last executing test programs:

5m24.934035345s ago: executing program 1 (id=457):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10)
bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc5d116e9899720b9, {{0x42}}}, 0x10)

5m24.933535921s ago: executing program 1 (id=458):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000001080)='fd\x00')
getdents64(r1, &(0x7f0000002d40)=""/4112, 0x1010)

5m24.864407853s ago: executing program 1 (id=459):
r0 = socket$inet(0x2, 0x80001, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'security\x00', 0x2, [{}, {}]}, 0x48)

5m24.86421875s ago: executing program 1 (id=460):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@grpid}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

5m24.789224949s ago: executing program 1 (id=461):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0)

5m24.463205722s ago: executing program 1 (id=462):
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c})
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000000c0)={{{0x1, 0x1}}, 0x0, 0x180000, 0x0})
openat$pfkey(0xffffffffffffff9c, 0x0, 0x200000, 0x0)

5m24.310082655s ago: executing program 32 (id=462):
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c})
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000000c0)={{{0x1, 0x1}}, 0x0, 0x180000, 0x0})
openat$pfkey(0xffffffffffffff9c, 0x0, 0x200000, 0x0)

5m10.122604989s ago: executing program 2 (id=610):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x232, &(0x7f0000000640)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001540)={0x8}, 0x8)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000000280)=""/4096, 0x9005)

5m10.031682874s ago: executing program 2 (id=611):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)={0x3c, 0x19, 0x15, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x02\x00\x00\x00\x02'}, @nested={0x20, 0x9, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x3c}], 0x1}, 0x0)

5m9.902105328s ago: executing program 2 (id=613):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0)

5m9.901760467s ago: executing program 2 (id=615):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x124034, 0x0, 0x1, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

5m9.833032806s ago: executing program 2 (id=617):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9", 0x41}, {0x0}, {0x0}, {0x0}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="8f966bd94d16", 0x6}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

5m9.647862926s ago: executing program 2 (id=621):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xd4}}, 0x0)

5m9.607338075s ago: executing program 33 (id=621):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xd4}}, 0x0)

4m45.124005506s ago: executing program 3 (id=979):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'ip6erspan0\x00', 0x600})

4m45.123577256s ago: executing program 3 (id=981):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

4m44.954346422s ago: executing program 3 (id=986):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@get={0xe0, 0x13, 0x1, 0x70bd26, 0x25dfdbff, {{'sha256\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

4m44.954058878s ago: executing program 3 (id=988):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xe, &(0x7f0000000140)={[{@sysvgroups}, {@dax_inode}, {@noauto_da_alloc}, {@minixdf}, {@data_journal}, {@quota}]}, 0x3, 0x455, &(0x7f0000000f00)="$eJzs3MtvG0UYAPBv10n6pDGlPPoAAgUR8UiatEAPXEAgcQAJCQ7lGJK0KnUb1ASJVhUYhMoRVeKOOCLxF3CCCwJOSFzhjipVqJcWTkZr7yaOY6dxmsSl/v2kTWZ2Zz3zeXfs2Z1sAuhbI9mPJGJ3RPwREcON7PICI41fN69fmv7n+qXtEVF7+++kXu7G9UvTRdFiv115ZjSNSD9P4mCbeucvXDwzVanMns/z4wtnPxifv3DxudNnp07Nnpo9N3n8+LGjEy++MPn8in0vD3cfZ7bLjQMfzx3a//q7V96cPnHlvV++S4r4W+Jor9xtlSOrbXyyVuv29e5o9zSlk4EeNoSulCIiO1yD9f4/HKVYOnjD8dpnPW0csKlquQ6bqzXgLpZEr1sA9EbxRZ9d/xbL1o0+eu/ay40LoCzum/nS2DIQaV5msOX6diONRMSJ6r9fZ0us6T4EAMDt+SEb/zzbbvyXxgNN5fbkcyjliLg3IvZGxH0RsS8i7o+ol30wIh7qsv7WSZKV45/06roCW6Ns/PdSPre1fPyXRrWRKJfqucYYsByDycnTldkj+XsyGoPbsvzEKnX8+OrvX3ba1jz+y5as/mIsmLfj6sC25fvMTC1M3V7US659GnFgoF38yeJMQBIR+yPiwDrrOP30t4c6bRuJ6i3i72RjJplq30Q81Tj+1WiJv5CsPj85vj0qs0fGi7NipV9/u/xWp/pvffw3V3b8d7Y9/xfjLyfN87Xz3ddx+c8vOl7TrPf8H0reqaeH8nUfTS0snJ+IGEreaDS6ef3k0r5FviifxT96uH3/3xtL78TBiMhO4ocj4pGIeDRv+2MR8XhEHF4l/p9feeL99ce/ubL4Z7o6/kuJoWhd0z5ROvPT98sqLXcTf3b8j9VTo/matXz+raVd6zubAQAA4P8njYjdkaRji+k0HRtr/A3/vtiZVubmF545OffhuZnGMwLlGEyLO13DTfdDJxYv6xv5yTxfbD+a3zf+qrSjnh+bnqvM9Dp46HO7OvT/zF+ltrts29oWApvK81rQv/R/6F/6P/Qv/R/6V5v+v6MX7QC2Xrvv/0960A5g67X0//bTfsBdyfU/9C/9H/qX/g99aX5HrPqQfFT31Mut7Ul/iTsqEbERr1P8I4iWTZH2PkCJzUv09GMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgw/wXAAD//7Jx47M=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=')

4m44.828570347s ago: executing program 3 (id=991):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000014c0)={0x44, 0x2, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000000)

4m44.483493081s ago: executing program 3 (id=997):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x33)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4)
setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x4, @loopback, 0x4}, 0x1c)

4m44.35141238s ago: executing program 34 (id=997):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x33)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4)
setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x4, @loopback, 0x4}, 0x1c)

4m31.253660324s ago: executing program 5 (id=1188):
r0 = socket$inet6(0xa, 0x80002, 0x0)
read$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "4e4106", 0x8, 0x3a, 0x1, @remote, @empty, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x8001}}}}}}, 0x0)

4m31.202560681s ago: executing program 5 (id=1189):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x9, 0xbaf, &(0x7f0000002f00)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000)

4m31.142491656s ago: executing program 5 (id=1190):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "b4bc323ef77d1f000071849800000000dfff00"}})

4m31.058710233s ago: executing program 5 (id=1191):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
statx(r2, &(0x7f0000000100)='./file0\x00', 0x800, 0x1, 0x0)
getdents64(r2, &(0x7f0000000400)=""/4096, 0x1000)

4m30.944973832s ago: executing program 5 (id=1194):
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x154, &(0x7f0000000b40)="$eJzs27HK02AUBuCTtmrVpbM4BFycinoFilQQA4rSQSeF6tJKwS7RqZfi7XgH3oQgnbp9oimt1nb4hzT92+dZcuAlcM6QHL5A3t7+OB5NZx+mLxbRzbLoPIw8lln0ohXtqMwDADgly5TiZ0opXZvH9a+RUmq6IwCgbvY/AJwf+x8Azs9/+7/VdEcAQN1evX7z7FFRDF7meTfix7wclsPqWuVPnhaDe/kfvc1di7Icttf5/SrP/82vxI1V/mBnfjXu3qny39nj58VWfjNG9Y8PAAAAZ6Gfr+083/f7+/Kq+uv7wNb5vRO3OgcbAwC4gNnnL+N3k8n7T5e9yFYDHUs/ilqL798ijqCNEy4afjEBtds89E13AgAAAAAAAAAAAAAA7HOI34manhEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2/QoAAP//v8RNww==")
syz_read_part_table(0x5e4, &(0x7f0000000000)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de)

4m30.603266995s ago: executing program 5 (id=1201):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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")
r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0)

4m30.491565793s ago: executing program 35 (id=1201):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$eJzs3U9sHFcZAPBvdh0ndU1dm1pqysGBRLh/FNvtSk4NB8IBDhT1UiRUqRysZGMHr2Nju6I2F/fGiQoJBKiiasQBCSRiiQNwqChIHJAIEgIhLNRKIA78aQHhHggBjGZ3NtnYs2bBjhcyv5+02TdvnvO9t5vvafe9iSeAwjqR/pFE9EfE1YgYaBze2uBE4+kblY3ZK5WN2SS2t5/6U1Jvd7myMdts2vy5uyNiPSLuj4jvX4g4d2R33OXVtbnpWq26lB2Pr8wvji+vrp2+OD89U52pXqpUHp+anJw6MznxH4wm2fPsRxffGPrF7JMzL4/8/ekz81/5YxJn6+OOHeM4SHk96kkizt6OYF1QTscTEX0dth+uvvDKbe4SHfrc0OZ4+t7dFxGn6vk/EOX6uxnxvpee+ctAvPd6u5+9uvnS7w6zrwDAwdlOHd37NHBnKkX63T8pjUVEo1wqjY01vsPfF32l2sLyyiMXFp69dL6xRnBvHClduFirTmRrBffGkSQ9frRevnn82I7jSkQMRsSny3fVj8fOLdTOH+pMBzT1R7z+zU+c6717R/7/ttzIf+DOleb/z37w7e+m5bfK3e4NcJjS/P/aW/NPhPyHwpH/UFzyH4pL/kNxyX8oLvkPxSX/objkPxSX/Ifikv9QXK35L/2hmAZHXt1MImL9PXfVH6ne7FzOr+0B7iDb24n/5A8F5bM/FFdPtzsAdI3v+MDevzk74li7E4sH3xfgcJS63QGga0aP2/+DorL+D8Vl/R+Ky2d8wPo/FI/1fyiu/jb3/3pby727JiLinoj4UfnI0ea9voD/X/0Rr7949VvPRJR+n2Sf/0cHTvVPv/Ha91rb9SZ/rW8R9EbEJ1986gvPTa+sLD2a1v/5Rv3KF7P6x7o1GqATzTxt5jFQXMura3PTtVp1SUFBoXCF5jxwubIx23wc1tzzwsMRb76/cRFCGvdK9mic7cnWJo/V9yj7tpJbrlVIDmDv8jOnI9afj4j788afZPc7b+x89G2Vd8V/e/acPo5n6ydpm+EO45fv2V/8B1rij7TEf0eH8Tc/0mHD22Tw692N//Ivs9d/oqcn7/Xf77UxQ//m/BNf3WeAffrNr7sb/9RId+N/fiHi1XT+mcjLv1Kaljd2PnfOP/0t10n/tz41enP+u7Jr/ivdmP/Kbea/Ex3G+eHT1Y/l1Zd/HPHm8xEP5MZvxjtWj9W3VdoV/2TL/PPgHvH/8OGfzuXVn30tYvtyxGjkx2+NNb4yvzi+vLp2+uL89Ex1pnqpUnl8anJy6szkxHh9jXq8uVK925PXhz+QV3/yy43x97WJ3xx/u9d/e48xt1r70sf735lT/5PjjfgPnsx//4ey+I3Xv2dX/Hdlz+m/k39k1/Kmba5FxNGs/qGI+M4rgw/n9etD1xvxz7cZf+mW+LvH/0iH4//sr/75bF79cx/s8C8AAA5U+6WBbvcMAAA4aIex09jtMQL5+rZ6o3UbOFlv2VdYv7mvkNZfy/YXyusRf8v2GNL6h7JdsrScu9EA/M8ZXnv3z7vdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICiW15dm5uu1apLy93uCXDY/hUAAP//T2kBHQ==")
r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0)

3m11.894508918s ago: executing program 6 (id=2404):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x8b3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}}, 0x7, 0x9}, 0x90)

3m11.831330621s ago: executing program 6 (id=2406):
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'xfrm0\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x180, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x4, 0x81, 0xffffffff, 0x0, 0x17, 0x4, 0x0, [0x34, 0x4]}})

3m11.768368524s ago: executing program 6 (id=2407):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001240)=ANY=[@ANYBLOB="40040000100013070000000000000000e0000001000000000000000000000000ac1e000100000000000000000000000000000000000000000000000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x440}}, 0x0)

3m11.699006615s ago: executing program 6 (id=2409):
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0\x00')

3m11.698667864s ago: executing program 6 (id=2410):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x2, @private2, 0xfffffffc}, {0xa, 0x4e22, 0x0, @empty}, 0xc5, {[0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffff8]}}, 0x5c)

3m11.450198118s ago: executing program 6 (id=2418):
futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x20000, 0x0, &(0x7f00000002c0)=0x2, 0xfffffffb)

3m11.34823465s ago: executing program 36 (id=2418):
futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x20000, 0x0, &(0x7f00000002c0)=0x2, 0xfffffffb)

24.882412215s ago: executing program 7 (id=4938):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @loopback={0xff00000000000000}, 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000001c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x18}}], 0x1, 0x4000880)

24.808196782s ago: executing program 7 (id=4939):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r0, 0x80084523, &(0x7f0000001f40)=""/231)

24.807934675s ago: executing program 7 (id=4940):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1040, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)

24.762673252s ago: executing program 7 (id=4941):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

24.712095428s ago: executing program 7 (id=4942):
mkdir(&(0x7f0000000080)='./file1\x00', 0x14)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xa1000c, &(0x7f00000000c0)={[{@grpquota}, {@gid}, {@nodiscard}, {@errors_continue}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@usrquota}, {@errors_remount}, {@gid}]}, 0x1, 0x62b5, &(0x7f00000069c0)="$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")
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

24.502151865s ago: executing program 7 (id=4945):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
socket$packet(0x11, 0xa, 0x300)

9.497184053s ago: executing program 37 (id=4945):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
socket$packet(0x11, 0xa, 0x300)

2.000199697s ago: executing program 8 (id=5222):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x894, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}], [@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe62f, 0xffffffffffffffff, 0xf, 0x3, 0x7, {0x3, 0x0, 0x8, 0x9, 0x6, 0x6}, {0x8, 0x0, 0x9, 0x9, 0x6, 0x9}, 0x5, 0xa4de, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0)

1.999915376s ago: executing program 8 (id=5223):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe})
fcntl$setsig(r0, 0xa, 0x7)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)

1.931131409s ago: executing program 8 (id=5224):
ioperm(0x0, 0x3, 0x6)
msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0)
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x11)
wait4(0x0, 0x0, 0x1000000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000300)={0x2, 0x2, 0x4, 0x3, 0x6, 0xffff29fe})
r2 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000240)="8000102e75243301", 0x8}], 0x1, &(0x7f00000002c0)=[@dstopts={{0x18, 0x29, 0x37, {0x63}}}], 0x18}}], 0x1, 0x40000000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x67}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0xffffff01, 0xa)

1.872014041s ago: executing program 8 (id=5227):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00')
exit(0x5)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

1.201681195s ago: executing program 4 (id=5240):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="750a0000000000006111dc0000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)

1.140351477s ago: executing program 4 (id=5242):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)

1.071902979s ago: executing program 0 (id=5243):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000700007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000002000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

950.463989ms ago: executing program 0 (id=5244):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="130000000800000005000000070000002102", @ANYRES32], 0x50)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399})
io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000001900)={0x9, 0x1, 0x0, &(0x7f00000017c0)=[{0x0}, {&(0x7f00000002c0)=""/194, 0xc2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce)
io_uring_enter(r3, 0x8ae, 0x6931, 0x17, 0x0, 0x0)

950.226628ms ago: executing program 8 (id=5245):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x100000, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)

918.13058ms ago: executing program 4 (id=5246):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8)

