initialize system zone (-117)
[  135.343498][ T9149] EXT4-fs (loop4): mount failed
[  135.758560][ T9178] loop3: detected capacity change from 0 to 32768
[  135.764153][ T9178] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1187 (9178)
[  135.813511][ T9178] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  135.820371][ T9178] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  135.884464][ T9178] BTRFS info (device loop3): enabling ssd optimizations
[  135.895875][ T9178] BTRFS info (device loop3): enabling free space tree
[  136.028376][ T6232] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  136.748359][ T9241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1208'.
[  136.752062][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1208'.
[  137.294670][ T9264] loop3: detected capacity change from 0 to 512
[  137.302757][ T9264] EXT4-fs: Ignoring removed oldalloc option
[  137.313370][ T9264] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1217: Parent and EA inode have the same ino 15
[  137.318531][ T9264] EXT4-fs (loop3): 1 orphan inode deleted
[  137.322184][ T9264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.340784][ T9264] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1217: invalid indirect mapped block 234881024 (level 0)
[  137.369043][ T6232] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.482376][ T9270] loop3: detected capacity change from 0 to 1024
[  137.485535][ T9270] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  137.489238][ T9270] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  137.496654][ T9270] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  137.499956][ T9270] EXT4-fs (loop3): orphan cleanup on readonly fs
[  137.505284][ T9270] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.1219: Freeing blocks not in datazone - block = 0, count = 4096
[  137.520673][ T9270] EXT4-fs (loop3): Remounting filesystem read-only
[  137.523452][ T9270] EXT4-fs (loop3): 1 orphan inode deleted
[  137.526153][ T9270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  137.578049][ T6232] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.919342][ T9295] loop3: detected capacity change from 0 to 32768
[  137.938074][ T9295] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  137.989137][ T6232] ocfs2: Unmounting device (7,3) on (node local)
[  138.041149][ T5893] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  138.206215][ T5893] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  138.209911][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.213324][ T5893] usb 5-1: Product: syz
[  138.221455][ T5893] usb 5-1: Manufacturer: syz
[  138.223344][ T5893] usb 5-1: SerialNumber: syz
[  138.232410][ T5893] usb 5-1: config 0 descriptor??
[  139.007402][ T9323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1241'.
[  139.101376][ T5893] usb 5-1: f81604_write: reg: 105 data: 65 failed: -EPROTO
[  139.104781][ T5893] f81604 5-1:0.0: Setting termination of CH#1 failed: -EPROTO
[  139.107742][ T5893] f81604 5-1:0.0: probe with driver f81604 failed with error -71
[  139.114113][ T5893] usb 5-1: USB disconnect, device number 5
[  140.007336][ T9337] loop3: detected capacity change from 0 to 4096
[  140.455261][ T9341] loop3: detected capacity change from 0 to 32768
[  140.498227][ T9341] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  140.498251][ T9341]   allowing incompatible features above 0.0: (unknown version)
[  140.498260][ T9341]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  140.517655][ T9341] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  140.571702][ T9341] bcachefs (loop3): initializing new filesystem
[  140.588057][ T9341] bcachefs (loop3): going read-write
[  140.596634][ T9359] comedi comedi0: pcm3724: I/O port conflict (0x3,16)
[  140.611551][ T9341] bcachefs (loop3): marking superblocks
[  140.632850][ T9341] bcachefs (loop3): initializing freespace
[  140.643533][ T9341] bcachefs (loop3): done initializing freespace
[  140.658377][ T9341] bcachefs (loop3): reading snapshots table
[  140.663469][ T9341] bcachefs (loop3): reading snapshots done
[  140.682487][ T9341] bcachefs (loop3): done starting filesystem
[  140.746454][ T6232] bcachefs (loop3): shutting down
[  140.748494][ T6232] bcachefs (loop3): going read-only
[  140.750827][ T6232] bcachefs (loop3): finished waiting for writes to stop
[  140.754192][ T6232] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  140.767859][ T6232] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  140.772378][ T6232] bcachefs (loop3): clean shutdown complete, journal seq 4
[  140.776560][ T6232] bcachefs (loop3): marking filesystem clean
[  140.789065][ T6232] bcachefs (loop3): shutdown complete
[  140.980705][ T5314] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  141.132756][ T5314] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  141.136041][ T5314] usb 5-1: config 0 has no interface number 0
[  141.138526][ T5314] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  141.142692][ T5314] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  141.147066][ T5314] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  141.153542][ T5314] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  141.157002][ T5314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.160108][ T5314] usb 5-1: Product: syz
[  141.163484][ T5314] usb 5-1: Manufacturer: syz
[  141.165340][ T5314] usb 5-1: SerialNumber: syz
[  141.168570][ T5314] usb 5-1: config 0 descriptor??
[  141.171770][ T9365] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  141.175799][ T5314] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  141.179952][ T5314] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  141.183746][ T5314] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  141.378168][ T5893] usb 5-1: USB disconnect, device number 6
[  141.390000][ T5893] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  141.398923][ T5893] cyberjack 5-1:0.69: device disconnected
[  141.924333][ T9390] loop3: detected capacity change from 0 to 32768
[  141.937861][ T9390] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  141.976747][ T6232] ocfs2: Unmounting device (7,3) on (node local)
[  141.992544][ T9398] loop4: detected capacity change from 0 to 4096
[  142.242217][   T33] audit: type=1800 audit(1755846169.217:16): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1267" name="file1" dev="loop4" ino=30 res=0 errno=0
[  142.298000][ T9420] Unsupported ieee802154 address type: 0
[  142.572377][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1284'.
[  142.583861][ T5886] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.583918][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1284'.
[  142.586714][ T5886] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.594251][ T5886] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.597327][ T5886] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.657332][ T9438] loop4: detected capacity change from 0 to 2048
[  142.684527][ T9438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.709770][ T8131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.601456][ T5314] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  143.750593][ T5314] usb 4-1: Using ep0 maxpacket: 32
[  143.756764][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7
[  143.761825][ T5314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024
[  143.772473][ T5314] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  143.775301][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.779723][ T5314] usb 4-1: Product: syz
[  143.782418][ T5314] usb 4-1: Manufacturer: syz
[  143.784402][ T5314] usb 4-1: SerialNumber: syz
[  143.788408][ T5314] usb 4-1: config 0 descriptor??
[  143.796582][ T5314] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  143.834604][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1292'.
[  143.998124][ T5863] usb 4-1: Failed to submit usb control message: -71
[  143.998161][ T5314] usb 4-1: USB disconnect, device number 16
[  144.000232][ T5863] usb 4-1: unable to send the bmi data to the device: -71
[  144.004855][ T5863] usb 4-1: unable to get target info from device
[  144.007624][ T5863] usb 4-1: could not get target info (-71)
[  144.009631][ T5863] usb 4-1: could not probe fw (-71)
[  144.118586][ T9463] loop4: detected capacity change from 0 to 164
[  145.505334][ T1270] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  145.544957][ T9476] loop3: detected capacity change from 0 to 128
[  145.549073][ T9476] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  145.555707][ T9476] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  145.662023][ T1270] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[  145.665229][ T1270] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.678476][ T1270] usb 5-1: config 0 has no interface number 0
[  145.681713][ T1270] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  145.703713][ T1270] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  145.707570][ T1270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.711150][ T1270] usb 5-1: Product: syz
[  145.712971][ T1270] usb 5-1: Manufacturer: syz
[  145.714939][ T1270] usb 5-1: SerialNumber: syz
[  145.721133][ T1270] usb 5-1: config 0 descriptor??