861.033798ms ago: executing program 4 (id=5247):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88c00, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000d00)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000dc6000/0x3000)=nil, 0x3000, 0x1011})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x200000000000000})

860.693288ms ago: executing program 4 (id=5248):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000007000000a314934495"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94)

781.80357ms ago: executing program 8 (id=5249):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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")
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x14)
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
fallocate(r0, 0x0, 0x0, 0x1001f0)
open(&(0x7f00000001c0)='./file1\x00', 0x101000, 0x4)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x110)
open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x149)
pwritev2(r1, &(0x7f0000000240)=[{}], 0x1, 0x2000, 0x0, 0x3)

781.668692ms ago: executing program 4 (id=5250):
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = eventfd2(0x0, 0x1)
read$eventfd(r1, &(0x7f0000000040), 0x8)

67.496955ms ago: executing program 0 (id=5251):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000001020103000000000000000002000000240001801400018008000100e000000108000200e00000020c0002"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)

67.298276ms ago: executing program 0 (id=5252):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001e008d2a00000100000000000a000000", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

334.27µs ago: executing program 0 (id=5253):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

0s ago: executing program 0 (id=5254):
r0 = gettid()
prlimit64(r0, 0xe, &(0x7f0000000e80)={0x8, 0x8c}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439})
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0})
r5 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r6 = getpid()
sched_setscheduler(r6, 0x1, 0x0)

kernel console output (not intermixed with test programs):

t=0 ip=0x7f0a3c39cdd9 code=0x0
[  292.598448][ T5425] kernel read not supported for file /video37 (pid: 5425 comm: kworker/0:3)
[  293.604870][T13956] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3262'.
[  293.719430][T13952] loop7: detected capacity change from 0 to 32768
[  293.724081][T13952] XFS (loop7): Invalid device [./file2], error=-2
[  293.951756][ T5611] Bluetooth: hci1: connection err: -111
[  293.990003][T10315] tipc: Subscription rejected, illegal request
[  295.235396][T14059] netlink: 'syz.7.3279': attribute type 83 has an invalid length.
[  295.701242][T14069] use of bytesused == 0 is deprecated and will be removed in the future,
[  295.706286][T14069] use the actual size instead.
[  296.117091][T14083] openvswitch: netlink: IP tunnel dst address not specified
[  296.132120][ T5425] usb 8-1: new low-speed USB device number 13 using dummy_hcd
[  296.306999][ T5425] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  296.310705][ T5425] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  296.318866][ T5425] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  296.326378][ T5425] usb 8-1: config 0 interface 0 has no altsetting 0
[  296.331472][ T5425] usb 8-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00
[  296.337794][ T5425] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.343717][ T5425] usb 8-1: config 0 descriptor??
[  296.347913][T14063] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  296.391260][T14097] netlink: 'syz.0.3297': attribute type 9 has an invalid length.
[  296.679252][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3299'.
[  296.882535][ T5425] hid_parser_main: 468 callbacks suppressed
[  296.882548][ T5425] ortek 0003:05A4:1700.000C: unknown main item tag 0x3
[  296.887158][ T5425] ortek 0003:05A4:1700.000C: unknown main item tag 0x0
[  296.889518][ T5425] ortek 0003:05A4:1700.000C: unknown main item tag 0x0
[  296.891955][ T5425] ortek 0003:05A4:1700.000C: unknown main item tag 0x0
[  296.894140][ T5425] ortek 0003:05A4:1700.000C: unknown main item tag 0x0
[  296.896708][ T5425] ortek 0003:05A4:1700.000C: unknown main item tag 0x0
[  296.899164][ T5425] ortek 0003:05A4:1700.000C: unknown main item tag 0x0
[  296.901888][ T5425] ortek 0003:05A4:1700.000C: unknown main item tag 0x0
[  296.907050][ T5425] ortek 0003:05A4:1700.000C: hidraw0: USB HID v0.04 Device [HID 05a4:1700] on usb-dummy_hcd.7-1/input0
[  296.957797][ T5666] usb 8-1: USB disconnect, device number 13
[  297.519861][T14105] syzkaller1: entered promiscuous mode
[  297.522378][T14105] syzkaller1: entered allmulticast mode
[  297.981518][ T5666] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  298.131537][ T5666] usb 8-1: Using ep0 maxpacket: 32
[  298.135644][ T5666] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.139798][ T5666] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.143783][ T5666] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  298.147909][ T5666] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.154492][ T5666] usb 8-1: config 0 descriptor??
[  298.571832][ T5666] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0
[  298.856254][ T5425] usb 8-1: USB disconnect, device number 14
[  299.047385][T14117] loop4: detected capacity change from 0 to 256
[  299.052388][T14117] exfat: Deprecated parameter 'namecase'
[  299.064362][T14117] exfat: Deprecated parameter 'namecase'
[  299.074436][T14117] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  299.373812][T14123] loop4: detected capacity change from 0 to 32768
[  299.390358][T14123] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  299.395310][T14123] JBD2: Ignoring recovery information on journal
[  299.415365][T14123] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  299.472160][ T7337] ocfs2: Unmounting device (7,4) on (node local)
[  300.025989][T14157] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3324'.
[  300.204547][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3332'.
[  300.207383][T14174] tc_dump_action: action bad kind
[  300.237641][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'.
[  300.245603][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'.
[  300.873140][T14201] fuse: fd is not a fuse device
[  301.027123][T14206] loop4: detected capacity change from 0 to 2048
[  301.063004][T14208] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  301.225904][T14221] loop7: detected capacity change from 0 to 1024
[  302.670437][T14256] block device autoloading is deprecated and will be removed.
[  302.743297][T14261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3371'.
[  302.813479][T14267] netlink: 'syz.4.3374': attribute type 1 has an invalid length.
[  302.836737][T14267] 8021q: adding VLAN 0 to HW filter on device bond4
[  302.852540][T14267] vlan2: entered allmulticast mode
[  302.856498][T14267] bond4: entered allmulticast mode
[  302.896112][T14267] bond4: (slave geneve2): making interface the new active one
[  302.899523][T14267] geneve2: entered allmulticast mode
[  302.905147][T14267] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  303.201730][T14296] loop4: detected capacity change from 0 to 1764
[  304.017040][ T5611] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  304.026849][ T5611] Bluetooth: hci1: Injecting HCI hardware error event
[  304.032710][ T4999] Bluetooth: hci1: hardware error 0x00
[  304.504574][T14351] syzkaller1: entered promiscuous mode
[  304.506713][T14351] syzkaller1: entered allmulticast mode
[  304.602734][T14353] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  304.679934][T14355] syz.7.3414 (14355): drop_caches: 2
[  305.061313][T14375] netlink: 'syz.4.3423': attribute type 61 has an invalid length.
[  305.186352][T14384] loop4: detected capacity change from 0 to 128
[  305.216736][T14384] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  305.271016][ T7337] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  305.304563][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3428'.
[  305.813180][T14417] loop4: detected capacity change from 0 to 8
[  306.115096][   T33] audit: type=1800 audit(305.986:81): pid=14437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3446" name="file0" dev="fuse" ino=0 res=0 errno=0
[  306.172451][ T4999] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  306.357195][T14453] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3458'.
[  306.361236][T14453] netlink: Unknown conntrack attr (type=16, max=9)
[  306.653131][T14471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3466'.
[  306.724133][T14477] kAFS: unable to lookup cell 'էKyy
[  306.724133][T14477] 
[  306.724133][T14477] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qGjnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5!G3{K,'
[  306.870389][T14487] IPv6: NLM_F_CREATE should be specified when creating new route
[  306.873836][T14487] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  306.876770][T14487] IPv6: NLM_F_CREATE should be set when creating new route
[  306.879234][T14487] IPv6: NLM_F_CREATE should be set when creating new route
[  306.881934][T14487] IPv6: NLM_F_CREATE should be set when creating new route
[  306.908416][T14487] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3473'.
[  307.294313][T14510] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  307.473934][T14524] fuse: fd is not a fuse device
[  307.668398][T14539] loop4: detected capacity change from 0 to 512
[  307.680842][T14539] EXT4-fs: Ignoring removed i_version option
[  307.690500][T14539] EXT4-fs: Ignoring removed bh option
[  307.725899][T14539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.737992][T14539] EXT4-fs (loop4): shut down requested (2)
[  307.758074][ T7337] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.847679][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3502'.
[  308.821095][T14568] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3510'.
[  308.979277][T14578] 9p: Bad value for 'rfdno'
[  309.008548][T14580] loop7: detected capacity change from 0 to 512
[  309.011796][T14580] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  309.015131][T14580] EXT4-fs (loop7): group descriptors corrupted!
[  310.496792][T14606] loop7: detected capacity change from 0 to 4096
[  310.510054][T14606] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  310.512657][T14606] ntfs3(loop7): Failed to load $Extend (-22).
[  310.514615][T14606] ntfs3(loop7): Failed to initialize $Extend.
[  310.532594][T14606] ntfs3(loop7): ino=1b, "file0" ntfs_readdir
[  310.544059][T11924] ntfs3(loop7): ino=9, ntfs_sync_fs failed, -22.
[  310.610487][T14608] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[  310.715292][T14614] cgroup: none used incorrectly
[  312.344124][T14650] macvlan0: entered promiscuous mode
[  312.345986][T14650] netlink: 'syz.0.3544': attribute type 2 has an invalid length.
[  312.348391][T14650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3544'.
[  312.541073][T14659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3548'.
[  312.609375][T14663] 9p: Bad value for 'wfdno'
[  312.651686][T14667] loop4: detected capacity change from 0 to 512
[  312.655769][T14667] EXT4-fs: Ignoring removed mblk_io_submit option
[  312.661621][T14667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  312.686566][T14667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  312.723391][T14674] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  312.726051][T14674] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.771597][   T33] audit: type=1800 audit(312.636:82): pid=14667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3552" name="file2" dev="loop4" ino=16 res=0 errno=0
[  312.904256][ T7337] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.260666][T14716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3573'.
[  313.305702][T14718] loop7: detected capacity change from 0 to 8
[  313.320407][T14718] SQUASHFS error: xz decompression failed, data probably corrupt
[  313.336548][T14718] SQUASHFS error: Failed to read block 0x108: -5
[  313.344942][T14718] SQUASHFS error: Unable to read metadata cache entry [106]
[  313.347818][T14718] SQUASHFS error: Unable to read inode 0x11f
[  313.444005][T14724] netlink: 'syz.7.3578': attribute type 1 has an invalid length.
[  313.490152][T14724] bond1: entered promiscuous mode
[  313.492903][T14724] 8021q: adding VLAN 0 to HW filter on device bond1
[  313.515612][T14730] 8021q: adding VLAN 0 to HW filter on device bond1
[  313.520249][T14730] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  313.526110][T14733] loop4: detected capacity change from 0 to 128
[  313.528739][T14730] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  313.539660][T14733] qnx6: wrong signature (magic) in superblock #1.
[  313.588898][T14730] bond1: (slave wireguard0): making interface the new active one
[  313.600297][T14730] wireguard0: entered promiscuous mode
[  313.620018][T14730] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  314.336712][T14763] loop7: detected capacity change from 0 to 128
[  314.712925][T14766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.828724][   T33] audit: type=1326 audit(314.696:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14777 comm="syz.7.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3c39cdd9 code=0x7ffc0000
[  314.841605][   T33] audit: type=1326 audit(314.696:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14777 comm="syz.7.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3c39cdd9 code=0x7ffc0000
[  314.856714][   T33] audit: type=1326 audit(314.696:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14777 comm="syz.7.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a3c35d60e code=0x7ffc0000
[  314.875669][   T33] audit: type=1326 audit(314.696:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14777 comm="syz.7.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a3c39ca6b code=0x7ffc0000
[  314.884092][   T33] audit: type=1326 audit(314.696:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14777 comm="syz.7.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a3c39ca6b code=0x7ffc0000
[  314.892578][   T33] audit: type=1326 audit(314.716:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14777 comm="syz.7.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a3c39ca6b code=0x7ffc0000
[  314.899528][   T33] audit: type=1326 audit(314.716:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14777 comm="syz.7.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a3c39ca6b code=0x7ffc0000
[  314.938184][T14784] loop4: detected capacity change from 0 to 1024
[  314.944239][T14784] EXT4-fs: Ignoring removed bh option
[  314.952644][   T33] audit: type=1326 audit(314.826:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14777 comm="syz.7.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a3c39ca6b code=0x7ffc0000
[  314.965040][T14784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.012608][ T7337] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.105972][   T33] audit: type=1326 audit(314.976:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14777 comm="syz.7.3601" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a3c39ca6b code=0x7ffc0000
[  315.161662][ T5666] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  315.413222][T14799] loop4: detected capacity change from 0 to 32768
[  315.417535][T14799] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3610 (14799)
[  315.430442][T14799] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  315.434683][T14799] BTRFS info (device loop4): using crc32c checksum algorithm
[  315.438888][ T5666] usb 8-1: Using ep0 maxpacket: 16
[  315.446071][ T5666] usb 8-1: config 251 has an invalid interface number: 202 but max is 0
[  315.449996][ T5666] usb 8-1: config 251 has no interface number 0
[  315.452714][ T5666] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  315.456468][ T5666] usb 8-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  315.460328][ T5666] usb 8-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  315.464362][ T5666] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  315.468841][ T5666] usb 8-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  315.473788][ T5666] usb 8-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 120
[  315.478002][ T5666] usb 8-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  315.483643][ T5666] usb 8-1: config 251 interface 202 has no altsetting 0
[  315.489907][ T5666] usb 8-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  315.493868][ T5666] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  315.497038][ T5666] usb 8-1: Product: syz
[  315.499083][ T5666] usb 8-1: SerialNumber: syz
[  315.506081][T14778] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  315.585518][T14799] BTRFS info (device loop4): enabling ssd optimizations
[  315.588624][T14799] BTRFS info (device loop4): turning on flush-on-commit
[  315.591522][T14799] BTRFS info (device loop4): enabling free space tree
[  315.594329][T14799] BTRFS info (device loop4): enabling auto defrag
[  315.596936][T14799] BTRFS info (device loop4): use lzo compression, level 1
[  315.599769][T14799] BTRFS info (device loop4): max_inline set to 4096
[  315.727175][ T5666] cxacru 8-1:251.202: usbatm_usb_probe: invalid endpoint 02!
[  315.737459][ T5666] cxacru 8-1:251.202: probe with driver cxacru failed with error -22
[  315.749454][ T5666] usb 8-1: USB disconnect, device number 15
[  315.814666][ T7337] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  316.182431][T14836] loop4: detected capacity change from 0 to 32768
[  316.198255][T14836] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  316.206951][T14836] XFS (loop4): Ending clean mount
[  316.222551][ T7337] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  316.336897][T14848] loop7: detected capacity change from 0 to 512
[  316.346673][T14848] EXT4-fs: Ignoring removed i_version option
[  316.376212][T14848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  316.439471][T14848] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3623: invalid indirect mapped block 4294967295 (level 1)
[  316.452975][T14848] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  316.462044][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  316.468287][    C1] EXT4-fs (loop7): initial error at time 316: ext4_free_branches:1023: inode 11
[  316.471896][    C1] EXT4-fs (loop7): last error at time 316: ext4_free_branches:1023: inode 11
[  316.502089][T14848] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3623: invalid indirect mapped block 4294967295 (level 1)
[  316.516164][T14848] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  316.516775][T14848] EXT4-fs (loop7): 2 truncates cleaned up
[  316.573192][T14848] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.678974][T11924] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.066022][T14865] loop4: detected capacity change from 0 to 32768
[  317.147859][T14865] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  317.190049][T14865] XFS (loop4): Ending clean mount
[  317.282592][ T7337] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  317.524104][T14897] bond0: (slave vlan4): Opening slave failed
[  317.580896][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3644'.
[  317.590698][T14903] geneve1: entered promiscuous mode
[  317.828466][T14909] loop4: detected capacity change from 0 to 4096
[  318.176979][T14926] loop7: detected capacity change from 0 to 256
[  318.179851][T14926] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  318.186797][T14926] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  318.263501][   T33] kauditd_printk_skb: 28 callbacks suppressed
[  318.263513][   T33] audit: type=1326 audit(318.136:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.7.3655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3c39cdd9 code=0x7ffc0000
[  318.285266][   T33] audit: type=1326 audit(318.146:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.7.3655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3c39cdd9 code=0x7ffc0000
[  318.301483][   T33] audit: type=1326 audit(318.146:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.7.3655" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0a3c39cdd9 code=0x7ffc0000
[  318.327783][   T33] audit: type=1326 audit(318.146:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.7.3655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3c39cdd9 code=0x7ffc0000
[  318.340958][   T33] audit: type=1326 audit(318.146:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.7.3655" exe="/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f0a3c39cdd9 code=0x7ffc0000
[  318.359263][   T33] audit: type=1326 audit(318.146:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.7.3655" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3c39cdd9 code=0x7ffc0000
[  318.602636][T12061] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  318.614328][T14936] loop4: detected capacity change from 0 to 16
[  318.627339][T14936] erofs (device loop4): mounted with root inode @ nid 36.
[  318.773354][T12061] usb 8-1: Using ep0 maxpacket: 16
[  318.779659][T12061] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.791456][T12061] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.797631][T12061] usb 8-1: config 0 interface 0 has no altsetting 0
[  318.800092][T12061] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  318.804023][T12061] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.810017][T12061] usb 8-1: config 0 descriptor??
[  318.856170][T14946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3664'.
[  318.878680][T14946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3664'.
[  319.027210][T14955] loop4: detected capacity change from 0 to 128
[  319.153128][T14955] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  319.220172][T14955] EXT4-fs (loop4): shut down requested (1)
[  319.227923][T14955] fscrypt (loop4, inode 12): Error -5 getting encryption context
[  319.250841][T14966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3672'.