[  145.724721][ T9474] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  145.727967][ T9474] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  145.732809][ T1270] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  145.831252][   T47] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  145.937555][ T1270] usb 5-1: USB disconnect, device number 7
[  145.984502][   T47] usb 4-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 185
[  145.988472][   T47] usb 4-1: config 0 interface 0 has no altsetting 0
[  145.993678][   T47] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  145.997086][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.000114][   T47] usb 4-1: Product: syz
[  146.001852][   T47] usb 4-1: Manufacturer: syz
[  146.003701][   T47] usb 4-1: SerialNumber: syz
[  146.008790][   T47] usb 4-1: config 0 descriptor??
[  146.011863][ T9478] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  146.016068][   T47] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected
[  146.019104][   T47] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[  146.023064][   T47] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[  146.026127][   T47] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[  146.029145][   T47] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[  146.032739][   T47] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85
[  146.035798][   T47] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5
[  146.039520][   T47] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  146.043534][   T47] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83
[  146.046572][   T47] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3
[  146.049557][   T47] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4
[  146.053162][   T47] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86
[  146.056203][   T47] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6
[  146.060013][   T47] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  146.220733][ T1270] usb 4-1: USB disconnect, device number 17
[  146.225225][ T1270] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  146.231063][ T1270] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  146.237038][ T1270] keyspan 4-1:0.0: device disconnected
[  146.747271][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1309'.
[  147.299387][   T33] audit: type=1800 audit(1755846174.267:17): pid=9494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1307" name="/" dev="fuse" ino=0 res=0 errno=0
[  147.790269][ T9522] lo speed is unknown, defaulting to 1000
[  147.806037][ T9522] lo speed is unknown, defaulting to 1000
[  147.808273][ T9522] lo speed is unknown, defaulting to 1000
[  147.827559][ T9522] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  147.843439][ T9522] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  147.862426][ T9522] lo speed is unknown, defaulting to 1000
[  147.865079][ T9522] lo speed is unknown, defaulting to 1000
[  147.867651][ T9522] lo speed is unknown, defaulting to 1000
[  149.283678][   T33] audit: type=1326 audit(1755846176.257:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.0.1332" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f582078ebe9 code=0x0
[  149.506255][ T9586] libceph: resolve '4' (ret=-3): failed
[  149.592683][ T9594] loop3: detected capacity change from 0 to 512
[  149.598868][ T9594] EXT4-fs: Ignoring removed oldalloc option
[  149.606636][ T9594] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1349: Parent and EA inode have the same ino 15
[  149.611795][ T9594] EXT4-fs (loop3): 1 orphan inode deleted
[  149.614967][ T9594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.628220][ T6232] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.810556][ T5893] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  149.980534][ T5893] usb 5-1: Using ep0 maxpacket: 16
[  149.984872][ T5893] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[  149.990512][ T5893] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  149.994119][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.997217][ T5893] usb 5-1: Product: syz
[  149.998832][ T5893] usb 5-1: Manufacturer: syz
[  150.001776][ T5893] usb 5-1: SerialNumber: syz
[  150.009606][ T5893] usb 5-1: config 0 descriptor??
[  150.014683][ T5893] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  150.018980][ T5893] usb 5-1: Detected FT232R
[  150.219308][ T5893] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  150.429091][ T5893] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  150.548105][ T9609] loop3: detected capacity change from 0 to 1024
[  150.634358][ T5893] usb 5-1: USB disconnect, device number 8
[  150.644110][ T5893] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  150.656645][ T5893] ftdi_sio 5-1:0.0: device disconnected
[  150.751488][ T9611] loop3: detected capacity change from 0 to 40427
[  150.754932][ T9611] F2FS-fs (loop3): build fault injection rate: 771
[  150.758415][ T9611] F2FS-fs (loop3): invalid crc value
[  150.786093][ T9611] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  150.790315][ T9611] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  150.798428][   T33] audit: type=1800 audit(1755846177.767:19): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1355" name="file1" dev="loop3" ino=10 res=0 errno=0
[  150.817149][ T6232] syz-executor: attempt to access beyond end of device
[  150.817149][ T6232] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  150.823589][ T6232] CPU: 1 UID: 0 PID: 6232 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  150.823609][ T6232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.823618][ T6232] Call Trace:
[  150.823623][ T6232]  <TASK>
[  150.823629][ T6232]  dump_stack_lvl+0x189/0x250
[  150.823651][ T6232]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.823666][ T6232]  ? __pfx_queue_work_on+0x10/0x10
[  150.823679][ T6232]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  150.823697][ T6232]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  150.823717][ T6232]  f2fs_handle_critical_error+0x37c/0x540
[  150.823736][ T6232]  f2fs_write_end_io+0x886/0xb60
[  150.823755][ T6232]  __submit_merged_bio+0x27a/0x6a0
[  150.823773][ T6232]  __submit_merged_write_cond+0x255/0x530
[  150.823792][ T6232]  f2fs_write_data_pages+0x261d/0x3000
[  150.823822][ T6232]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  150.823854][ T6232]  ? ktime_get+0x3e/0x1f0
[  150.823869][ T6232]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  150.823884][ T6232]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  150.823900][ T6232]  ? rcu_is_watching+0x15/0xb0
[  150.823912][ T6232]  ? css_rstat_updated+0x23a/0x4f0
[  150.823929][ T6232]  ? __resched_curr+0x202/0x3e0
[  150.823942][ T6232]  ? __pfx___calc_delta+0x10/0x10
[  150.823960][ T6232]  ? update_curr_dl_se+0x4d1/0x980
[  150.823979][ T6232]  ? filemap_get_folios_tag+0xed/0x630
[  150.823992][ T6232]  ? rcu_is_watching+0x15/0xb0
[  150.824006][ T6232]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  150.824055][ T6232]  do_writepages+0x32e/0x550
[  150.824073][ T6232]  ? rcu_is_watching+0x15/0xb0
[  150.824087][ T6232]  ? do_raw_spin_unlock+0x4d/0x240
[  150.824103][ T6232]  filemap_fdatawrite+0x199/0x240
[  150.824132][ T6232]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  150.824162][ T6232]  ? rcu_is_watching+0x15/0xb0
[  150.824175][ T6232]  ? do_raw_spin_unlock+0x4d/0x240
[  150.824192][ T6232]  f2fs_sync_dirty_inodes+0x31f/0x830
[  150.824210][ T6232]  f2fs_write_checkpoint+0x95a/0x1df0
[  150.824231][ T6232]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  150.824257][ T6232]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  150.824270][ T6232]  ? kfree+0x18e/0x440
[  150.824285][ T6232]  ? kill_f2fs_super+0x298/0x6c0
[  150.824299][ T6232]  kill_f2fs_super+0x2c3/0x6c0
[  150.824314][ T6232]  ? __pfx_kill_f2fs_super+0x10/0x10
[  150.824326][ T6232]  ? radix_tree_delete_item+0x2b6/0x400
[  150.824345][ T6232]  ? shrinker_free+0x2ce/0x3e0
[  150.824360][ T6232]  deactivate_locked_super+0xbc/0x130
[  150.824377][ T6232]  cleanup_mnt+0x425/0x4c0
[  150.824392][ T6232]  task_work_run+0x1d4/0x260
[  150.824411][ T6232]  ? __pfx_task_work_run+0x10/0x10
[  150.824427][ T6232]  ? __x64_sys_umount+0x122/0x160
[  150.824443][ T6232]  ? __pfx___x64_sys_umount+0x10/0x10
[  150.824461][ T6232]  ? rcu_is_watching+0x15/0xb0
[  150.824474][ T6232]  exit_to_user_mode_loop+0xec/0x110
[  150.824493][ T6232]  do_syscall_64+0x2bd/0x3b0
[  150.824511][ T6232]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.824525][ T6232]  ? exc_page_fault+0x9f/0xf0
[  150.824542][ T6232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.824554][ T6232] RIP: 0033:0x7f758d58ff17
[  150.824567][ T6232] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  150.824578][ T6232] RSP: 002b:00007fff848e0d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  150.824593][ T6232] RAX: 0000000000000000 RBX: 00007f758d611c05 RCX: 00007f758d58ff17
[  150.824602][ T6232] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff848e0e00
[  150.824611][ T6232] RBP: 00007fff848e0e00 R08: 0000000000000000 R09: 0000000000000000
[  150.824619][ T6232] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff848e1e90
[  150.824628][ T6232] R13: 00007f758d611c05 R14: 0000000000024c9f R15: 00007fff848e1ed0
[  150.824641][ T6232]  </TASK>
[  150.824646][ T6232] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  151.117301][ T9618] dvmrp0: entered allmulticast mode
[  151.181298][ T9622] loop4: detected capacity change from 0 to 256
[  151.188168][ T9622] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf059ff26, utbl_chksum : 0xe619d30d)
[  152.138951][ T9636] loop4: detected capacity change from 0 to 256
[  152.300189][ T9648] loop3: detected capacity change from 0 to 1024
[  152.305149][ T9648] hfsplus: creator requires a 4 character value
[  152.362475][ T9653] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1371'.