[  319.288931][ T7337] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  319.602920][T12061] nzxt-smart2 0003:1E71:2009.000E: collection stack underflow
[  319.605410][T12061] nzxt-smart2 0003:1E71:2009.000E: item 0 2 0 12 parsing failed
[  319.609485][T12061] nzxt-smart2 0003:1E71:2009.000E: probe with driver nzxt-smart2 failed with error -22
[  319.801831][T12061] usb 8-1: USB disconnect, device number 16
[  320.193479][T14981] loop4: detected capacity change from 0 to 32768
[  320.264696][T14981] (syz.4.3678,14981,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  320.271662][T14981] (syz.4.3678,14981,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  320.276081][T14981] (syz.4.3678,14981,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x4cae814d. Applying ECC.
[  320.282711][T14981] (syz.4.3678,14981,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x656d756e, computed 0x4cae814d
[  320.286683][T14981] (syz.4.3678,14981,1):ocfs2_validate_dir_block:465 ERROR: Checksum failed for dinode 288
[  320.289766][T14981] (syz.4.3678,14981,1):ocfs2_read_virt_blocks:1037 ERROR: status = -5
[  320.292890][T14981] (syz.4.3678,14981,1):ocfs2_read_dir_block:524 ERROR: status = -5
[  320.297405][T14981] (syz.4.3678,14981,1):ocfs2_find_entry_el:765 ERROR: reading directory 18, offset 0
[  320.300336][T14981] (syz.4.3678,14981,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  320.303859][T14981] (syz.4.3678,14981,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  320.303876][T14981] (syz.4.3678,14981,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  320.310860][T14981] (syz.4.3678,14981,0):ocfs2_initialize_super:2198 ERROR: status = -22
[  320.313679][T14981] (syz.4.3678,14981,0):ocfs2_fill_super:1177 ERROR: status = -22
[  320.937511][T15008] netlink: 'syz.4.3689': attribute type 5 has an invalid length.
[  320.940842][T15008] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3689'.
[  321.245379][T15020] loop4: detected capacity change from 0 to 32768
[  321.274767][T15020] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  321.317213][T15020] XFS (loop4): Ending clean mount
[  321.340816][ T7337] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  321.933977][ T5425] libceph: connect (1)[c::]:6789 error -101
[  321.938015][ T5425] libceph: mon0 (1)[c::]:6789 connect error
[  321.951903][ T5425] libceph: connect (1)[c::]:6789 error -101
[  321.954767][ T5666] libceph: connect (1)[c::]:6789 error -101
[  321.958253][ T5425] libceph: mon0 (1)[c::]:6789 connect error
[  321.973137][ T5666] libceph: mon0 (1)[c::]:6789 connect error
[  322.217557][ T5425] libceph: connect (1)[c::]:6789 error -101
[  322.219832][ T5425] libceph: mon0 (1)[c::]:6789 connect error
[  322.254432][ T5666] libceph: connect (1)[c::]:6789 error -101
[  322.269192][ T5666] libceph: mon0 (1)[c::]:6789 connect error
[  322.679749][T15053] ceph: No mds server is up or the cluster is laggy
[  322.685364][T15057] ceph: No mds server is up or the cluster is laggy
[  322.723791][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  322.726310][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  322.741939][ T5425] libceph: connect (1)[c::]:6789 error -101
[  322.750027][ T5425] libceph: mon0 (1)[c::]:6789 connect error
[  322.791845][ T5666] libceph: connect (1)[c::]:6789 error -101
[  322.803627][ T5666] libceph: mon0 (1)[c::]:6789 connect error
[  323.417806][T15080] l2tp_ppp: sess 2/0: no socket in recv
[  323.827152][T15103] loop4: detected capacity change from 0 to 1024
[  323.830620][T15103] EXT4-fs: Ignoring removed orlov option
[  323.846412][T15103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.898033][ T7337] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.955123][ T5666] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  324.214626][ T5666] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  324.221196][ T5666] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.265899][ T5666] usb 8-1: config 0 descriptor??
[  324.514200][ T5666] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  324.584956][T15124] tmpfs: Cannot retroactively limit inodes
[  324.716992][ T5666] [drm:udl_init] *ERROR* Selecting channel failed
[  324.775860][ T5666] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 3
[  324.779218][ T5666] [drm] Initialized udl on minor 3
[  324.811197][ T5666] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  324.931864][ T5666] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  324.942418][T15136] loop4: detected capacity change from 0 to 32768
[  324.973855][ T5666] usb 8-1: USB disconnect, device number 17
[  324.995458][ T5772] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  325.002830][T15136] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  325.038518][T15136] XFS (loop4): Ending clean mount
[  325.048760][T15136] XFS (loop4): Quotacheck needed: Please wait.
[  325.135204][T15136] XFS (loop4): Quotacheck: Done.
[  325.201089][T15154] kAFS: unable to lookup cell '(,cL'
[  325.931118][T15169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  326.213306][T15182] input: syz0 as /devices/virtual/input/input18
[  326.471723][T15192] vlan4: entered promiscuous mode
[  326.476453][T15192] bond0: entered promiscuous mode
[  326.480834][T15192] bond_slave_0: entered promiscuous mode
[  326.488999][T15192] bond_slave_1: entered promiscuous mode
[  326.576858][ T7337] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  326.771070][T15197] loop7: detected capacity change from 0 to 8
[  326.789725][T15197] SQUASHFS error: lzo decompression failed, data probably corrupt
[  326.809343][T15197] SQUASHFS error: Failed to read block 0x82: -5
[  326.830317][T15197] SQUASHFS error: Unable to read metadata cache entry [80]
[  326.839706][T15197] SQUASHFS error: Unable to read inode 0x11f
[  326.995544][T15208] loop4: detected capacity change from 0 to 4096
[  327.022687][T15211] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  327.605602][T15231] loop7: detected capacity change from 0 to 4096
[  327.615293][T15231] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  327.628058][T15228] loop4: detected capacity change from 0 to 32768
[  327.631038][T15228] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3777 (15228)
[  327.662244][T15231] ntfs3(loop7): Failed to initialize $Extend/$Reparse.
[  327.688597][T15228] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  327.703488][T15228] BTRFS info (device loop4): using blake2b checksum algorithm
[  327.791509][T15228] BTRFS info (device loop4): enabling ssd optimizations
[  327.800187][T15228] BTRFS info (device loop4): turning on async discard
[  327.803406][T15228] BTRFS info (device loop4): enabling free space tree
[  327.811857][   T33] audit: type=1800 audit(327.674:125): pid=15228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3777" name="file1" dev="loop4" ino=260 res=0 errno=0
[  328.062213][ T7337] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  328.814948][T15284] CIFS: bad ip= option (%RHe'ˠ/1C~1WexEAeSb{~R)
[  329.136525][T15296] libceph: resolve '400' (ret=-3): failed
[  330.278417][T15325] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3813'.
[  330.355321][T15328] loop7: detected capacity change from 0 to 16
[  330.365157][T15328] erofs (device loop7): mounted with root inode @ nid 36.
[  330.450233][T15329] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  331.166737][T15351] geneve1: left promiscuous mode
[  331.185271][T15351] bond1: left promiscuous mode
[  331.187382][T15351] wireguard0: left promiscuous mode
[  331.196822][T15356] netlink: 'syz.0.3827': attribute type 1 has an invalid length.
[  331.544907][T15364] loop7: detected capacity change from 0 to 40427
[  331.551171][T15364] F2FS-fs (loop7): invalid crc value
[  331.584438][T15364] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  331.597799][T15364] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  331.607785][   T33] audit: type=1800 audit(331.474:126): pid=15364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3831" name="bus" dev="loop7" ino=14 res=0 errno=0
[  331.629756][T11924] syz-executor: attempt to access beyond end of device
[  331.629756][T11924] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  331.637991][T11924] CPU: 0 UID: 0 PID: 11924 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  331.638006][T11924] Tainted: [L]=SOFTLOCKUP
[  331.638009][T11924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  331.638014][T11924] Call Trace:
[  331.638017][T11924]  <TASK>
[  331.638021][T11924]  dump_stack_lvl+0xe8/0x150
[  331.638034][T11924]  f2fs_stop_checkpoint+0x3c7/0x590
[  331.638045][T11924]  f2fs_write_end_io+0x1274/0x1740
[  331.638062][T11924]  __submit_merged_bio+0x256/0x6a0
[  331.638074][T11924]  __submit_merged_write_cond+0x3c9/0x4e0
[  331.638085][T11924]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  331.638102][T11924]  f2fs_write_data_pages+0x287e/0x34f0
[  331.638111][T11924]  ? unwind_next_frame+0xa6/0x2550
[  331.638132][T11924]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  331.638141][T11924]  ? is_bpf_text_address+0x26/0x2b0
[  331.638153][T11924]  ? arch_stack_walk+0xfb/0x150
[  331.638173][T11924]  ? add_lock_to_list+0xc7/0x100
[  331.638183][T11924]  ? lockdep_unlock+0x5d/0xd0
[  331.638189][T11924]  ? __lock_acquire+0x146e/0x2cf0
[  331.638232][T11924]  ? do_raw_spin_lock+0x12b/0x2f0
[  331.638247][T11924]  ? do_raw_spin_unlock+0x4d/0x210
[  331.638257][T11924]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  331.638267][T11924]  do_writepages+0x32e/0x550
[  331.638278][T11924]  ? do_raw_spin_unlock+0x4d/0x210
[  331.638290][T11924]  filemap_fdatawrite+0x1e9/0x2f0
[  331.638300][T11924]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  331.638324][T11924]  ? do_raw_spin_unlock+0x4d/0x210
[  331.638335][T11924]  f2fs_sync_dirty_inodes+0x30e/0x830
[  331.638351][T11924]  f2fs_write_checkpoint+0x9df/0x26a0
[  331.638360][T11924]  ? __lock_acquire+0x6b5/0x2cf0
[  331.638379][T11924]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  331.638407][T11924]  kill_f2fs_super+0x314/0x730
[  331.638419][T11924]  ? __pfx_kill_f2fs_super+0x10/0x10
[  331.638433][T11924]  ? lockdep_hardirqs_on+0x7a/0x110
[  331.638447][T11924]  deactivate_locked_super+0xbc/0x130
[  331.638459][T11924]  cleanup_mnt+0x437/0x4d0
[  331.638470][T11924]  ? _raw_spin_unlock_irq+0x23/0x50
[  331.638479][T11924]  task_work_run+0x1d9/0x270
[  331.638491][T11924]  ? __pfx_task_work_run+0x10/0x10
[  331.638503][T11924]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.638512][T11924]  exit_to_user_mode_loop+0xed/0x480
[  331.638519][T11924]  ? rcu_is_watching+0x15/0xb0
[  331.638534][T11924]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.638558][T11924]  do_syscall_64+0x33e/0xf80
[  331.638568][T11924]  ? trace_irq_disable+0x3b/0x140
[  331.638581][T11924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.638588][T11924] RIP: 0033:0x7f0a3c39e017
[  331.638596][T11924] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  331.638602][T11924] RSP: 002b:00007ffce3523c38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  331.638610][T11924] RAX: 0000000000000000 RBX: 00007f0a3c432120 RCX: 00007f0a3c39e017
[  331.638615][T11924] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce3523cf0
[  331.638620][T11924] RBP: 00007ffce3523cf0 R08: 00007ffce3524cf0 R09: 00000000ffffffff
[  331.638624][T11924] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce3524d80
[  331.638629][T11924] R13: 00007f0a3c432120 R14: 0000000000050edc R15: 00007ffce3524dc0
[  331.638641][T11924]  </TASK>
[  331.638718][T11924] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  331.770904][T11924] CPU: 0 UID: 0 PID: 11924 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  331.770919][T11924] Tainted: [L]=SOFTLOCKUP
[  331.770922][T11924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  331.770927][T11924] Call Trace:
[  331.770931][T11924]  <TASK>
[  331.770935][T11924]  dump_stack_lvl+0xe8/0x150
[  331.770948][T11924]  f2fs_stop_checkpoint+0x3c7/0x590
[  331.770960][T11924]  f2fs_write_end_io+0x1274/0x1740
[  331.770985][T11924]  __submit_merged_bio+0x256/0x6a0
[  331.770997][T11924]  __submit_merged_write_cond+0x3c9/0x4e0
[  331.771009][T11924]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  331.771027][T11924]  f2fs_write_data_pages+0x287e/0x34f0
[  331.771037][T11924]  ? unwind_next_frame+0xa6/0x2550
[  331.771060][T11924]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  331.771069][T11924]  ? is_bpf_text_address+0x26/0x2b0
[  331.771081][T11924]  ? arch_stack_walk+0xfb/0x150
[  331.771103][T11924]  ? add_lock_to_list+0xc7/0x100
[  331.771113][T11924]  ? lockdep_unlock+0x5d/0xd0
[  331.771119][T11924]  ? __lock_acquire+0x146e/0x2cf0
[  331.771138][T11924]  ? do_raw_spin_lock+0x12b/0x2f0
[  331.771153][T11924]  ? do_raw_spin_unlock+0x4d/0x210
[  331.771164][T11924]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  331.771173][T11924]  do_writepages+0x32e/0x550
[  331.771186][T11924]  ? do_raw_spin_unlock+0x4d/0x210
[  331.771228][T11924]  filemap_fdatawrite+0x1e9/0x2f0
[  331.771245][T11924]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  331.771282][T11924]  ? do_raw_spin_unlock+0x4d/0x210
[  331.771294][T11924]  f2fs_sync_dirty_inodes+0x30e/0x830
[  331.771311][T11924]  f2fs_write_checkpoint+0x9df/0x26a0
[  331.771336][T11924]  ? __lock_acquire+0x6b5/0x2cf0
[  331.771360][T11924]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  331.771392][T11924]  kill_f2fs_super+0x314/0x730
[  331.771405][T11924]  ? __pfx_kill_f2fs_super+0x10/0x10
[  331.771420][T11924]  ? lockdep_hardirqs_on+0x7a/0x110
[  331.771436][T11924]  deactivate_locked_super+0xbc/0x130
[  331.771449][T11924]  cleanup_mnt+0x437/0x4d0
[  331.771460][T11924]  ? _raw_spin_unlock_irq+0x23/0x50
[  331.771472][T11924]  task_work_run+0x1d9/0x270
[  331.771485][T11924]  ? __pfx_task_work_run+0x10/0x10
[  331.771498][T11924]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.771506][T11924]  exit_to_user_mode_loop+0xed/0x480
[  331.771514][T11924]  ? rcu_is_watching+0x15/0xb0
[  331.771524][T11924]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.771531][T11924]  do_syscall_64+0x33e/0xf80
[  331.771540][T11924]  ? trace_irq_disable+0x3b/0x140
[  331.771554][T11924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.771561][T11924] RIP: 0033:0x7f0a3c39e017
[  331.771570][T11924] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  331.771576][T11924] RSP: 002b:00007ffce3523c38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  331.771585][T11924] RAX: 0000000000000000 RBX: 00007f0a3c432120 RCX: 00007f0a3c39e017
[  331.771590][T11924] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce3523cf0
[  331.771595][T11924] RBP: 00007ffce3523cf0 R08: 00007ffce3524cf0 R09: 00000000ffffffff
[  331.771600][T11924] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce3524d80
[  331.771604][T11924] R13: 00007f0a3c432120 R14: 0000000000050edc R15: 00007ffce3524dc0
[  331.771617][T11924]  </TASK>
[  331.917891][T11924] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  332.240150][T15386] loop7: detected capacity change from 0 to 512
[  332.279848][T15386] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.320287][T15386] EXT4-fs error (device loop7): ext4_readdir:225: inode #2: comm syz.7.3833: path (unknown): directory fails checksum at offset 0
[  332.352245][T11924] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.642487][T15398] loop4: detected capacity change from 0 to 32768
[  332.646050][T15398] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3843 (15398)
[  332.671697][   T24] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  332.725065][T15398] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  332.737308][T15398] BTRFS info (device loop4): using xxhash64 checksum algorithm
[  332.841704][   T24] usb 8-1: Using ep0 maxpacket: 8
[  332.842710][T15398] BTRFS info (device loop4): enabling ssd optimizations
[  332.849706][   T24] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  332.853683][T15398] BTRFS info (device loop4): turning on async discard
[  332.857615][T15398] BTRFS info (device loop4): enabling free space tree
[  332.860750][   T24] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  332.871503][   T24] usb 8-1: Product: syz
[  332.873795][   T24] usb 8-1: Manufacturer: syz
[  332.879914][   T24] usb 8-1: SerialNumber: syz
[  332.895362][   T24] usb 8-1: config 0 descriptor??
[  332.901702][ T7337] BTRFS info (device loop4): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  332.909693][   T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  333.419282][T15443] loop4: detected capacity change from 0 to 512
[  333.424787][T15443] EXT4-fs: inline encryption not supported
[  333.427722][T15443] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  333.436328][T15443] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  333.439952][T15443] System zones: 1-12
[  333.442647][T15443] EXT4-fs (loop4): 1 truncate cleaned up
[  333.445902][T15443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  333.455263][T15443] EXT4-fs warning (device loop4): verify_group_input:156: Last group not full
[  333.484669][ T7337] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.525290][   T24] gspca_zc3xx: reg_w_i err -71
[  333.527264][   T24] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  333.534180][   T24] usb 8-1: USB disconnect, device number 18
[  333.821977][T15464] comedi comedi0: dac02: I/O base address not correctly aligned
[  333.916123][T15470] loop4: detected capacity change from 0 to 764
[  334.282465][T15501] loop7: detected capacity change from 0 to 16
[  334.288895][T15501] erofs (device loop7): mounted with root inode @ nid 36.
[  334.304760][T15501] syz.7.3884: attempt to access beyond end of device
[  334.304760][T15501] loop7: rw=524288, sector=1342177272, nr_sectors = 32 limit=16
[  334.323072][T15501] syz.7.3884: attempt to access beyond end of device
[  334.323072][T15501] loop7: rw=0, sector=1342177272, nr_sectors = 8 limit=16
[  334.329499][   T33] audit: type=1800 audit(334.194:127): pid=15501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3884" name="file1" dev="loop7" ino=86 res=0 errno=0
[  334.878128][T15511] loop7: detected capacity change from 0 to 128
[  334.883397][T15511] FAT-fs (loop7): bread failed, FSINFO block (sector = 65535)
[  335.402626][T15513] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3889'.
[  335.442410][T15515] xt_hashlimit: size too large, truncated to 1048576
[  335.599833][T15521] xt_SECMARK: invalid mode: 2
[  335.845063][T15535] loop7: detected capacity change from 0 to 256
[  335.855205][T15535] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  337.201626][   T24] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  337.353055][   T24] usb 8-1: config 0 has no interfaces?
[  337.359507][   T24] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  337.366999][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.372504][   T24] usb 8-1: Product: syz
[  337.374845][   T24] usb 8-1: Manufacturer: syz
[  337.377388][   T24] usb 8-1: SerialNumber: syz
[  337.383826][   T24] usb 8-1: config 0 descriptor??
[  337.590141][   T24] usb 8-1: USB disconnect, device number 19
[  338.007211][T15583] overlay: Unknown parameter 'obj_user'
[  338.338285][T15603] loop4: detected capacity change from 0 to 32768
[  338.350701][T15605] loop7: detected capacity change from 0 to 40427
[  338.355830][T15605] F2FS-fs (loop7): invalid crc value
[  338.383612][T15605] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  338.392194][T15605] F2FS-fs (loop7): Start checkpoint disabled!
[  338.402950][T15605] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  338.405797][T15605] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  338.511995][   T33] audit: type=1800 audit(338.384:128): pid=15608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3931" name="bus" dev="loop7" ino=14 res=0 errno=0
[  339.046977][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3933'.
[  339.489721][T15619] overlayfs: missing 'lowerdir'
[  340.123995][   T26] kworker/u9:0: attempt to access beyond end of device