[  152.365799][ T9653] hsr_slave_0: left promiscuous mode
[  152.368321][ T9653] hsr_slave_1: left promiscuous mode
[  152.453893][   T33] audit: type=1326 audit(1755846179.427:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9659 comm="syz.0.1374" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f582078ebe9 code=0x0
[  152.632951][ T9673] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1380'.
[  152.648326][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'.
[  152.694516][ T9679] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  153.085276][ T9695] autofs: Unknown parameter 'no9 PG!8E	'
[  154.101562][ T9707] loop3: detected capacity change from 0 to 32768
[  154.106556][ T9707] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  154.106556][ T9707] clean (size 2912):
[  154.106556][ T9707] flags:          0
[  154.106556][ T9707] journal_seq:    10
[  154.106556][ T9707] usage: type=inodes v=8
[  154.106556][ T9707] usage: type=key_version v=0
[  154.106556][ T9707] usage: type=reserved v=0
[  154.106556][ T9707] usage: type=reserved v=0
[  154.106556][ T9707] usage: type=reserved v=0
[  154.106556][ T9707] usage: type=reserved v=0
[  154.106556][ T9707] data_usage: btree: 1/1 [0]=2816
[  154.106556][ T9707] data_usage: journal: 1/1 [0]=0
[  154.106556][ T9707] data_usage: user: 1/1 [0]=16
[  154.106556][ T9707] dev_usage: dev=0  
[  154.106556][ T9707]   free: buckets=83 sectors=0 fragmented=0
[  154.106556][ T9707]   sb: buckets=25 sectors=6152 fragmented=248
[  154.106556][ T9707]   journal: buckets=8 sectors=2048 fragmented=0
[  154.106556][ T9707]   btree: buckets=11 sectors=2816 fragmented=0
[  154.106556][ T9707]   user: buckets=1 sectors=16 fragmented=240
[  154.106556][ T9707]   cached: buckets=0 sectors=0 fragmented=0
[  154.106556][ T9707]   parity: buckets=0 sectors=0 fragmented=0
[  154.106556][ T9707]   stripe: buckets=0 sectors=0 fragmented=0
[  154.106556][ T9707]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  154.106556][ T9707]   need_discard: buckets=0 sectors=0 fragmented=0
[  154.106556][ T9707] clock: read=0
[  154.106556][ T9707] clock: write=1280
[  154.106556][ T9707] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 POS_MAX len 511 ver 0: seq c
[  154.106689][ T9707] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  154.342589][ T9709] loop3: detected capacity change from 0 to 32768
[  154.378359][ T9717] loop3: detected capacity change from 0 to 1024
[  154.386279][ T9717] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  154.391831][ T9717] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869)
[  154.395752][ T9717] EXT4-fs (loop3): journal inode is deleted
[  154.566023][ T9721] loop3: detected capacity change from 0 to 32768
[  154.576335][ T9721] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  154.595353][ T9721] XFS (loop3): Ending clean mount
[  154.598070][ T9721] XFS (loop3): Quotacheck needed: Please wait.
[  154.604328][ T9721] XFS (loop3): Quotacheck: Done.
[  154.656340][ T6232] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  154.763081][ T9738] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.798275][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1404'.
[  156.089631][ T9765] loop4: detected capacity change from 0 to 2048
[  156.102679][ T9765] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051
[  156.136257][ T9765] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  156.244312][ T9776] loop4: detected capacity change from 0 to 256
[  156.269263][ T9776] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  156.584479][ T9787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1426'.
[  157.727941][ T9805] loop4: detected capacity change from 0 to 131072
[  157.731051][ T9805] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  157.733988][ T9805] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  157.737416][ T9805] F2FS-fs (loop4): invalid crc value
[  157.772081][ T9805] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  157.776917][ T9805] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  157.780032][ T9805] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  158.690497][ T1270] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  158.974373][ T1270] usb 5-1: Using ep0 maxpacket: 32
[  158.996520][ T1270] usb 5-1: config 4 has an invalid interface number: 128 but max is 0
[  159.002774][ T1270] usb 5-1: config 4 has no interface number 0
[  159.005045][ T1270] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.015201][ T1270] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.021999][ T1270] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  159.025315][ T1270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.254177][ T9845] autofs4:pid:9845:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
[  159.331721][ T9847] lo speed is unknown, defaulting to 1000
[  159.509368][ T9847] lo speed is unknown, defaulting to 1000
[  159.542806][ T1270] hub 5-1:4.128: USB hub found
[  159.748716][ T1270] hub 5-1:4.128: 2 ports detected
[  159.752494][ T1270] hub 5-1:4.128: Using single TT (err -22)
[  159.945449][ T1270] hub 5-1:4.128: hub_hub_status failed (err = -71)
[  159.947985][ T1270] hub 5-1:4.128: config failed, can't get hub status (err -71)
[  159.973973][ T1270] usb 5-1: USB disconnect, device number 9
[  160.041105][ T9852] loop3: detected capacity change from 0 to 32768
[  160.051478][ T9852] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  160.154889][ T6232] ocfs2: Unmounting device (7,3) on (node local)
[  160.340871][ T9862] loop3: detected capacity change from 0 to 32768
[  160.346270][ T9862] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1452 (9862)
[  160.359519][ T9862] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  160.363956][ T9862] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  160.367130][ T9862] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  160.389544][ T9862] BTRFS info (device loop3): rebuilding free space tree
[  160.395813][ T9862] BTRFS info (device loop3): disabling free space tree
[  160.398595][ T9862] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  160.402557][ T9862] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  160.408915][ T9862] BTRFS info (device loop3): enabling ssd optimizations
[  160.412129][ T9862] BTRFS info (device loop3): turning off barriers
[  160.414755][ T9862] BTRFS info (device loop3): enabling disk space caching
[  160.417628][ T9862] BTRFS info (device loop3): force clearing of disk cache
[  160.420572][ T9862] BTRFS info (device loop3): enabling auto defrag
[  160.423194][ T9862] BTRFS info (device loop3): doing ref verification
[  160.425804][ T9862] BTRFS info (device loop3): force zlib compression, level 3
[  160.463617][ T5863] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  160.508839][ T6232] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  161.227889][ T9883] loop4: detected capacity change from 0 to 40427
[  161.247576][ T9883] F2FS-fs (loop4): Image doesn't support compression
[  161.277422][ T9883] F2FS-fs (loop4): invalid crc value
[  161.432631][ T9883] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  161.440000][ T9883] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  161.993640][ T9922] loop4: detected capacity change from 0 to 256
[  162.003169][ T9922] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  162.021187][ T9916] loop3: detected capacity change from 0 to 32768
[  162.048144][ T9916] overlayfs: upper fs needs to support d_type.