[  340.123995][   T26] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  340.138717][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  340.138749][   T26] Tainted: [L]=SOFTLOCKUP
[  340.138752][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  340.138758][   T26] Workqueue: writeback wb_workfn (flush-7:7)
[  340.138790][   T26] Call Trace:
[  340.138794][   T26]  <TASK>
[  340.138799][   T26]  dump_stack_lvl+0xe8/0x150
[  340.138810][   T26]  f2fs_stop_checkpoint+0x3c7/0x590
[  340.138821][   T26]  f2fs_write_end_io+0x1274/0x1740
[  340.138839][   T26]  __submit_merged_bio+0x256/0x6a0
[  340.138850][   T26]  __submit_merged_write_cond+0x3c9/0x4e0
[  340.138862][   T26]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  340.138879][   T26]  f2fs_write_data_pages+0x287e/0x34f0
[  340.138902][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  340.138928][   T26]  ? finish_task_switch+0x41f/0xbe0
[  340.138936][   T26]  ? lockdep_hardirqs_on+0x7a/0x110
[  340.138945][   T26]  ? finish_task_switch+0x41f/0xbe0
[  340.138967][   T26]  ? lockdep_hardirqs_on+0x7a/0x110
[  340.138977][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  340.138987][   T26]  do_writepages+0x32e/0x550
[  340.138998][   T26]  ? reacquire_held_locks+0x104/0x190
[  340.139007][   T26]  ? writeback_sb_inodes+0x463/0x19d0
[  340.139015][   T26]  ? preempt_schedule_thunk+0x16/0x30
[  340.139028][   T26]  __writeback_single_inode+0x133/0x10e0
[  340.139040][   T26]  writeback_sb_inodes+0x979/0x19d0
[  340.139049][   T26]  ? __lock_acquire+0x6b5/0x2cf0
[  340.139059][   T26]  ? do_raw_spin_lock+0x12b/0x2f0
[  340.139075][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  340.139084][   T26]  ? do_raw_spin_lock+0x12b/0x2f0
[  340.139121][   T26]  ? rcu_is_watching+0x15/0xb0
[  340.139165][   T26]  wb_writeback+0x445/0xb00
[  340.139185][   T26]  ? queue_io+0x261/0x470
[  340.139203][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  340.139215][   T26]  ? do_raw_spin_lock+0x12b/0x2f0
[  340.139240][   T26]  wb_workfn+0x3f8/0xf10
[  340.139251][   T26]  ? __lock_acquire+0x6b5/0x2cf0
[  340.139262][   T26]  ? look_up_lock_class+0x57/0x110
[  340.139289][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  340.139305][   T26]  ? do_raw_spin_lock+0x12b/0x2f0
[  340.139320][   T26]  ? lock_acquire+0x106/0x350
[  340.139334][   T26]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  340.139353][   T26]  ? process_scheduled_works+0xa70/0x1860
[  340.139367][   T26]  ? process_scheduled_works+0xa70/0x1860
[  340.139385][   T26]  ? process_scheduled_works+0xa70/0x1860
[  340.139397][   T26]  ? process_scheduled_works+0xa70/0x1860
[  340.139410][   T26]  process_scheduled_works+0xb5d/0x1860
[  340.139441][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  340.139459][   T26]  ? assign_work+0x3d5/0x5e0
[  340.139482][   T26]  worker_thread+0xa53/0xfc0
[  340.139515][   T26]  kthread+0x388/0x470
[  340.139533][   T26]  ? __pfx_worker_thread+0x10/0x10
[  340.139544][   T26]  ? __pfx_kthread+0x10/0x10
[  340.139561][   T26]  ret_from_fork+0x514/0xb70
[  340.139577][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  340.139590][   T26]  ? __switch_to+0xc79/0x1410
[  340.139611][   T26]  ? __pfx_kthread+0x10/0x10
[  340.139626][   T26]  ret_from_fork_asm+0x1a/0x30
[  340.139649][   T26]  </TASK>
[  340.320377][   T26] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  340.881759][T15661] loop7: detected capacity change from 0 to 4096
[  340.944095][T15664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3955'.
[  341.028516][T15661] ntfs3(loop7): ino=21, "file1" failed to extend initialized size to 666475.
[  341.989525][T15686] loop4: detected capacity change from 0 to 32768
[  342.021937][T15686] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  342.065010][T15686] XFS (loop4): Ending clean mount
[  342.148914][ T7337] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  342.306983][   T33] audit: type=1326 audit(342.174:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.7.3969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3c39cdd9 code=0x7ffc0000
[  342.316277][   T33] audit: type=1326 audit(342.174:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.7.3969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3c39cdd9 code=0x7ffc0000
[  342.323812][   T33] audit: type=1326 audit(342.184:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.7.3969" exe="/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f0a3c39cdd9 code=0x7ffc0000
[  342.340489][   T33] audit: type=1326 audit(342.184:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.7.3969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3c39cdd9 code=0x7ffc0000
[  342.352815][   T33] audit: type=1326 audit(342.184:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.7.3969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3c39cdd9 code=0x7ffc0000
[  342.365361][   T33] audit: type=1326 audit(342.194:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.7.3969" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a3c39cdd9 code=0x7ffc0000
[  342.378763][   T33] audit: type=1326 audit(342.194:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.7.3969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3c39cdd9 code=0x7ffc0000
[  342.391876][   T33] audit: type=1326 audit(342.194:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.7.3969" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a3c39cdd9 code=0x7ffc0000
[  342.398844][   T33] audit: type=1326 audit(342.194:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.7.3969" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a3c39e647 code=0x7ffc0000
[  342.409521][   T33] audit: type=1326 audit(342.194:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15701 comm="syz.7.3969" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0a3c35d60e code=0x7ffc0000
[  342.436362][T15718] netlink: 'syz.0.3976': attribute type 2 has an invalid length.
[  342.462430][T15720] fuse: fd is not a fuse device
[  343.559380][T15756] usb usb8: usbfs: process 15756 (syz.4.3994) did not claim interface 0 before use
[  343.608745][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3995'.
[  343.611772][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3995'.
[  343.650426][T15760] netlink: 1355 bytes leftover after parsing attributes in process `syz.4.3996'.
[  345.013289][T15781] loop4: detected capacity change from 0 to 512
[  345.157849][T15788] 9pnet_fd: Insufficient options for proto=fd
[  345.365466][T15808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4016'.
[  345.489833][T15814] overlayfs: failed to clone lowerpath
[  345.599337][T15818] xt_nat: multiple ranges no longer supported
[  347.139364][T15844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'.
[  347.144530][T15844] netlink: 'syz.0.4030': attribute type 8 has an invalid length.
[  347.153305][T15844] geneve2: entered promiscuous mode
[  347.155053][T15844] geneve2: entered allmulticast mode
[  347.157673][ T5674] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.160714][ T5674] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.164973][ T5674] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.169362][ T5674] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.437286][T15862] fuse: fd is not a fuse device
[  347.556851][T15866] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  347.851656][ T5666] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  348.002569][ T5666] usb 8-1: Using ep0 maxpacket: 16
[  348.005756][ T5666] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  348.014979][ T5666] usb 8-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  348.022776][ T5666] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.027555][ T5666] usb 8-1: config 0 descriptor??
[  348.445477][ T5666] zeroplus 0003:0C12:0030.000F: unknown main item tag 0x0
[  348.448232][ T5666] zeroplus 0003:0C12:0030.000F: unknown main item tag 0x0
[  348.450621][ T5666] zeroplus 0003:0C12:0030.000F: unknown main item tag 0x0
[  348.454813][ T5666] zeroplus 0003:0C12:0030.000F: unknown main item tag 0x0
[  348.458866][ T5666] zeroplus 0003:0C12:0030.000F: unknown main item tag 0x0
[  348.464775][ T5666] zeroplus 0003:0C12:0030.000F: unknown main item tag 0x0
[  348.468064][ T5666] zeroplus 0003:0C12:0030.000F: bogus close delimiter
[  348.471045][ T5666] zeroplus 0003:0C12:0030.000F: item 0 0 2 10 parsing failed
[  348.476115][ T5666] zeroplus 0003:0C12:0030.000F: parse failed
[  348.478293][ T5666] zeroplus 0003:0C12:0030.000F: probe with driver zeroplus failed with error -22
[  348.554663][T15907] tipc: Cannot configure node identity twice
[  348.559532][T15909] loop4: detected capacity change from 0 to 512
[  348.566042][T15909] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  348.617921][T15909] EXT4-fs (loop4): 1 truncate cleaned up
[  348.623549][T15909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.648117][ T5666] usb 8-1: USB disconnect, device number 20
[  348.717800][ T7337] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.951119][   T33] kauditd_printk_skb: 16 callbacks suppressed
[  348.951135][   T33] audit: type=1326 audit(348.814:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.4.4070" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c299cdd9 code=0x7ffc0000
[  348.965204][   T33] audit: type=1326 audit(348.834:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.4.4070" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c299cdd9 code=0x7ffc0000
[  348.981491][   T33] audit: type=1326 audit(348.834:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.4.4070" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c299cdd9 code=0x7ffc0000
[  348.989350][   T33] audit: type=1326 audit(348.834:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.4.4070" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c299cdd9 code=0x7ffc0000
[  348.999851][   T33] audit: type=1326 audit(348.844:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.4.4070" exe="/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f59c299cdd9 code=0x7ffc0000
[  349.014455][   T33] audit: type=1326 audit(348.844:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.4.4070" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c299cdd9 code=0x7ffc0000
[  349.023931][   T33] audit: type=1326 audit(348.844:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.4.4070" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c299cdd9 code=0x7ffc0000
[  349.030689][   T33] audit: type=1326 audit(348.844:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.4.4070" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f59c299cdd9 code=0x7ffc0000
[  349.037864][   T33] audit: type=1326 audit(348.844:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.4.4070" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f59c299cdd9 code=0x7ffc0000
[  349.077531][T15933] loop4: detected capacity change from 0 to 64
[  349.085856][T15933] MINIX-fs: mounting file system with errors, running fsck is recommended
[  349.236041][T15942] IPv6: NLM_F_REPLACE set, but no existing node found!
[  349.457731][T15960] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  349.480872][T15962] loop7: detected capacity change from 0 to 512
[  349.488461][T15960] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  349.491763][T15962] EXT4-fs: Ignoring removed bh option
[  349.501976][T15962] EXT4-fs: Ignoring removed mblk_io_submit option
[  349.517448][T15965] loop4: detected capacity change from 0 to 1024
[  349.520538][T15962] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  349.539401][T15962] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  349.555770][T15962] EXT4-fs (loop7): orphan cleanup on readonly fs
[  349.575028][T15962] Quota error (device loop7): do_insert_tree: Free block already used in tree: block 4
[  349.579512][T15965] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  349.606946][T15962] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4086: Failed to acquire dquot type 1
[  349.617285][T15965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.623253][T15962] loop7: lost filesystem error report for type 5 error -5
[  349.623960][T15962] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4086: Invalid block bitmap block 0 in block_group 0
[  349.632098][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  349.632108][    C1] EXT4-fs (loop7): last error at time 349: ext4_acquire_dquot:7034
[  349.649112][T15962] loop7: lost filesystem error report for type 5 error -117
[  349.653738][T15962] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4086: Invalid block bitmap block 0 in block_group 0
[  349.660528][T15962] loop7: lost filesystem error report for type 5 error -117
[  349.664613][T15962] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.4086: Invalid block bitmap block 0 in block_group 0
[  349.687932][T15962] loop7: lost filesystem error report for type 5 error -117
[  349.718297][T15962] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4086: Failed to acquire dquot type 1
[  349.735566][T15962] loop7: lost filesystem error report for type 5 error -28
[  349.760871][T15962] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4086: Failed to acquire dquot type 1
[  349.788974][T15975] EXT4-fs error (device loop4): __ext4_remount:6837: comm syz.4.4081: Abort forced by user
[  349.796683][T15962] loop7: lost filesystem error report for type 5 error -28
[  349.798421][T15962] EXT4-fs (loop7): 1 orphan inode deleted
[  349.817410][T15962] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  349.821580][T15975] EXT4-fs (loop4): Remounting filesystem read-only
[  349.830597][T15975] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  349.878139][T15962] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz.7.4086: deleted inode referenced: 12
[  349.936275][T11924] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.297485][ T7337] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.343746][T15983] loop7: detected capacity change from 0 to 32768
[  350.361725][T15985] netlink: 'syz.0.4095': attribute type 83 has an invalid length.
[  350.376435][T15983] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  350.412463][T15983] XFS (loop7): Ending clean mount
[  350.533998][T16005] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4101'.
[  351.273796][T11924] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  351.607586][T16020] loop7: detected capacity change from 0 to 256
[  351.610874][T16020] exfat: Deprecated parameter 'utf8'
[  351.613636][T16020] exfat: Deprecated parameter 'utf8'
[  351.620714][T16020] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  351.636549][T16020] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 1)
[  351.643854][T16020] exFAT-fs (loop7): failed to load alloc-bitmap
[  351.657604][T16020] exFAT-fs (loop7): failed to recognize exfat type
[  351.683966][T16022] loop4: detected capacity change from 0 to 512
[  351.743491][T16022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  351.775767][T16022] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #12: comm syz.4.4108: Directory block failed checksum
[  351.855102][ T7337] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.915768][T16037] tmpfs: Bad value for 'mpol'
[  351.921085][T16038] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4114'.
[  351.931032][T16038] netlink: 'syz.4.4114': attribute type 1 has an invalid length.
[  351.940804][T16038] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4114'.
[  352.416888][T16060] loop7: detected capacity change from 0 to 32768
[  352.448561][T16060] XFS (loop7): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  352.495933][T16060] XFS (loop7): Ending clean mount
[  352.537629][T11924] XFS (loop7): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  352.929491][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4135'.
[  352.991181][T16094] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4137'.
[  353.066470][T16100] cgroup: name respecified
[  353.297614][T16118] loop7: detected capacity change from 0 to 2048
[  353.323016][T16118] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  353.375960][T11924] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.525760][T16132] loop7: detected capacity change from 0 to 4096
[  353.548048][T16135] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  354.231621][T16154] loop4: detected capacity change from 0 to 131072
[  354.234857][T16154] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  354.237439][T16154] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  354.240483][T16154] F2FS-fs (loop4): invalid crc value
[  354.277281][T16154] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  354.285034][T16154] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  354.287281][T16154] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  354.854086][T16177] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  355.046215][T16189] netlink: 'syz.4.4176': attribute type 3 has an invalid length.
[  355.229634][T16196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4179'.
[  355.293420][T16198] ieee802154 phy0 wpan0: encryption failed: -22
[  355.511222][T16208] loop4: detected capacity change from 0 to 128
[  355.527476][T16208] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  355.532554][T16208] hpfs: filesystem error: improperly stopped
[  355.535270][T16208] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  355.538614][T16208] hpfs: You really don't want any checks? You are crazy...
[  355.543132][T16208] hpfs: hpfs_map_sector(): read error
[  355.544937][T16208] hpfs: code page support is disabled
[  355.549688][T16208] hpfs: hpfs_map_4sectors(): unaligned read
[  355.552462][T16208] hpfs: hpfs_map_4sectors(): unaligned read
[  355.554574][T16208] hpfs: filesystem error: unable to find root dir
[  355.564930][T16208] hpfs: hpfs_map_4sectors(): unaligned read
[  355.570550][T16208] hpfs: hpfs_map_sector(): read error
[  355.741568][   T24] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  355.894006][   T24] usb 8-1: Using ep0 maxpacket: 8
[  355.900401][   T24] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  355.904278][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.907507][   T24] usb 8-1: Product: syz
[  355.909210][   T24] usb 8-1: Manufacturer: syz
[  355.911163][   T24] usb 8-1: SerialNumber: syz
[  355.915165][   T24] usb 8-1: config 0 descriptor??
[  355.919065][   T24] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  356.520131][T16222] 9pnet: p9_errstr2errno: server reported unknown error 0x000
[  356.949556][   T24] gspca_sonixj: reg_w1 err -71
[  357.032217][   T24] sonixj 8-1:0.0: probe with driver sonixj failed with error -71
[  357.048274][   T24] usb 8-1: USB disconnect, device number 21
[  357.594855][T16251] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4202'.
[  357.629778][T16249] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4201'.
[  357.645722][T16249] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4201'.
[  357.881515][T16261] loop7: detected capacity change from 0 to 1024
[  357.986190][T16261] hfsplus: found bad thread record in catalog
[  358.053379][T16261] hfsplus: found bad thread record in catalog
[  358.064277][T16262] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4205'.
[  358.108513][T16263] hfsplus: bad catalog folder thread
[  358.195149][ T5666] libceph: connect (1)[c::]:6789 error -101
[  358.201139][ T5666] libceph: mon0 (1)[c::]:6789 connect error
[  358.225213][T16259] ceph: No mds server is up or the cluster is laggy
[  358.227590][ T5666] libceph: connect (1)[c::]:6789 error -101
[  358.227825][ T1111] hfsplus: found bad thread record in catalog
[  358.229945][ T5666] libceph: mon0 (1)[c::]:6789 connect error
[  358.442723][T16270] loop7: detected capacity change from 0 to 512
[  358.454448][T16270] EXT4-fs (loop7): Test dummy encryption mode enabled
[  358.475230][T16270] EXT4-fs error (device loop7): __ext4_iget:5481: inode #11: block 1: comm syz.7.4209: invalid block
[  358.485955][T16270] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  358.486292][T16270] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.4209: couldn't read orphan inode 11 (err -117)
[  358.492891][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  358.492903][    C0] EXT4-fs (loop7): initial error at time 358: __ext4_iget:5481: inode 11: block 1
[  358.492917][    C0] EXT4-fs (loop7): last error at time 358: __ext4_iget:5481: inode 11: block 1
[  358.518129][T16270] loop7: lost filesystem error report for type 5 error -117
[  358.519056][T16270] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.543653][T16274] loop4: detected capacity change from 0 to 512
[  358.566158][T11924] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.571160][T16274] EXT4-fs (loop4): 1 truncate cleaned up
[  358.574891][T16274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  358.636133][ T5674] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x76
[  358.737633][ T7337] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.797386][T16285] loop4: detected capacity change from 0 to 2048
[  358.828227][T16285] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  358.832092][T16285] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  358.841873][T16285] UDF-fs: Scanning with blocksize 512 failed
[  358.845292][T16285] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2047, location=2047
[  358.852606][T16285] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  358.856704][T16285] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  358.859675][T16285] UDF-fs: Scanning with blocksize 1024 failed
[  358.863347][T16285] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2047, location=2047
[  358.867835][T16285] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  358.871296][T16285] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  358.875458][T16285] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  358.878524][T16285] UDF-fs: Scanning with blocksize 2048 failed
[  358.882188][T16285] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2047, location=2047
[  358.891738][T16285] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  358.899274][T16285] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  358.904564][T16285] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  358.909246][T16285] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  358.913538][T16285] UDF-fs: Scanning with blocksize 4096 failed
[  358.915689][T16285] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  359.405208][T16321] fuse: fd is not a fuse device
[  359.416257][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4227'.
[  359.528893][T16332] loop7: detected capacity change from 0 to 512
[  359.533564][T16332] EXT4-fs (loop7): Test dummy encryption mode enabled
[  359.546167][T16332] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.4234: corrupted in-inode xattr: invalid ea_ino
[  359.561589][T16332] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  359.563524][T16332] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.4234: couldn't read orphan inode 15 (err -117)
[  359.572084][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  359.572099][    C1] EXT4-fs (loop7): initial error at time 359: ext4_iget_extra_inode:5128: inode 15
[  359.572120][    C1] EXT4-fs (loop7): last error at time 359: ext4_iget_extra_inode:5128: inode 15
[  359.588713][T16332] loop7: lost filesystem error report for type 5 error -117
[  359.589782][T16332] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  359.617052][T16332] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #13: comm syz.7.4234: corrupted inode contents
[  359.708731][T16332] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #13: comm syz.7.4234: mark_inode_dirty error
[  359.719676][T16332] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4234: invalid indirect mapped block 234881024 (level 0)
[  359.728133][T16332] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #13: comm syz.7.4234: corrupted inode contents
[  359.779136][T16332] EXT4-fs error (device loop7): ext4_truncate:4690: inode #13: comm syz.7.4234: mark_inode_dirty error
[  359.783053][T16332] EXT4-fs error (device loop7) in ext4_setattr:6120: Corrupt filesystem
[  359.821821][T16337] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #13: comm syz.7.4234: corrupted inode contents
[  359.851553][T16337] EXT4-fs error (device loop7): ext4_cross_rename:4163: inode #13: comm syz.7.4234: mark_inode_dirty error
[  359.875307][T11924] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.306442][T16351] loop7: detected capacity change from 0 to 131072
[  360.337494][T16351] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  360.346766][T16351] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  360.370841][T16351] F2FS-fs (loop7): recover xattr in inode (7), error(0)
[  360.373687][T16351] F2FS-fs (loop7): set inode (7) has corrupted xattr
[  361.569967][T16377] loop7: detected capacity change from 0 to 128
[  361.623673][T16379] loop7: detected capacity change from 0 to 128
[  361.626781][T16379] EXT4-fs (loop7): Test dummy encryption mode enabled
[  361.633624][T16379] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  361.640437][T16379] System zones: 1-3, 19-19, 35-36
[  361.645273][T16379] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  361.668563][T16379] EXT4-fs: Cannot specify journal on remount
[  361.697447][T11924] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  361.814920][T16394] loop7: detected capacity change from 0 to 2048
[  361.823994][T16394] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  361.866159][T11924] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.120085][T16419] loop7: detected capacity change from 0 to 128
[  362.135322][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4269'.
[  362.192729][T16422] loop7: detected capacity change from 0 to 256
[  362.332672][ T5674] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  362.535710][T16428] loop4: detected capacity change from 0 to 256
[  362.538866][T16428] exfat: Deprecated parameter 'utf8'
[  362.548254][T16428] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d)
[  362.625967][T16432] loop4: detected capacity change from 0 to 512
[  362.629439][T16432] EXT4-fs: Ignoring removed mblk_io_submit option
[  362.635116][T16432] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  362.643830][T16432] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4274: invalid indirect mapped block 33554432 (level 0)
[  362.652751][T16432] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  362.658955][T16432] EXT4-fs (loop4): Remounting filesystem read-only
[  362.662808][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  362.662826][    C1] EXT4-fs (loop4): initial error at time 362: ext4_free_branches:1023: inode 13
[  362.662849][    C1] EXT4-fs (loop4): last error at time 362: ext4_free_branches:1023: inode 13
[  362.677648][T16432] EXT4-fs (loop4): 1 truncate cleaned up
[  362.686562][T16432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.721680][ T7337] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.850984][T16447] netlink: 'syz.4.4280': attribute type 13 has an invalid length.
[  362.894740][T16447] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.897692][T16447] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.937188][T16447] batman_adv: 60X: Interface deactivated: batadv_slave_1
[  363.034804][   T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.042228][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.048685][   T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.057312][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.063899][   T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.072130][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.090607][   T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  363.091449][ T5666] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  363.097135][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.251588][ T5666] usb 8-1: Using ep0 maxpacket: 16
[  363.254884][ T5666] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  363.261230][ T5666] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  363.267602][ T5666] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  363.270581][ T5666] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.274164][ T5666] usb 8-1: Product: syz
[  363.275594][ T5666] usb 8-1: Manufacturer: syz
[  363.277211][ T5666] usb 8-1: SerialNumber: syz
[  363.279956][ T5666] usb 8-1: config 0 descriptor??
[  363.288692][ T5666] em28xx 8-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  363.413774][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  363.413785][   T33] audit: type=1326 audit(363.284:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16480 comm="syz.0.4296" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55e179cdd9 code=0x0
[  363.488324][ T5666] usb 8-1: USB disconnect, device number 22
[  364.281482][T12061] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  364.436973][T12061] usb 8-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  364.440667][T12061] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.444767][T12061] usb 8-1: Product: syz
[  364.446368][T12061] usb 8-1: Manufacturer: syz
[  364.447942][T12061] usb 8-1: SerialNumber: syz
[  364.450899][T12061] usb 8-1: config 0 descriptor??
[  364.459557][T12061] hub 8-1:0.0: bad descriptor, ignoring hub
[  364.464351][T12061] hub 8-1:0.0: probe with driver hub failed with error -5
[  364.469315][T12061] f81232 8-1:0.0: f81534a converter detected
[  364.665050][T12061] f81534a ttyUSB0: f81232_set_register failed status: -71
[  364.671611][T12061] f81534a ttyUSB0: probe with driver f81534a failed with error -5
[  364.877626][T12061] usb 8-1: reset high-speed USB device number 23 using dummy_hcd
[  364.988089][T16505] loop4: detected capacity change from 0 to 136
[  365.391863][ T5772] usb 8-1: USB disconnect, device number 23
[  365.395735][ T5772] f81232 8-1:0.0: device disconnected
[  366.107861][T16546] loop7: detected capacity change from 0 to 4096
[  366.124860][T16547] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  366.378570][T16562] [U] 	
[  366.753364][T16582] loop4: detected capacity change from 0 to 32768
[  366.759639][T16582] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4338 (16582)
[  366.795695][T16582] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  366.800793][T16582] BTRFS info (device loop4): using sha256 checksum algorithm
[  366.856891][T16582] BTRFS info (device loop4): enabling ssd optimizations
[  366.859222][T16582] BTRFS info (device loop4): turning on async discard
[  366.862434][T16582] BTRFS info (device loop4): enabling free space tree
[  366.864578][T16582] BTRFS info (device loop4): enabling auto defrag
[  366.866825][T16582] BTRFS info (device loop4): max_inline set to 4096
[  367.062540][T16630] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  367.125679][ T7337] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  367.575052][T16644] loop7: detected capacity change from 0 to 8192
[  367.664674][T16644]  loop7: AHDI p1 p2
[  367.666490][T16644] loop7: p1 size 65535 extends beyond EOD, truncated
[  367.739027][ T5746] udevd[5746]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  367.780776][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4361'.
[  367.859409][T16653] PKCS7: Unknown OID: [4] (bad)
[  367.871946][T16653] PKCS7: Only support pkcs7_signedData type
[  367.927153][T16657] netlink: 'syz.0.4363': attribute type 1 has an invalid length.
[  367.930512][T16657] netlink: 'syz.0.4363': attribute type 2 has an invalid length.
[  367.936848][T16657] netlink: 'syz.0.4363': attribute type 1 has an invalid length.
[  367.940070][T16657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4363'.
[  368.023624][T16667] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[  368.100710][T16673] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4372'.
[  368.274182][T16683] loop7: detected capacity change from 0 to 32768
[  368.277867][T16683] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4377 (16683)
[  368.291196][T16683] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  368.295798][T16683] BTRFS error (device loop7): unsupported checksum algorithm: 4
[  368.298844][T16683] BTRFS error (device loop7): open_ctree failed: -22
[  368.621528][T12061] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  368.791511][T12061] usb 8-1: Using ep0 maxpacket: 16
[  368.797999][T12061] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  368.829474][T12061] usb 8-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  368.833940][T12061] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.837182][T12061] usb 8-1: Product: syz
[  368.838865][T12061] usb 8-1: Manufacturer: syz
[  368.840737][T12061] usb 8-1: SerialNumber: syz
[  368.845415][T12061] usb 8-1: config 0 descriptor??
[  369.054040][   T24] usb 8-1: USB disconnect, device number 24
[  370.663866][T16723] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4394'.
[  370.827255][T16728] loop4: detected capacity change from 0 to 256
[  370.850852][T16728] FAT-fs (loop4): Directory bread(block 64) failed
[  370.856095][T16728] FAT-fs (loop4): Directory bread(block 65) failed
[  370.859466][T16728] FAT-fs (loop4): Directory bread(block 66) failed
[  370.862852][T16728] FAT-fs (loop4): Directory bread(block 67) failed
[  370.865406][T16728] FAT-fs (loop4): Directory bread(block 68) failed
[  370.868032][T16728] FAT-fs (loop4): Directory bread(block 69) failed
[  370.870488][T16728] FAT-fs (loop4): Directory bread(block 70) failed
[  370.873610][T16728] FAT-fs (loop4): Directory bread(block 71) failed
[  370.880313][T16728] FAT-fs (loop4): Directory bread(block 72) failed
[  370.886568][T16728] FAT-fs (loop4): Directory bread(block 73) failed
[  371.210454][T16728] input: syz1 as /devices/virtual/input/input20
[  371.465720][T16740] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  371.759325][T16759] loop4: detected capacity change from 0 to 1024
[  372.188605][T16788] xt_CT: You must specify a L4 protocol and not use inversions on it
[  372.321697][   T24] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  372.474841][   T24] usb 8-1: config index 0 descriptor too short (expected 65088, got 120)
[  372.478111][   T24] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  372.483428][   T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  372.487414][   T24] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  372.498087][   T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  372.503026][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.509164][   T24] usb 8-1: Product: syz
[  372.512911][   T24] usb 8-1: Manufacturer: syz
[  372.514888][   T24] usb 8-1: SerialNumber: syz
[  372.525738][   T24] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found
[  372.528577][   T24] cdc_ncm 8-1:1.0: bind() failure
[  372.727490][   T24] usb 8-1: USB disconnect, device number 25
[  373.802149][T16830] openvswitch: netlink: IP tunnel dst address not specified
[  374.238392][T16853] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4452'.
[  374.246286][T16853] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  374.250838][T16853] bridge1: entered promiscuous mode
[  374.392493][T16863] syz_tun: entered allmulticast mode
[  374.446459][T16867] netlink: 'syz.7.4459': attribute type 3 has an invalid length.
[  374.544681][T16871] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4461'.
[  374.548293][T16871] netlink: 'syz.7.4461': attribute type 3 has an invalid length.
[  374.554206][T16871] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4461'.
[  374.557890][T16871] netlink: 'syz.7.4461': attribute type 3 has an invalid length.
[  374.667439][T16877] QAT: failed to copy from user cfg_data.
[  374.669210][T16879] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4465'.
[  374.920168][T16883] loop7: detected capacity change from 0 to 32768
[  374.924113][T16883] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4467 (16883)
[  374.939366][T16883] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  374.945175][T16883] BTRFS info (device loop7): using sha256 checksum algorithm
[  375.039907][T16883] BTRFS info (device loop7): enabling ssd optimizations
[  375.051654][T16883] BTRFS info (device loop7): turning on async discard
[  375.052829][T16913] loop4: detected capacity change from 0 to 256
[  375.060164][T16883] BTRFS info (device loop7): enabling free space tree
[  375.083807][   T33] audit: type=1800 audit(374.954:165): pid=16913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4474" name="file1" dev="loop4" ino=1048705 res=0 errno=0
[  375.103991][T16913] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  375.109036][T16913] FAT-fs (loop4): Filesystem has been set read-only
[  375.112341][T11924] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  375.541819][T16940] loop7: detected capacity change from 0 to 1024
[  375.545977][T16940] EXT4-fs: Ignoring removed orlov option
[  375.564767][T16940] EXT4-fs warning (device loop7): read_mmp_block:111: Error -117 while reading MMP block 0
[  375.809115][T16958] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4495'.
[  376.024589][T16968] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  376.316242][T16976] netlink: 116 bytes leftover after parsing attributes in process `syz.7.4505'.
[  376.513224][T16989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4509'.
[  376.517760][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4511'.
[  376.537877][T16991] vlan4: entered promiscuous mode
[  376.802604][T17012] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  377.193150][   T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  377.341534][   T10] usb 8-1: Using ep0 maxpacket: 8
[  377.346700][   T10] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  377.350847][   T10] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  377.357961][   T10] usb 8-1: config 1 has no interface number 1
[  377.359460][T17031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4531'.
[  377.361041][   T10] usb 8-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  377.365921][T17031] netlink: 'syz.4.4531': attribute type 3 has an invalid length.
[  377.367122][   T10] usb 8-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30
[  377.369883][T17031] netlink: 'syz.4.4531': attribute type 2 has an invalid length.
[  377.374031][   T10] usb 8-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  377.376796][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4531'.
[  377.384892][   T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  377.389869][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.393714][   T10] usb 8-1: Product: syz
[  377.395505][   T10] usb 8-1: Manufacturer: syz
[  377.397408][   T10] usb 8-1: SerialNumber: syz
[  377.412967][   T10] usb 8-1: 0:8 : does not exist
[  377.478664][T17035] netlink: 'syz.4.4533': attribute type 21 has an invalid length.
[  377.483438][T17035] netlink: 'syz.4.4533': attribute type 21 has an invalid length.
[  377.629133][   T10] usb 8-1: USB disconnect, device number 26
[  377.678460][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  378.369492][T17066] netlink: 'syz.7.4544': attribute type 4 has an invalid length.
[  378.557710][T17075] loop4: detected capacity change from 0 to 4096
[  378.561269][T17075] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  378.991206][T17086] loop7: detected capacity change from 0 to 32768
[  378.995654][T17086] xfs: Deprecated parameter 'attr2'
[  378.998912][T17086] XFS: attr2 mount option is deprecated.
[  379.036969][T17086] XFS (loop7): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  379.064474][T17086] XFS (loop7): Log size 516 blocks too small, minimum size is 636 blocks
[  379.068837][T17086] XFS (loop7): AAIEEE! Log failed size checks. Abort!
[  379.088067][T17086] XFS (loop7): log mount failed
[  380.449387][T17144] loop7: detected capacity change from 0 to 32768
[  380.484173][   T33] audit: type=1800 audit(380.344:166): pid=17144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4578" name="file1" dev="loop7" ino=4 res=0 errno=0