[  162.052484][ T9916] overlayfs: upper fs does not support tmpfile.
[  162.056278][ T9916] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  162.099579][ T6232] non-latin1 character 0x2e66 found in JFS file name
[  162.102299][ T6232] mount with iocharset=utf8 to access
[  162.244450][ T9924] loop4: detected capacity change from 0 to 32768
[  162.257568][ T9924] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  162.362754][ T5886] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.366987][ T5886] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.372443][ T8131] ocfs2: Unmounting device (7,4) on (node local)
[  162.436385][ T5886] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.441171][ T5886] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.482318][ T5886] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.486353][ T5886] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.558736][ T5886] team0: Port device netdevsim0 removed
[  162.562416][ T5886] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.565239][ T9934] netlink: 'syz.0.1477': attribute type 11 has an invalid length.
[  162.566702][ T5886] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.679327][ T5247] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  162.687879][ T5247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  162.691605][ T5247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  162.695193][ T5247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  162.698354][ T5247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  162.703462][ T5886] bridge_slave_1: left allmulticast mode
[  162.715220][ T5886] bridge_slave_1: left promiscuous mode
[  162.719226][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.727553][ T5886] bridge_slave_0: left allmulticast mode
[  162.740267][ T5886] bridge_slave_0: left promiscuous mode
[  162.744084][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.777254][ T9951] netlink: 'syz.0.1480': attribute type 10 has an invalid length.
[  162.833372][ T5886] dvmrp0 (unregistering): left allmulticast mode
[  162.906717][ T5886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.912732][ T5886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.916365][ T5886] bond0 (unregistering): Released all slaves
[  162.934583][ T9951] bond0: (slave bond_slave_0): Releasing backup interface
[  162.938930][ T9944] lo speed is unknown, defaulting to 1000
[  163.246959][ T9944] lo speed is unknown, defaulting to 1000
[  163.378055][ T9944] chnl_net:caif_netlink_parms(): no params data found
[  163.456152][ T5886] veth1_macvtap: left promiscuous mode
[  163.458282][ T5886] veth0_macvtap: left promiscuous mode
[  163.471163][ T5886] veth1_vlan: left promiscuous mode
[  163.473417][ T5886] veth0_vlan: left promiscuous mode
[  163.520007][ T9988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1489'.
[  163.595876][ T5886] team0 (unregistering): Port device team_slave_1 removed
[  163.606034][ T5886] team0 (unregistering): Port device team_slave_0 removed
[  163.659070][ T3884] smc: removing ib device sz1
[  163.671068][ T5893] lo speed is unknown, defaulting to 1000
[  163.674139][ T5893] sz1: Port: 1 Link DOWN
[  163.899183][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.903696][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.906255][ T9944] bridge_slave_0: entered allmulticast mode
[  163.909632][ T9944] bridge_slave_0: entered promiscuous mode
[  163.927428][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.931670][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.934034][ T9944] bridge_slave_1: entered allmulticast mode
[  163.951820][ T9944] bridge_slave_1: entered promiscuous mode
[  163.989329][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1497'.
[  163.994212][ T9944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.999940][ T9944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.040722][ T9944] team0: Port device team_slave_0 added
[  164.044348][ T9944] team0: Port device team_slave_1 added
[  164.067222][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.069653][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.095961][ T9944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  164.102527][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_1
[  164.104795][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  164.114537][ T9944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  164.157441][ T9944] hsr_slave_0: entered promiscuous mode
[  164.161914][ T9944] hsr_slave_1: entered promiscuous mode
[  164.323635][ T9944] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  164.328372][ T9944] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  164.336104][ T9944] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  164.349661][ T9944] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  164.379019][T10016] loop4: detected capacity change from 0 to 32768
[  164.382136][T10016] XFS (loop4): invalid logbufsize: 13312 [not 16k,32k,64k,128k or 256k]
[  164.476407][ T9944] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.494728][ T9944] 8021q: adding VLAN 0 to HW filter on device team0
[  164.515288][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.517968][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.536867][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.539673][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.723584][ T9944] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.751556][ T5847] Bluetooth: hci0: command tx timeout
[  164.867629][ T9944] veth0_vlan: entered promiscuous mode
[  164.874436][ T9944] veth1_vlan: entered promiscuous mode
[  164.888297][ T9944] veth0_macvtap: entered promiscuous mode
[  164.896719][ T9944] veth1_macvtap: entered promiscuous mode
[  164.904557][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.913734][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.920084][ T5886] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.923846][ T5886] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.927155][ T5886] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.931858][ T5886] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.968398][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.973905][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  164.985892][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.989136][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.260561][ T1270] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  165.412682][ T1270] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.416739][ T1270] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  165.423006][ T1270] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  165.426557][ T1270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.431496][ T1270] usb 6-1: config 0 descriptor??
[  165.435920][ T1270] qmi_wwan 6-1:0.0: bogus CDC Union: master=3, slave=0
[  165.439010][ T1270] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22
[  165.605865][T10076] cgroup: Invalid name
[  165.637673][ T5907] usb 6-1: USB disconnect, device number 2
[  165.803745][T10082] loop4: detected capacity change from 0 to 32768
[  165.808627][T10082] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1515 (10082)
[  165.822621][T10082] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  165.826310][T10082] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  165.854713][T10082] BTRFS info (device loop4): enabling ssd optimizations
[  165.857579][T10082] BTRFS info (device loop4): enabling free space tree
[  165.874160][   T33] audit: type=1800 audit(1755846192.847:21): pid=10082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1515" name="bus" dev="loop4" ino=263 res=0 errno=0
[  165.923846][ T8131] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  166.199168][T10106] loop4: detected capacity change from 0 to 40427
[  166.204941][T10106] F2FS-fs: heap/no_heap options were deprecated
[  166.211306][T10106] F2FS-fs: heap/no_heap options were deprecated
[  166.217897][T10106] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  166.221238][T10106] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  166.224834][T10106] F2FS-fs (loop4): build fault injection rate: 1
[  166.227512][T10106] F2FS-fs (loop4): build fault injection type: 0x1
[  166.230265][T10106] F2FS-fs (loop4): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x2e45/0x6ff0
[  166.288388][T10108] loop5: detected capacity change from 0 to 32768
[  166.830690][ T5847] Bluetooth: hci0: command tx timeout
[  166.985097][T10127] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1527'.
[  166.988973][T10127] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1527'.
[  167.629006][T10131] loop4: detected capacity change from 0 to 8192
[  168.805250][T10168] loop4: detected capacity change from 0 to 65
[  168.810930][T10168] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
[  168.816453][T10168] BFS-fs: bfs_fill_super(): Last block not available on loop4: 511
[  168.920486][ T5247] Bluetooth: hci0: command tx timeout
[  169.041939][T10175] loop4: detected capacity change from 0 to 40427
[  169.047432][T10175] F2FS-fs (loop4): Invalid segment/section count (24 != 24 * 3)
[  169.049821][T10175] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  169.053077][T10175] F2FS-fs (loop4): build fault injection type: 0x4
[  169.055810][T10175] F2FS-fs (loop4): invalid crc value
[  169.058934][T10175] F2FS-fs (loop4): Mismatch valid blocks 4 vs. 51
[  169.061758][T10175] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117)
[  169.242894][T10180] loop4: detected capacity change from 0 to 4096
[  169.353856][T10184] JFS: charset not found
[  169.743387][T10199] loop5: detected capacity change from 0 to 32768
[  169.749774][T10199] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section journal_v2: duplicate journal buckets in ranges 9-10, 9-16
[  169.749774][T10199] journal_v2 (size 40):
[  169.749774][T10199] Buckets:  9-16 9-10
[  169.749774][T10199] 
[  169.772369][T10199] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  170.032224][T10209] loop4: detected capacity change from 0 to 40427
[  170.036062][T10209] F2FS-fs (loop4): Image doesn't support compression
[  170.038566][T10209] F2FS-fs (loop4): build fault injection rate: 690
[  170.041202][T10209] F2FS-fs (loop4): build fault injection type: 0x4
[  170.044769][T10209] F2FS-fs (loop4): invalid crc value
[  170.069689][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1562'.
[  170.073876][T10209] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  170.077591][T10209] F2FS-fs (loop4): Start checkpoint disabled!
[  170.081071][T10209] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  170.206061][T10220] lo speed is unknown, defaulting to 1000
[  171.000914][ T5247] Bluetooth: hci0: command 0x0419 tx timeout
[  171.806604][T10248] loop4: detected capacity change from 0 to 32768
[  171.984347][ T6175]  loop4: p9 p11 p16
[  171.996449][T10248]  loop4: p9 p11 p16
[  172.059172][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1577'.
[  172.097349][ T6224] udevd[6224]: inotify_add_watch(7, /dev/loop4p11, 10) failed: No such file or directory
[  172.102724][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop4p16, 10) failed: No such file or directory
[  172.114349][ T6175] udevd[6175]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory
[  172.143312][ T6175] udevd[6175]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory
[  172.154007][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop4p16, 10) failed: No such file or directory
[  172.159315][ T6224] udevd[6224]: inotify_add_watch(7, /dev/loop4p11, 10) failed: No such file or directory
[  172.294231][T10267] loop4: detected capacity change from 0 to 1024
[  172.311427][T10267] EXT4-fs: Ignoring removed orlov option
[  172.314156][T10267] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  172.329219][T10267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.342272][T10267] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.1581: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  172.413077][ T8131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.638197][T10278] loop5: detected capacity change from 0 to 32768
[  172.670766][T10288] loop4: detected capacity change from 0 to 1024
[  172.749231][T10288] EXT4-fs: Ignoring removed nomblk_io_submit option
[  172.854028][T10278] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  172.858130][ T5886] (kworker/u8:4,5886,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  172.871049][T10278] (syz.5.1585,10278,0):ocfs2_verify_group_and_input:428 ERROR: add a group which is in the current volume.
[  172.875533][T10278] (syz.5.1585,10278,0):ocfs2_group_add:511 ERROR: status = -22
[  172.878463][T10288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.902138][ T8131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.918036][ T9944] ocfs2: Unmounting device (7,5) on (node local)
[  172.956217][T10298] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1591'.
[  172.963243][T10298] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  172.983329][T10300] syzkaller1: entered promiscuous mode
[  172.985745][T10300] syzkaller1: entered allmulticast mode
[  172.988861][T10300] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  173.080889][ T5847] Bluetooth: hci0: command 0x0419 tx timeout
[  173.240596][ T5956] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  173.420507][ T5956] usb 5-1: Using ep0 maxpacket: 8
[  173.425902][ T5956] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  173.429336][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.434086][ T5956] usb 5-1: Product: syz
[  173.437678][ T5956] usb 5-1: Manufacturer: syz
[  173.439568][ T5956] usb 5-1: SerialNumber: syz
[  173.446116][ T5956] usb 5-1: config 0 descriptor??
[  173.663054][ T5956] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  174.565202][T10346] openvswitch: netlink: IPv4 tun info is not correct
[  175.221702][ T5956] gspca_sunplus: reg_r err -71
[  175.223655][ T5956] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  175.238301][ T5956] usb 5-1: USB disconnect, device number 10
[  176.465341][ T5956] IPVS: starting estimator thread 0...
[  176.567319][T10404] IPVS: using max 65 ests per chain, 156000 per kthread
[  176.866359][T10422] loop5: detected capacity change from 0 to 2048
[  176.884877][T10422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.992872][T10418] loop4: detected capacity change from 0 to 8
[  177.009597][T10418] SQUASHFS error: zlib decompression failed, data probably corrupt
[  177.012756][T10418] SQUASHFS error: Failed to read block 0x9b: -5
[  177.026496][T10418] SQUASHFS error: Unable to read metadata cache entry [99]
[  177.029465][T10418] SQUASHFS error: Unable to read inode 0x127
[  177.058337][T10418] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1636'.
[  177.081188][T10418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1636'.
[  177.158191][T10433] loop5: detected capacity change from 0 to 1024
[  177.182973][T10433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  177.186702][T10433] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.203269][   T33] audit: type=1800 audit(1755846204.177:22): pid=10433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1641" name="file1" dev="loop5" ino=15 res=0 errno=0
[  177.221609][T10433] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.1641: lblock 0 mapped to illegal pblock 0 (length 1)
[  177.228051][   T33] audit: type=1804 audit(1755846204.197:23): pid=10433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1641" name="/newroot/49/file1/file1" dev="loop5" ino=15 res=1 errno=0
[  177.237040][   T33] audit: type=1800 audit(1755846204.197:24): pid=10433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1641" name="file1" dev="loop5" ino=15 res=0 errno=0
[  177.255795][ T9944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  177.380508][ T1270] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  177.530852][ T1270] usb 5-1: Using ep0 maxpacket: 32
[  177.538589][ T1270] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  177.542368][ T1270] usb 5-1: config 0 has no interface number 0
[  177.544738][ T1270] usb 5-1: config 0 interface 89 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  177.558778][ T1270] usb 5-1: config 0 interface 89 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  177.565189][ T1270] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0114, bcdDevice= 4.be
[  177.568680][ T1270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.572339][ T1270] usb 5-1: Product: syz
[  177.580560][ T1270] usb 5-1: Manufacturer: syz
[  177.582393][ T1270] usb 5-1: SerialNumber: syz
[  177.588274][ T1270] usb 5-1: config 0 descriptor??
[  177.590796][T10431] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  177.601039][ T1270] kvaser_usb 5-1:0.89: error -ENODEV: Cannot get usb endpoint(s)
[  177.636705][T10446] loop5: detected capacity change from 0 to 32768
[  177.653463][T10446] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 66 has empty extent list at depth 1
[  177.660677][T10446] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  177.664402][T10446] OCFS2: File system is now read-only.
[  177.666375][T10446] (syz.5.1646,10446,1):ocfs2_find_leaf:1948 ERROR: status = -30
[  177.669251][T10446] (syz.5.1646,10446,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  177.674269][T10446] (syz.5.1646,10446,1):ocfs2_get_clusters:634 ERROR: status = -30
[  177.677164][T10446] (syz.5.1646,10446,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30
[  177.681715][T10446] (syz.5.1646,10446,1):ocfs2_read_virt_blocks:997 ERROR: status = -30
[  177.684989][T10446] (syz.5.1646,10446,1):ocfs2_read_dir_block:511 ERROR: status = -30
[  177.688144][T10446] (syz.5.1646,10446,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  177.693289][T10446] (syz.5.1646,10446,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  177.693313][T10446] (syz.5.1646,10446,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  177.703838][T10446] (syz.5.1646,10446,1):ocfs2_initialize_super:2198 ERROR: status = -30
[  177.707117][T10446] (syz.5.1646,10446,1):ocfs2_fill_super:1177 ERROR: status = -30
[  177.828706][ T1270] usb 5-1: USB disconnect, device number 11
[  177.852277][T10450] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253
[  177.854942][T10450] PKCS7: Only support pkcs7_signedData type
[  177.895190][T10452] loop5: detected capacity change from 0 to 512
[  177.903977][T10452] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  177.926768][T10452] EXT4-fs (loop5): orphan cleanup on readonly fs
[  177.929576][T10452] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1649: Block bitmap for bg 0 marked uninitialized
[  177.935838][T10452] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  177.939342][T10452] EXT4-fs (loop5): 1 orphan inode deleted
[  177.942904][T10452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  178.071472][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1649'.