[  380.558459][T17154] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  380.655999][T17159] loop7: detected capacity change from 0 to 512
[  380.742739][T17164] loop7: detected capacity change from 0 to 4096
[  380.750331][T17164] EXT4-fs: inline encryption not supported
[  380.767664][T17164] EXT4-fs (loop7): Test dummy encryption mode enabled
[  380.788363][T17164] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  380.792215][T17164] System zones: 0-5
[  380.796577][T17164] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.847355][T11924] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.331451][T12061] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  381.491485][T12061] usb 8-1: Using ep0 maxpacket: 16
[  381.496905][T12061] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  381.500139][T12061] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  381.503065][T12061] usb 8-1: Product: syz
[  381.504435][T12061] usb 8-1: Manufacturer: syz
[  381.506148][T12061] usb 8-1: SerialNumber: syz
[  381.509908][T12061] usb 8-1: config 0 descriptor??
[  381.769195][ T5772] usb 8-1: USB disconnect, device number 27
[  381.797205][T17191] fuse: fd is not a fuse device
[  382.526061][T17227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.933360][T17221] loop4: detected capacity change from 0 to 131072
[  382.937565][T17221] F2FS-fs (loop4): Test dummy encryption mode enabled
[  382.942685][T17221] F2FS-fs (loop4): invalid crc value
[  382.994037][T17221] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  383.007727][T17221] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  383.813155][T17267] loop4: detected capacity change from 0 to 4096
[  383.830679][T17267] NILFS (loop4): invalid segment: Checksum error in segment payload
[  383.846995][T17267] NILFS (loop4): trying rollback from an earlier position
[  383.859528][T17267] NILFS (loop4): recovery complete
[  383.864087][T17268] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  383.876273][T17261] loop7: detected capacity change from 0 to 40427
[  383.912236][T17261] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  383.920988][T17261] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  383.934618][T17261] F2FS-fs (loop7): Inconsistent error blkaddr:5633, sit bitmap:0
[  383.939592][T17261] CPU: 0 UID: 0 PID: 17261 Comm: syz.7.4634 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  383.939607][T17261] Tainted: [L]=SOFTLOCKUP
[  383.939610][T17261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  383.939615][T17261] Call Trace:
[  383.939619][T17261]  <TASK>
[  383.939622][T17261]  dump_stack_lvl+0xe8/0x150
[  383.939643][T17261]  __f2fs_is_valid_blkaddr+0xd84/0x14f0
[  383.939658][T17261]  f2fs_get_read_data_folio+0x699/0xb70
[  383.939672][T17261]  ? __pfx_f2fs_get_read_data_folio+0x10/0x10
[  383.939683][T17261]  ? __filemap_get_folio_mpol+0x9b0/0xb00
[  383.939697][T17261]  ? f2fs_readdir+0x4eb/0xac0
[  383.939707][T17261]  f2fs_find_data_folio+0x3a6/0x6a0
[  383.939719][T17261]  f2fs_readdir+0x4eb/0xac0
[  383.939736][T17261]  ? __pfx_f2fs_readdir+0x10/0x10
[  383.939745][T17261]  ? iterate_dir+0x292/0x570
[  383.939757][T17261]  ? iterate_dir+0x292/0x570
[  383.939765][T17261]  ? down_read_killable+0x1bb/0x340
[  383.939778][T17261]  iterate_dir+0x399/0x570
[  383.939788][T17261]  __se_sys_getdents64+0xf1/0x280
[  383.939815][T17261]  ? __pfx___se_sys_getdents64+0x10/0x10
[  383.939840][T17261]  ? __pfx_filldir64+0x10/0x10
[  383.939872][T17261]  ? rcu_is_watching+0x15/0xb0
[  383.939887][T17261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.939896][T17261]  do_syscall_64+0x15f/0xf80
[  383.939906][T17261]  ? trace_irq_disable+0x3b/0x140
[  383.939920][T17261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.939928][T17261] RIP: 0033:0x7f0a3c39cdd9
[  383.939936][T17261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  383.939943][T17261] RSP: 002b:00007f0a3d196028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  383.939953][T17261] RAX: ffffffffffffffda RBX: 00007f0a3c615fa0 RCX: 00007f0a3c39cdd9
[  383.939958][T17261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  383.939962][T17261] RBP: 00007f0a3c432d69 R08: 0000000000000000 R09: 0000000000000000
[  383.939967][T17261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  383.939971][T17261] R13: 00007f0a3c616038 R14: 00007f0a3c615fa0 R15: 00007ffce35249c8
[  383.939983][T17261]  </TASK>
[  384.166100][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  384.168687][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  384.408352][T17285] loop4: detected capacity change from 0 to 8
[  384.502490][T17291] loop7: detected capacity change from 0 to 764
[  384.547308][T17293] loop4: detected capacity change from 0 to 4096
[  384.809994][T17307] bond1: (slave lo): Releasing backup interface
[  384.819100][T17307] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  384.824213][T17307] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  384.833627][T17307] bond5: (slave lo): Enslaving as an active interface with an up link
[  384.837171][T17307] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  385.238501][T17334] netlink: 'syz.7.4665': attribute type 1 has an invalid length.
[  385.244617][T17334] __nla_validate_parse: 4 callbacks suppressed
[  385.244628][T17334] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4665'.
[  385.260032][T17334] netlink: 'syz.7.4665': attribute type 1 has an invalid length.
[  385.265143][T17334] netlink: 'syz.7.4665': attribute type 8 has an invalid length.
[  385.271625][T17334] netlink: 606 bytes leftover after parsing attributes in process `syz.7.4665'.
[  385.383370][T17344] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4670'.
[  385.537391][   T33] audit: type=1326 audit(385.404:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17355 comm="syz.7.4675" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a3c39cdd9 code=0x0
[  386.566740][T17367] loop4: detected capacity change from 0 to 32768
[  386.570049][T17367] btrfs: Deprecated parameter 'usebackuproot'
[  386.572752][T17367] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  386.578215][T17367] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4678 (17367)
[  386.603528][T17367] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  386.607708][T17367] BTRFS info (device loop4): using crc32c checksum algorithm
[  386.699482][ T8024] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  386.737758][T17367] BTRFS error (device loop4): failed to load root extent
[  386.740706][T17367] BTRFS warning (device loop4): try to load backup roots slot 1
[  386.745439][ T8024] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  386.754330][T17367] BTRFS warning (device loop4): couldn't read tree root
[  386.756551][T17367] BTRFS warning (device loop4): try to load backup roots slot 2
[  386.759554][ T8024] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  386.769531][T17367] BTRFS warning (device loop4): couldn't read tree root
[  386.772131][T17367] BTRFS warning (device loop4): try to load backup roots slot 3
[  386.787502][T17367] BTRFS info (device loop4): rebuilding free space tree
[  386.800824][T17367] BTRFS info (device loop4): disabling free space tree
[  386.803743][T17367] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  386.807628][T17367] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  386.814917][T17367] BTRFS info (device loop4): checking UUID tree
[  386.817914][T17367] BTRFS info (device loop4): enabling ssd optimizations
[  386.820667][T17367] BTRFS info (device loop4): using spread ssd allocation scheme
[  386.823697][T17367] BTRFS info (device loop4): turning on async discard
[  386.826177][T17367] BTRFS info (device loop4): force clearing of disk cache
[  386.828422][T17367] BTRFS info (device loop4): enabling auto defrag
[  386.830358][T17367] BTRFS info (device loop4): trying to use backup root at mount time
[  386.832893][T17367] BTRFS info (device loop4): use zstd compression, level 3
[  386.920673][ T7337] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  387.121954][T17411] 9pnet_fd: p9_fd_create_tcp (17411): problem binding to privport
[  387.433991][T17433] netlink: 1072 bytes leftover after parsing attributes in process `syz.0.4701'.
[  387.439433][T17432] loop4: detected capacity change from 0 to 1024
[  387.477587][T17435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4703'.
[  387.591796][ T5772] usb 8-1: new full-speed USB device number 28 using dummy_hcd
[  387.718262][T17446] netlink: 'syz.4.4708': attribute type 3 has an invalid length.
[  387.742678][ T5772] usb 8-1: not running at top speed; connect to a high speed hub
[  387.748068][ T5772] usb 8-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  387.759505][ T5772] usb 8-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.24
[  387.764170][ T5772] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.767147][ T5772] usb 8-1: Product: syz
[  387.768609][ T5772] usb 8-1: Manufacturer: syz
[  387.770382][ T5772] usb 8-1: SerialNumber: syz
[  387.878152][T17452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4711'.
[  387.927183][T17457] netlink: 'syz.4.4713': attribute type 29 has an invalid length.
[  387.932407][T17457] netlink: 'syz.4.4713': attribute type 29 has an invalid length.
[  387.985176][ T5772] qmi_wwan 8-1:6.0: invalid descriptor buffer length
[  387.993345][ T5772] qmi_wwan 8-1:6.0: probe with driver qmi_wwan failed with error -22
[  388.012001][ T5772] usb 8-1: USB disconnect, device number 28
[  388.121714][T17476] sch_tbf: burst 1023 is lower than device lo mtu (1514) !
[  388.785697][T17490] loop7: detected capacity change from 0 to 2048
[  388.795582][T17490] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.813844][T17528] bridge0: port 4(dummy0) entered blocking state
[  390.815964][T17528] bridge0: port 4(dummy0) entered listening state
[  390.818111][T17528] bridge0: port 3(syz_tun) entered blocking state
[  390.820173][T17528] bridge0: port 3(syz_tun) entered listening state
[  390.828162][T17528] 8021q: adding VLAN 0 to HW filter on device bond0
[  390.836197][T17528] 8021q: adding VLAN 0 to HW filter on device team0
[  390.840774][T17528] 8021q: adding VLAN 0 to HW filter on device batadv0
[  390.865765][T17528] veth0_to_bridge: left promiscuous mode
[  390.878322][T17528] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.882170][T17528] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.887487][T17528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  390.892303][T17528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  390.903079][T17528] veth1_vlan: left promiscuous mode
[  390.905280][T17528] veth0_vlan: left promiscuous mode
[  390.907305][T17528] veth0_vlan: entered promiscuous mode
[  390.910215][T17528] veth1_vlan: entered promiscuous mode
[  390.914879][T17528] veth1_macvtap: left promiscuous mode
[  390.917052][T17528] veth0_macvtap: left promiscuous mode
[  390.919871][T17528] veth0_macvtap: entered promiscuous mode
[  390.927924][T17528] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  390.930920][T17528] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  390.934126][T17528] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  390.937101][T17528] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  390.944467][T17528] veth0_to_bridge: entered promiscuous mode
[  390.946952][T17528] veth0_to_bridge: entered allmulticast mode
[  390.950117][T17528] 8021q: adding VLAN 0 to HW filter on device bond1
[  390.954520][T17528] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  390.964430][T17528] 8021q: adding VLAN 0 to HW filter on device bond2
[  390.967717][T17528] 8021q: adding VLAN 0 to HW filter on device bond3
[  390.975378][ T8026] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.977654][ T8026] bridge0: port 1(bridge_slave_0) entered listening state
[  390.981265][ T8026] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.983799][ T8026] bridge0: port 2(bridge_slave_1) entered listening state
[  391.022536][ T5674] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  391.026677][ T5674] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  391.050510][ T5674] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  391.881194][T11924] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.997135][T17555] netlink: 504 bytes leftover after parsing attributes in process `syz.7.4751'.
[  392.502196][T17577] netlink: 4096 bytes leftover after parsing attributes in process `syz.7.4763'.
[  392.617934][T17581] tmpfs: Bad value for 'mpol'
[  392.643672][    C0] Unknown status report in ack skb
[  393.020542][T17589] xt_CONNSECMARK: invalid mode: 66
[  393.030869][T17589] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  393.385434][T17595] 9pnet: p9_errstr2errno: server reported unknown error b0
[  393.448742][T17600] netlink: 'syz.0.4771': attribute type 10 has an invalid length.
[  393.480095][T17600] team0: Device wg2 is of different type
[  394.475759][   T33] audit: type=1326 audit(394.344:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17629 comm="syz.0.4786" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55e179cdd9 code=0x0
[  394.698304][   T33] audit: type=1800 audit(394.564:169): pid=17640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4791" name="nullb0" dev="tmpfs" ino=4660 res=0 errno=0
[  394.832202][T17644] loop7: detected capacity change from 0 to 1024
[  395.154569][T17648] netlink: 'syz.7.4794': attribute type 32 has an invalid length.
[  395.316001][T17658] loop7: detected capacity change from 0 to 512
[  395.656692][T17668] loop7: detected capacity change from 0 to 128
[  395.667659][T17668] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  395.834837][T17678] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4807'.
[  396.256813][T17705] loop7: detected capacity change from 0 to 1764
[  396.373053][T17705] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4820'.
[  397.144987][T17735] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4834'.
[  397.560596][T17757] overlayfs: missing 'lowerdir'
[  398.507947][   T33] audit: type=1400 audit(398.374:170): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17799 comm="syz.7.4864"
[  398.720996][T17810] loop4: detected capacity change from 0 to 1024
[  398.731680][T17810] hfsplus: bad catalog file entry
[  398.736243][T17810] hfsplus: failed to load root directory
[  398.749333][T17814] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4871'.
[  398.764791][T17814] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4871'.
[  398.785506][T17817] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  398.868737][T17820] loop7: detected capacity change from 0 to 1764
[  399.197785][T17836] netlink: 'syz.4.4881': attribute type 1 has an invalid length.
[  399.561215][T17867] qnx6: unable to read the first superblock
[  400.263394][T17901] netlink: 'syz.0.4912': attribute type 5 has an invalid length.
[  400.760116][T17941] team0: entered promiscuous mode
[  400.765186][T17941] team_slave_0: entered promiscuous mode
[  400.767768][T17941] team_slave_1: entered promiscuous mode
[  400.770984][T17941] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  401.365124][T17952] loop7: detected capacity change from 0 to 256
[  401.565399][T17952] usb usb7: usbfs: process 17952 (syz.7.4932) did not claim interface 0 before use
[  402.157282][T17976] loop7: detected capacity change from 0 to 32768
[  403.176666][T17999] loop4: detected capacity change from 0 to 32768
[  403.183424][T17999] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4953 (17999)
[  403.210401][T17999] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  403.218066][T17999] BTRFS info (device loop4): using crc32c checksum algorithm
[  403.260434][  T142] BTRFS warning (device loop4): checksum verify failed on logical 5287936 mirror 1 wanted 0x10870a5f found 0x4170e27c level 0
[  403.269800][T17999] BTRFS warning (device loop4): failed to read root (objectid=18446744073709551607): -5
[  403.298863][T17999] BTRFS error (device loop4): open_ctree failed: -5
[  403.413653][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4956'.
[  403.642474][T18034] loop4: detected capacity change from 0 to 4096
[  403.646237][T18034] ntfs3(loop4): Primary boot: invalid bytes per MFT record 0 (0).
[  403.649466][T18034] ntfs3(loop4): try to read out of volume at offset 0x1ffe00
[  403.821240][   T33] audit: type=1326 audit(403.684:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18031 comm="syz.0.4963" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55e179cdd9 code=0x0
[  404.357064][T18050] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4971'.
[  404.360053][T18050] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4971'.
[  404.364299][T18050] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4971'.
[  404.368347][T18050] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4971'.
[  404.373864][T18050] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4971'.
[  404.384268][T18050] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4971'.
[  404.388241][T18050] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4971'.
[  404.394801][T18050] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4971'.
[  404.403011][T18050] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4971'.
[  404.424618][T18050] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.428710][T18050] 8021q: adding VLAN 0 to HW filter on device team0
[  404.452938][T18050] 8021q: adding VLAN 0 to HW filter on device 60X
[  404.518315][T18050] batman_adv: 60X: Interface activated: batadv_slave_0
[  404.524492][T18050] batman_adv: 60X: Interface activated: batadv_slave_1
[  404.534391][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.537214][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.542710][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.545855][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.615702][T18055] loop4: detected capacity change from 0 to 128
[  404.635461][T18055] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  404.701025][ T7337] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  404.777563][T18060] loop4: detected capacity change from 0 to 1764
[  404.896198][T18064] loop4: detected capacity change from 0 to 4096
[  404.900642][T18064] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  405.807059][   T24] libceph: connect (1)[c::]:6789 error -101
[  405.809850][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  405.815188][T18068] ceph: No mds server is up or the cluster is laggy
[  405.817750][   T24] libceph: connect (1)[c::]:6789 error -101
[  405.822639][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  406.316932][T18075] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  406.316932][T18075] The task syz.4.4978 (18075) triggered the difference, watch for misbehavior.
[  407.478550][T18090] loop4: detected capacity change from 0 to 32768
[  407.500886][T18090] read_mapping_page failed!
[  407.505753][T18090] ERROR: (device loop4): txCommit: 
[  407.505753][T18090] 
[  407.528861][ T8026] read_mapping_page failed!
[  407.542777][ T8026] ERROR: (device loop4): txCommit: 
[  407.542777][ T8026] 
[  407.545979][ T8026] jfs_write_inode: jfs_commit_inode failed!
[  409.542769][T18142] loop4: detected capacity change from 0 to 512
[  409.547398][T18142] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  409.549963][T18142] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  409.553324][T18142] EXT4-fs (loop4): orphan cleanup on readonly fs
[  409.555933][T18142] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #13: comm syz.4.5008: iget: bad i_size value: 12154761577498
[  409.559841][T18142] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  409.560158][T18142] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.5008: couldn't read orphan inode 13 (err -117)
[  409.563044][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  409.563054][    C1] EXT4-fs (loop4): initial error at time 409: ext4_orphan_get:1397: inode 13
[  409.563066][    C1] EXT4-fs (loop4): last error at time 409: ext4_orphan_get:1397: inode 13