[  178.815648][ T9944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.999813][T10461] loop4: detected capacity change from 0 to 2048
[  179.194260][T10461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.066280][T10488] lo speed is unknown, defaulting to 1000
[  180.155528][T10493] loop5: detected capacity change from 0 to 128
[  180.174139][T10493] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  180.183145][T10493] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.207156][ T9944] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.319724][T10501] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  180.427091][ T8131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.503386][T10511] syzkaller1: entered promiscuous mode
[  180.505472][T10511] syzkaller1: entered allmulticast mode
[  180.540522][ T5956] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  180.690533][ T5956] usb 6-1: Using ep0 maxpacket: 32
[  180.707798][ T5956] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  180.716139][ T5956] usb 6-1: config 0 has no interface number 0
[  180.718579][ T5956] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  180.730265][ T5956] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  180.734121][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.737253][ T5956] usb 6-1: Product: syz
[  180.739038][ T5956] usb 6-1: Manufacturer: syz
[  180.743981][ T5956] usb 6-1: SerialNumber: syz
[  180.747049][ T5956] usb 6-1: config 0 descriptor??
[  180.752656][ T5956] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  180.756339][ T5956] em28xx 6-1:0.132: Video interface 132 found:
[  180.912466][T10533] loop4: detected capacity change from 0 to 32768
[  180.918913][T10533] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1683 (10533)
[  180.935602][T10533] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  180.939944][T10533] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  180.977329][T10533] BTRFS info (device loop4): rebuilding free space tree
[  180.994094][T10533] BTRFS info (device loop4): enabling ssd optimizations
[  180.997211][T10533] BTRFS info (device loop4): using spread ssd allocation scheme
[  181.002650][T10533] BTRFS info (device loop4): enabling free space tree
[  181.005575][T10533] BTRFS info (device loop4): force clearing of disk cache
[  181.040742][   T13] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  181.072658][ T8131] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  181.155830][ T5956] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  181.167624][T10564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  181.170611][T10564] IPv6: NLM_F_CREATE should be set when creating new route
[  181.174750][T10564] lo: entered allmulticast mode
[  181.178305][T10564] tunl0: entered allmulticast mode
[  181.183771][T10564] gre0: entered allmulticast mode
[  181.189576][T10564] gretap0: entered allmulticast mode
[  181.196244][T10564] erspan0: entered allmulticast mode
[  181.200085][T10564] ip_vti0: entered allmulticast mode
[  181.203787][T10564] ip6_vti0: entered allmulticast mode
[  181.207669][T10564] sit0: entered allmulticast mode
[  181.212338][T10564] ip6tnl0: entered allmulticast mode
[  181.215966][T10564] ip6gre0: entered allmulticast mode
[  181.222824][T10564] syz_tun: entered allmulticast mode
[  181.227299][T10564] ip6gretap0: entered allmulticast mode
[  181.233924][T10564] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.237229][T10564] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.244186][T10564] bridge0: entered allmulticast mode
[  181.248208][T10564] vcan0: entered allmulticast mode
[  181.251677][T10564] bond0: entered allmulticast mode
[  181.253950][T10564] bond_slave_0: entered allmulticast mode
[  181.256516][T10564] bond_slave_1: entered allmulticast mode
[  181.262356][T10564] team0: entered allmulticast mode
[  181.264619][T10564] team_slave_0: entered allmulticast mode
[  181.267109][T10564] team_slave_1: entered allmulticast mode
[  181.271664][T10564] dummy0: entered allmulticast mode
[  181.275639][T10564] nlmon0: entered allmulticast mode
[  181.279006][T10564] caif0: entered allmulticast mode
[  181.282384][T10564] batadv0: entered allmulticast mode
[  181.286218][T10564] vxcan0: entered allmulticast mode
[  181.289006][T10564] vxcan1: entered allmulticast mode
[  181.293222][T10564] wg0: entered allmulticast mode
[  181.296922][T10564] wg1: entered allmulticast mode
[  181.302087][T10564] wg2: entered allmulticast mode
[  181.305617][T10564] veth0_to_bridge: entered allmulticast mode
[  181.311309][T10564] veth1_to_bridge: entered allmulticast mode
[  181.317213][T10564] veth0_to_bond: entered allmulticast mode
[  181.323861][T10564] veth1_to_bond: entered allmulticast mode
[  181.328541][T10564] veth0_to_team: entered allmulticast mode
[  181.334145][T10564] veth1_to_team: entered allmulticast mode
[  181.338998][T10564] veth0_to_batadv: entered allmulticast mode
[  181.345034][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.348100][T10564] batadv_slave_0: entered allmulticast mode
[  181.353385][T10564] veth1_to_batadv: entered allmulticast mode
[  181.357400][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.361412][T10564] batadv_slave_1: entered allmulticast mode
[  181.365599][T10564] xfrm0: entered allmulticast mode
[  181.369127][T10564] veth0_to_hsr: entered allmulticast mode
[  181.373891][T10564] hsr_slave_0: entered allmulticast mode
[  181.377218][T10564] veth1_to_hsr: entered allmulticast mode
[  181.381198][T10564] hsr_slave_1: entered allmulticast mode
[  181.384813][T10564] hsr0: entered allmulticast mode
[  181.388245][T10564] veth1_virt_wifi: entered allmulticast mode
[  181.393288][T10564] veth0_virt_wifi: entered allmulticast mode
[  181.397121][T10564] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  181.400233][T10564] veth1_vlan: entered allmulticast mode
[  181.405659][T10564] veth0_vlan: entered allmulticast mode
[  181.415850][T10564] vlan0: entered allmulticast mode
[  181.418080][T10564] vlan1: entered allmulticast mode
[  181.421121][T10564] macvlan0: entered allmulticast mode
[  181.424885][T10564] macvlan1: entered allmulticast mode
[  181.428503][T10564] ipvlan0: entered allmulticast mode
[  181.431500][T10564] ipvlan1: entered allmulticast mode
[  181.434000][T10564] veth1_macvtap: entered allmulticast mode
[  181.437805][T10564] veth0_macvtap: entered allmulticast mode
[  181.442271][T10564] macvtap0: entered allmulticast mode
[  181.445966][T10564] macsec0: entered allmulticast mode
[  181.449612][T10564] geneve0: entered allmulticast mode
[  181.453802][T10564] geneve1: entered allmulticast mode
[  181.457546][T10564] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  181.466072][T10564] netdevsim netdevsim4 netdevsim1: entered allmulticast mode
[  181.470853][T10564] netdevsim netdevsim4 netdevsim2: entered allmulticast mode
[  181.475514][T10564] netdevsim netdevsim4 netdevsim3: entered allmulticast mode
[  181.479945][T10564] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  181.483786][T10564] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  181.486679][T10564] bond1: entered allmulticast mode
[  181.488674][T10564] gretap1: entered allmulticast mode
[  181.493519][T10564] @: entered allmulticast mode
[  181.495956][T10564] mac80211_hwsim hwsim10 pim6reg: entered allmulticast mode
[  181.498457][   T47] lo speed is unknown, defaulting to 1000
[  181.507288][   T47] syz1: Port: 1 Link DOWN
[  181.509386][   T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.515274][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.518856][   T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.527330][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.534106][   T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.537756][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.545978][   T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.558750][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.783695][ T5956] em28xx 6-1:0.132: failed to read eeprom (err=-110)
[  181.786579][ T5956] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110]
[  181.928431][T10589] netlink: zone id is out of range
[  181.938035][T10589] netlink: zone id is out of range
[  181.943629][T10589] netlink: zone id is out of range
[  181.945675][T10589] netlink: zone id is out of range
[  181.955078][T10589] netlink: zone id is out of range
[  181.957191][T10589] netlink: zone id is out of range
[  181.959268][T10589] netlink: zone id is out of range
[  181.968961][T10589] netlink: zone id is out of range
[  181.971241][T10589] netlink: zone id is out of range
[  181.973231][T10589] netlink: zone id is out of range
[  182.026244][ T5956] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  182.029292][ T5956] em28xx 6-1:0.132: analog set to bulk mode.
[  182.035597][   T47] em28xx 6-1:0.132: Registering V4L2 extension
[  182.040052][ T5956] usb 6-1: USB disconnect, device number 3
[  182.045355][ T5956] em28xx 6-1:0.132: Disconnecting em28xx
[  182.292814][   T47] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  182.296997][   T47] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  182.299614][   T47] em28xx 6-1:0.132: No AC97 audio processor
[  182.303839][   T47] usb 6-1: Decoder not found
[  182.305622][   T47] em28xx 6-1:0.132: failed to create media graph
[  182.308017][   T47] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  182.316230][   T47] em28xx 6-1:0.132: Remote control support is not available for this card.
[  182.319351][ T5956] em28xx 6-1:0.132: Closing input extension
[  182.322722][ T5956] em28xx 6-1:0.132: Freeing device
[  182.409735][T10608] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  182.415246][T10608] ubi31: attaching mtd0
[  182.419153][T10608] ubi31: scanning is finished
[  182.421034][T10608] ubi31: empty MTD device detected
[  182.657255][T10608] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  182.660515][T10608] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  182.663710][T10608] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  182.666518][T10608] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  182.669538][T10608] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  182.672313][T10608] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  182.675894][T10608] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3054343073
[  182.680622][T10608] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  182.684591][T10611] ubi31: background thread "ubi_bgt31d" started, PID 10611
[  183.382044][T10639] loop4: detected capacity change from 0 to 512
[  183.397948][T10639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.425878][ T8131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.465937][T10649] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  183.564497][T10656] loop4: detected capacity change from 0 to 2048
[  183.581227][T10656] EXT4-fs: Ignoring removed mblk_io_submit option
[  183.597601][T10656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.809948][T10667] netdevsim netdevsim0: Direct firmware load for @ failed with error -2
[  183.821172][T10667] netdevsim netdevsim0: Falling back to sysfs fallback for: @
[  184.003123][   T28] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u9:1: bg 0: block 234: padding at end of block bitmap is not set
[  184.004605][T10681] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1732'.
[  184.008337][   T28] EXT4-fs (loop4): Remounting filesystem read-only
[  184.012083][T10681] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1732'.
[  184.016399][T10681] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1732'.
[  184.019357][T10681] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1732'.
[  184.023297][T10681] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1732'.
[  184.054859][T10683] 9pnet_fd: Insufficient options for proto=fd
[  184.129380][ T8131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.371778][T10711] loop4: detected capacity change from 0 to 2048
[  184.393672][T10711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.397977][T10711] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.479231][T10715] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1746: bg 0: block 345: padding at end of block bitmap is not set
[  184.484916][T10715] fs-verity (loop4, inode 13): Error -117 writing Merkle tree block 0
[  184.487948][T10715] fs-verity (loop4, inode 13): Error -117 building Merkle tree
[  184.672129][T10717] overlayfs: failed to clone upperpath
[  185.727226][ T8131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.893260][T10739] loop4: detected capacity change from 0 to 32768
[  185.906923][T10739] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1758 (10739)
[  185.934715][T10739] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  185.948108][T10739] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  186.013193][T10739] BTRFS info (device loop4): enabling ssd optimizations
[  186.015951][T10739] BTRFS info (device loop4): enabling free space tree
[  186.068881][ T5863] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  186.354975][ T8131] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  186.409590][T10790] bridge0: port 3(veth0_to_bridge) entered blocking state
[  186.419145][T10790] bridge0: port 3(veth0_to_bridge) entered disabled state
[  186.423808][T10790] veth0_to_bridge: entered allmulticast mode
[  186.432922][T10790] veth0_to_bridge: entered promiscuous mode
[  186.444711][T10790] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  186.450258][T10790] bridge0: port 3(veth0_to_bridge) entered blocking state
[  186.452832][T10790] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  186.470138][T10792] loop4: detected capacity change from 0 to 1024
[  186.488354][T10792] EXT4-fs: Ignoring removed oldalloc option
[  186.492599][T10792] EXT4-fs: Ignoring removed bh option
[  186.505942][T10792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.963224][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1779'.
[  187.064892][ T8131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.126442][   T33] audit: type=1326 audit(1755846214.097:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10822 comm="syz.4.1787" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb6098ebe9 code=0x0
[  187.670729][   T47] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  187.820683][   T47] usb 5-1: Using ep0 maxpacket: 8
[  187.826409][   T47] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  187.830114][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.833848][   T47] usb 5-1: Product: syz
[  187.835560][   T47] usb 5-1: Manufacturer: syz
[  187.837442][   T47] usb 5-1: SerialNumber: syz
[  187.843040][   T47] usb 5-1: config 0 descriptor??
[  188.050569][   T47] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  188.859644][   T47] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  188.865971][   T47] usb 5-1: USB disconnect, device number 12
[  189.292020][   T33] audit: type=1326 audit(1755846216.267:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10903 comm="syz.5.1824" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc7ef8ebe9 code=0x0
[  190.302107][T10928] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1834'.
[  190.439438][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'.
[  190.444577][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'.
[  190.527305][T10936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1837'.
[  190.850208][T10954] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20003
[  191.247836][T10964] net_ratelimit: 36 callbacks suppressed
[  191.247847][T10964] openvswitch: netlink: Flow actions attr not present in new flow.
[  192.527856][ T5907] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  192.714074][ T5907] usb 5-1: Using ep0 maxpacket: 8
[  192.991565][ T5907] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  192.994380][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.996670][ T5907] usb 5-1: Product: syz
[  192.997981][ T5907] usb 5-1: Manufacturer: syz
[  192.999344][ T5907] usb 5-1: SerialNumber: syz
[  193.032224][ T5907] usb 5-1: config 0 descriptor??
[  193.563000][ T5907] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  193.753196][T11002] Process accounting resumed
[  194.111200][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.113096][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.115229][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.117329][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.121170][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.126793][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.131272][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.136282][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.141677][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.146634][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.151188][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.204853][T11019] overlayfs: failed to clone upperpath
[  194.274093][ T5907] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  194.283278][ T5907] usb 5-1: USB disconnect, device number 13
[  194.323677][T11031] pim6reg: entered allmulticast mode
[  194.360223][T11035] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1880'.
[  194.364878][T11035] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1880'.
[  194.466260][T11043] gfs2: path_lookup on tmpfs returned error -2
[  194.500268][T11047] overlayfs: failed to clone upperpath
[  194.525742][T11049] netlink: 'syz.0.1887': attribute type 4 has an invalid length.
[  194.528695][T11049] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1887'.
[  196.250578][    C0] net_ratelimit: 10361 callbacks suppressed
[  196.250591][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.257331][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.261821][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.266313][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.271190][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.275958][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.280477][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.284824][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.289544][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.293663][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.360713][ T5956] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  196.510612][ T5956] usb 5-1: Using ep0 maxpacket: 8
[  196.515543][ T5956] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  196.519028][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.524447][ T5956] usb 5-1: Product: syz
[  196.526084][ T5956] usb 5-1: Manufacturer: syz
[  196.527865][ T5956] usb 5-1: SerialNumber: syz
[  196.539134][ T5956] usb 5-1: config 0 descriptor??
[  196.541178][T11110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1917'.
[  196.544219][T11110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1917'.
[  196.548667][ T5956] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  196.696892][T11108] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.699594][T11108] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.806394][T11108] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.815660][T11108] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.223504][ T5886] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.233219][ T5886] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.236917][ T5886] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.253592][ T5886] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.370601][T11121] netlink: 'syz.5.1920': attribute type 2 has an invalid length.
[  197.374379][T11121] netlink: 'syz.5.1920': attribute type 8 has an invalid length.
[  197.385546][T11121] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1920'.
[  197.586005][ T5956] usb 5-1: USB disconnect, device number 14
[  197.864946][T11135] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  201.260596][    C1] net_ratelimit: 28820 callbacks suppressed
[  201.260616][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  201.260659][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.263117][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  201.267895][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.272432][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  201.277263][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.281802][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  201.286455][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.290786][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  201.295701][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  202.759766][T11149] loop4: detected capacity change from 0 to 512
[  203.178805][T11149] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  203.547287][T11149] EXT4-fs (loop4): invalid journal inode
[  203.549583][T11149] EXT4-fs (loop4): can't get journal size
[  206.015979][T11149] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  206.016048][T11149] EXT4-fs: failed to create workqueue
[  206.270496][    C1] net_ratelimit: 53508 callbacks suppressed
[  206.270515][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  206.270522][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.270718][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.273179][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  206.276835][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.281783][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  206.286377][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.290922][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  206.295066][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.299700][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  207.395276][T11149] EXT4-fs (loop4): mount failed
[  209.125253][   T47] sched: DL replenish lagged too much
[  211.280507][    C1] net_ratelimit: 58539 callbacks suppressed
[  211.280518][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.280527][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  211.280757][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  211.283248][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.287094][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  211.292139][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.296457][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  211.301370][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.305048][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  211.309746][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.290578][    C1] net_ratelimit: 52778 callbacks suppressed
[  216.290598][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  216.290843][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.293180][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  216.298004][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.302380][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  216.307285][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.311679][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  216.316532][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  216.320896][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  216.325712][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.300522][    C1] net_ratelimit: 59153 callbacks suppressed
[  221.300543][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  221.300598][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.303024][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  221.306582][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.310017][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  221.313805][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.317155][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  221.320912][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  221.324517][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  221.328243][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  223.666377][T11161] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  223.844141][T11161] CPU: 1 UID: 0 PID: 11161 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  223.844164][T11161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  223.844175][T11161] Call Trace:
[  223.844178][T11161]  <TASK>
[  223.844182][T11161]  dump_stack_lvl+0x189/0x250
[  223.844197][T11161]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.844206][T11161]  ? __pfx__printk+0x10/0x10
[  223.844215][T11161]  ? lock_release+0x4b/0x3e0
[  223.844227][T11161]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  223.844236][T11161]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  223.844245][T11161]  warn_alloc+0x214/0x310
[  223.844257][T11161]  ? __pfx_warn_alloc+0x10/0x10
[  223.844269][T11161]  ? __get_vm_area_node+0x28f/0x300
[  223.844279][T11161]  ? kcov_ioctl+0x55/0x640
[  223.844289][T11161]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  223.844305][T11161]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  223.844316][T11161]  ? __pfx_kcov_ioctl+0x10/0x10
[  223.844325][T11161]  vmalloc_user_noprof+0xad/0xf0
[  223.844335][T11161]  ? kcov_ioctl+0x55/0x640
[  223.844344][T11161]  kcov_ioctl+0x55/0x640
[  223.844354][T11161]  ? bpf_lsm_file_ioctl+0x9/0x20
[  223.844363][T11161]  ? __pfx_kcov_ioctl+0x10/0x10
[  223.844372][T11161]  __se_sys_ioctl+0xfc/0x170
[  223.844382][T11161]  do_syscall_64+0xfa/0x3b0
[  223.844393][T11161]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.844401][T11161]  ? exc_page_fault+0x9f/0xf0
[  223.844410][T11161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.844417][T11161] RIP: 0033:0x7f25a138e7eb
[  223.844426][T11161] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  223.844433][T11161] RSP: 002b:00007fffc1439880 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  223.844442][T11161] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f25a138e7eb
[  223.844448][T11161] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d9
[  223.844452][T11161] RBP: 00007f25a15b6128 R08: 00000000000000d8 R09: 0000000000000000
[  223.844457][T11161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.844462][T11161] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  223.844469][T11161]  </TASK>
[  223.844473][T11161] Mem-Info:
[  226.310484][    C0] net_ratelimit: 56540 callbacks suppressed
[  226.310504][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.310535][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  226.313244][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.319708][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  226.324440][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.328879][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  226.333779][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.338097][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  226.342923][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  226.347187][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  227.979350][T11161] active_anon:32809 inactive_anon:0 isolated_anon:0
[  227.979350][T11161]  active_file:11427 inactive_file:38306 isolated_file:0
[  227.979350][T11161]  unevictable:1768 dirty:28 writeback:0
[  227.979350][T11161]  slab_reclaimable:10574 slab_unreclaimable:61886
[  227.979350][T11161]  mapped:12014 shmem:31381 pagetables:966
[  227.979350][T11161]  sec_pagetables:0 bounce:0
[  227.979350][T11161]  kernel_misc_reclaimable:0
[  227.979350][T11161]  free:238654 free_pcp:24476 free_cma:0
[  230.785879][T11161] Node 0 active_anon:28212kB inactive_anon:0kB active_file:29784kB inactive_file:146344kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29288kB dirty:68kB writeback:0kB shmem:25276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3664kB pagetables:1596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  231.320590][    C1] net_ratelimit: 52323 callbacks suppressed
[  231.320610][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  231.320712][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.323216][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  231.327931][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.332539][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  231.337159][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.341872][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  231.346721][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  231.351329][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  231.356155][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)

VM DIAGNOSIS:
06:59:53  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffffffff89656412 RCX=ee5d439f72b1cf01 RDX=ffffc90000006701
RSI=ffffffff8be33660 RDI=ffffffff89656412 RBP=0000000000000001 RSP=ffffc90000006738
R8 =ffffc90000007a88 R9 =0000000000000000 R10=ffffc900000067d8 R11=fffff52000000cfd
R12=ffff88803c7e0000 R13=0000000000000000 R14=dffffc0000000000 R15=1ffff92000000cfa
RIP=ffffffff818c7f91 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f58215eb6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc091e0abd0 CR3=000000010a7a4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=a129ff2a6e2a2800 RBX=ffff88810f73a104 RCX=a129ff2a6e2a2800 RDX=ffffc900001df701
RSI=ffffffff8be33660 RDI=ffff88810f739cc0 RBP=dffffc0000000000 RSP=ffffc900001df608
R8 =ffffc900001e06d0 R9 =0000000000000000 R10=ffffc900001df758 R11=fffff5200003beed
R12=ffff88810f73a104 R13=ffffc900001d9000 R14=ffffc900001df708 R15=dffffc0000000000
RIP=ffffffff81a7174a RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb69f729800 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc46d49e58 CR3=000000001c28a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