[  409.575286][T18142] loop4: lost filesystem error report for type 5 error -117
[  409.576422][T18142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  409.589928][T18142] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.5008: dx entry: limit 65535 != root limit 120
[  409.596227][T18142] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5008: Corrupt directory, running e2fsck is recommended
[  409.616154][ T7337] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.947290][T18147] tmpfs: Bad value for 'mpol'
[  412.702254][T18192] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  412.878369][T18200] loop4: detected capacity change from 0 to 8
[  412.883640][T18200] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  412.915065][T18200] cramfs: bad root offset 64
[  413.069491][T18206] __nla_validate_parse: 85 callbacks suppressed
[  413.069506][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5039'.
[  413.081463][T18206] bond0: Unable to set up delay as MII monitoring is disabled
[  413.133206][T18210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5041'.
[  413.157481][T18212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5042'.
[  413.281706][T18218] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5045'.
[  413.654074][T18244] fuse: fd is not a fuse device
[  413.748315][T18252] xt_hl: Unknown TTL match mode: 255
[  413.893534][   T33] audit: type=1326 audit(413.764:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18261 comm="syz.0.5067" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e179cdd9 code=0x7ffc0000
[  413.904064][   T33] audit: type=1326 audit(413.764:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18261 comm="syz.0.5067" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e179cdd9 code=0x7ffc0000
[  413.912730][   T33] audit: type=1326 audit(413.774:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18261 comm="syz.0.5067" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55e179cdd9 code=0x7ffc0000
[  413.923277][   T33] audit: type=1326 audit(413.774:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18261 comm="syz.0.5067" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e179cdd9 code=0x7ffc0000
[  413.936710][   T33] audit: type=1326 audit(413.774:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18261 comm="syz.0.5067" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e179cdd9 code=0x7ffc0000
[  414.549514][T18299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5084'.
[  415.061773][T18322] netlink: 'syz.0.5095': attribute type 4 has an invalid length.
[  415.064949][T18322] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5095'.
[  415.083148][T18322] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  415.187061][T18330] netlink: 'syz.0.5099': attribute type 11 has an invalid length.
[  415.189489][T18330] netlink: 'syz.0.5099': attribute type 6 has an invalid length.
[  415.192468][T18330] netlink: 134564 bytes leftover after parsing attributes in process `syz.0.5099'.
[  416.053631][T18367] fuse: fd is not a fuse device
[  416.865519][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5119'.
[  417.075922][T18381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5121'.
[  417.305619][T18394] Invalid source name
[  417.383819][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  417.391887][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  417.403377][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  417.414695][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  417.419525][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  417.636246][T18404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5130'.
[  417.933962][T16600] syz_tun (unregistering): left allmulticast mode
[  418.178757][T10315] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  418.184226][T10315] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.335303][T10315] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  418.345739][T10315] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.377447][T18395] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.380042][T18395] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.382829][T18395] bridge_slave_0: entered allmulticast mode
[  418.387050][T18395] bridge_slave_0: entered promiscuous mode
[  418.398541][T18395] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.403886][T18395] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.409668][T18395] bridge_slave_1: entered allmulticast mode
[  418.414317][T18395] bridge_slave_1: entered promiscuous mode
[  418.464360][T10315] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  418.468504][T10315] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.528299][T18395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.544124][T18395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.595262][T10315] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  418.599099][T10315] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.614135][T18395] team0: Port device team_slave_0 added
[  418.623253][T18395] team0: Port device team_slave_1 added
[  418.643752][T18395] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.646491][T18395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.656950][T18395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.662665][T18395] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.665010][T18395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.672925][T18395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.744111][T18395] hsr_slave_0: entered promiscuous mode
[  418.747247][T18395] hsr_slave_1: entered promiscuous mode
[  418.750142][T18395] debugfs: 'hsr0' already exists in 'hsr'
[  418.753619][T18395] Cannot create hsr debugfs directory
[  419.015963][T10315] pimreg3: left allmulticast mode
[  419.255591][T10315] bond0 (unregistering): Released all slaves
[  419.262730][T10315] bond1 (unregistering): (slave wireguard0): Releasing backup interface
[  419.270123][T10315] bond1 (unregistering): Released all slaves
[  419.409500][T10315] IPVS: stopping master sync thread 17817 ...
[  419.523351][ T4999] Bluetooth: hci3: command tx timeout
[  419.608873][ T5354] 8021q: adding VLAN 0 to HW filter on device eth21
[  419.657505][T18395] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  419.663961][T18395] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  419.666792][T18395] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  419.674202][T18395] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  419.692882][T18395] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  419.703072][T18395] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  419.710054][T18395] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  419.723349][T18395] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  419.760084][T10315] hsr_slave_0: left promiscuous mode
[  419.762918][T10315] hsr_slave_1: left promiscuous mode
[  419.773876][T10315] veth1_macvtap: left promiscuous mode
[  419.777275][T10315] veth0_macvtap: left promiscuous mode
[  419.779236][T10315] veth1_vlan: left promiscuous mode
[  419.781282][T10315] veth0_vlan: left promiscuous mode
[  420.053138][T18466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5146'.
[  420.107488][ T5354] 8021q: adding VLAN 0 to HW filter on device eth22
[  420.239299][T18395] 8021q: adding VLAN 0 to HW filter on device bond0
[  420.248923][T18395] 8021q: adding VLAN 0 to HW filter on device team0
[  420.258255][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.261047][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  420.291074][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.293575][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state
[  420.565881][ T5354] 8021q: adding VLAN 0 to HW filter on device eth23
[  420.657775][T18395] 8021q: adding VLAN 0 to HW filter on device batadv0
[  420.911693][ T5354] 8021q: adding VLAN 0 to HW filter on device eth24
[  420.971698][T18395] veth0_vlan: entered promiscuous mode
[  420.976843][T18395] veth1_vlan: entered promiscuous mode
[  421.059658][T18395] veth0_macvtap: entered promiscuous mode
[  421.074173][T18395] veth1_macvtap: entered promiscuous mode
[  421.094554][T18395] batman_adv: batadv0: Interface activated: batadv_slave_0
[  421.120767][T18395] batman_adv: batadv0: Interface activated: batadv_slave_1
[  421.138810][T17548] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  421.180477][T17548] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  421.192383][T17548] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  421.230408][T17548] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  421.284703][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  421.288678][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  421.291057][    C1] bridge0: port 3(syz_tun) entered learning state
[  421.293287][    C1] bridge0: port 4(dummy0) entered learning state
[  421.343676][ T8026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.350732][ T8026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.408570][T18515] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5152'.
[  421.412471][ T4202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  421.415741][ T4202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  421.570461][T18511] loop4: detected capacity change from 0 to 32768
[  421.607295][ T4999] Bluetooth: hci3: command tx timeout
[  421.886278][T18535] kAFS: unparsable volume name
[  422.036180][T18543] loop4: detected capacity change from 0 to 256
[  422.043182][T18543] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[  422.060669][T18543] overlay: filesystem on ./file0 not supported
[  422.161097][T18545] loop4: detected capacity change from 0 to 8192
[  422.181217][T18545] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  422.454526][T18563] netlink: 'syz.0.5172': attribute type 6 has an invalid length.
[  422.457826][T18563] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5172'.
[  423.402662][T18605] Bluetooth: hci1: Frame reassembly failed (-84)
[  423.683817][ T5611] Bluetooth: hci3: command tx timeout
[  423.804801][T18611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5194'.
[  423.808631][T18611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5194'.
[  423.816031][T18611] netlink: 'syz.0.5194': attribute type 14 has an invalid length.
[  423.819562][T18611] netlink: 'syz.0.5194': attribute type 13 has an invalid length.
[  424.074181][T18631] loop8: detected capacity change from 0 to 4096
[  424.150182][T18632] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  424.273006][T18634] block nbd8: NBD_DISCONNECT
[  424.439162][T18647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5209'.
[  424.464217][T18649] loop8: detected capacity change from 0 to 64
[  424.504258][T18651] netlink: 'syz.0.5211': attribute type 11 has an invalid length.
[  424.598283][T18661] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5216'.
[  424.601301][T18661] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5216'.
[  424.654716][T18667] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  424.796246][T18677] kernel profiling enabled (shift: 9)
[  425.194090][T18692] netlink: 'syz.0.5231': attribute type 3 has an invalid length.
[  425.266808][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5233'.
[  425.270572][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5233'.
[  425.321820][T18698] fuse: fd is not a fuse device
[  425.443855][ T4999] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[  425.781482][ T4999] Bluetooth: hci3: command tx timeout
[  426.344165][T18730] loop8: detected capacity change from 0 to 32768
[  426.384602][T18730] JBD2: Ignoring recovery information on journal
[  426.415056][T18730] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  426.635518][T18741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5251'.
[  426.698693][   T33] audit: type=1804 audit(426.564:177): pid=18738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.5249" name="/newroot/29/file1/file1" dev="loop8" ino=17059 res=1 errno=0
[  426.720676][   T33] audit: type=1804 audit(426.574:178): pid=18744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.5249" name="/newroot/29/file1/file1" dev="loop8" ino=17059 res=1 errno=0
[  426.772369][T18744] 
[  426.773407][T18744] ======================================================
[  426.775826][T18744] WARNING: possible circular locking dependency detected
[  426.777958][T18744] syzkaller #0 Tainted: G             L     
[  426.779907][T18744] ------------------------------------------------------
[  426.782035][T18744] syz.8.5249/18744 is trying to acquire lock:
[  426.784062][T18744] ffff88811de23058 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x340
[  426.787768][T18744] 
[  426.787768][T18744] but task is already holding lock:
[  426.790325][T18744] ffff88811de230e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x340
[  426.793651][T18744] 
[  426.793651][T18744] which lock already depends on the new lock.
[  426.793651][T18744] 
[  426.797064][T18744] 
[  426.797064][T18744] the existing dependency chain (in reverse order) is:
[  426.799931][T18744] 
[  426.799931][T18744] -> #3 (&oi->ip_xattr_sem){++++}-{4:4}:
[  426.802651][T18744]        down_read+0x47/0x2e0
[  426.804264][T18744]        ocfs2_init_acl+0x2fd/0x7e0
[  426.806211][T18744]        ocfs2_mknod+0x1679/0x2260
[  426.807867][T18744]        ocfs2_create+0x195/0x460
[  426.809429][T18744]        path_openat+0x1395/0x3860
[  426.811043][T18744]        do_file_open+0x23e/0x4a0
[  426.812778][T18744]        do_sys_openat2+0x113/0x200
[  426.814726][T18744]        __x64_sys_openat+0x138/0x170
[  426.816728][T18744]        do_syscall_64+0x15f/0xf80
[  426.818706][T18744]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.821277][T18744] 
[  426.821277][T18744] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  426.824699][T18744]        down_read+0x47/0x2e0
[  426.826565][T18744]        ocfs2_start_trans+0x3ab/0x700
[  426.828833][T18744]        ocfs2_modify_bh+0xe3/0x4d0
[  426.830969][T18744]        ocfs2_local_read_info+0x1454/0x1810
[  426.833422][T18744]        dquot_load_quota_sb+0x791/0xbd0
[  426.835714][T18744]        dquot_load_quota_inode+0x2e1/0x5d0
[  426.838038][T18744]        ocfs2_enable_quotas+0x1c8/0x4a0
[  426.840251][T18744]        ocfs2_fill_super+0x5356/0x6970
[  426.842479][T18744]        get_tree_bdev_flags+0x431/0x4f0
[  426.844712][T18744]        vfs_get_tree+0x92/0x2a0
[  426.846665][T18744]        do_new_mount+0x341/0xd30
[  426.848684][T18744]        __se_sys_mount+0x31d/0x420
[  426.850771][T18744]        do_syscall_64+0x15f/0xf80
[  426.852874][T18744]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.855464][T18744] 
[  426.855464][T18744] -> #1 (sb_internal#5){.+.+}-{0:0}:
[  426.858496][T18744]        ocfs2_start_trans+0x2ac/0x700
[  426.860702][T18744]        ocfs2_truncate_file+0x631/0x14e0
[  426.862929][T18744]        ocfs2_setattr+0x15e5/0x1ca0
[  426.864953][T18744]        notify_change+0xc1a/0xf40
[  426.866761][T18744]        do_truncate+0x1c2/0x250
[  426.868525][T18744]        path_openat+0x2f89/0x3860
[  426.870433][T18744]        do_file_open+0x23e/0x4a0
[  426.872356][T18744]        do_sys_openat2+0x113/0x200
[  426.874359][T18744]        __x64_sys_open+0x11e/0x150
[  426.876234][T18744]        do_syscall_64+0x15f/0xf80
[  426.878073][T18744]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.880459][T18744] 
[  426.880459][T18744] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  426.884061][T18744]        __lock_acquire+0x15a5/0x2cf0
[  426.886001][T18744]        lock_acquire+0x106/0x350
[  426.887777][T18744]        down_write+0x96/0x200
[  426.889243][T18744]        ocfs2_try_remove_refcount_tree+0xb6/0x340
[  426.891311][T18744]        ocfs2_truncate_file+0xdf3/0x14e0
[  426.893266][T18744]        ocfs2_setattr+0x15e5/0x1ca0
[  426.895068][T18744]        notify_change+0xc1a/0xf40
[  426.896762][T18744]        do_truncate+0x1c2/0x250
[  426.898304][T18744]        path_openat+0x2f89/0x3860
[  426.900025][T18744]        do_file_open+0x23e/0x4a0
[  426.901756][T18744]        do_sys_openat2+0x113/0x200
[  426.903444][T18744]        __x64_sys_open+0x11e/0x150
[  426.905179][T18744]        do_syscall_64+0x15f/0xf80
[  426.906907][T18744]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.909162][T18744] 
[  426.909162][T18744] other info that might help us debug this:
[  426.909162][T18744] 
[  426.912851][T18744] Chain exists of:
[  426.912851][T18744]   &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  426.912851][T18744] 
[  426.918228][T18744]  Possible unsafe locking scenario:
[  426.918228][T18744] 
[  426.920546][T18744]        CPU0                    CPU1
[  426.922316][T18744]        ----                    ----
[  426.924048][T18744]   lock(&oi->ip_xattr_sem);
[  426.925542][T18744]                                lock(&journal->j_trans_barrier);
[  426.928432][T18744]                                lock(&oi->ip_xattr_sem);
[  426.931079][T18744]   lock(&ocfs2_file_ip_alloc_sem_key);
[  426.932881][T18744] 
[  426.932881][T18744]  *** DEADLOCK ***
[  426.932881][T18744] 
[  426.935473][T18744] 3 locks held by syz.8.5249/18744:
[  426.937197][T18744]  #0: ffff888027fc4410 (sb_writers#32){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  426.940488][T18744]  #1: ffff88811de233a0 (&sb->s_type->i_mutex_key#46){+.+.}-{4:4}, at: do_truncate+0x18f/0x250
[  426.943948][T18744]  #2: ffff88811de230e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x340
[  426.947737][T18744] 
[  426.947737][T18744] stack backtrace:
[  426.949844][T18744] CPU: 0 UID: 0 PID: 18744 Comm: syz.8.5249 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  426.949857][T18744] Tainted: [L]=SOFTLOCKUP
[  426.949861][T18744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  426.949866][T18744] Call Trace:
[  426.949871][T18744]  <TASK>
[  426.949876][T18744]  dump_stack_lvl+0xe8/0x150
[  426.949887][T18744]  print_circular_bug+0x2e1/0x300
[  426.949900][T18744]  check_noncircular+0x12e/0x150
[  426.949910][T18744]  __lock_acquire+0x15a5/0x2cf0
[  426.949919][T18744]  ? irqentry_exit+0x218/0x730
[  426.949930][T18744]  ? lockdep_hardirqs_on+0x7a/0x110
[  426.949938][T18744]  ? irqentry_exit+0x218/0x730
[  426.949946][T18744]  ? trace_irq_disable+0x3b/0x140
[  426.949957][T18744]  ? ocfs2_try_remove_refcount_tree+0xb6/0x340
[  426.949968][T18744]  lock_acquire+0x106/0x350
[  426.949976][T18744]  ? ocfs2_try_remove_refcount_tree+0xb6/0x340
[  426.949987][T18744]  down_write+0x96/0x200
[  426.949997][T18744]  ? ocfs2_try_remove_refcount_tree+0xb6/0x340
[  426.950012][T18744]  ? __pfx_down_write+0x10/0x10
[  426.950023][T18744]  ocfs2_try_remove_refcount_tree+0xb6/0x340
[  426.950033][T18744]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[  426.950043][T18744]  ? ocfs2_metadata_cache_get_super+0x43/0x80
[  426.950053][T18744]  ocfs2_truncate_file+0xdf3/0x14e0
[  426.950064][T18744]  ? __pfx_ocfs2_truncate_file+0x10/0x10
[  426.950074][T18744]  ? do_raw_spin_unlock+0x4d/0x210
[  426.950085][T18744]  ? _raw_spin_unlock+0x28/0x50
[  426.950093][T18744]  ? ocfs2_inode_lock_tracker+0x436/0x710
[  426.950104][T18744]  ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10
[  426.950114][T18744]  ? ocfs2_rw_lock+0x13a/0x250
[  426.950122][T18744]  ? __pfx___dquot_initialize+0x10/0x10
[  426.950131][T18744]  ? __pfx_ocfs2_rw_lock+0x10/0x10
[  426.950140][T18744]  ? do_raw_spin_unlock+0x4d/0x210
[  426.950150][T18744]  ? jbd2_journal_begin_ordered_truncate+0xbb/0x150
[  426.950160][T18744]  ocfs2_setattr+0x15e5/0x1ca0
[  426.950169][T18744]  ? __pfx_ocfs2_setattr+0x10/0x10
[  426.950179][T18744]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  426.950190][T18744]  ? lockdep_hardirqs_on+0x7a/0x110
[  426.950198][T18744]  ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[  426.950205][T18744]  ? seqcount_lockdep_reader_access+0xea/0x100
[  426.950216][T18744]  ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0
[  426.950224][T18744]  ? current_time+0x22a/0x370
[  426.950234][T18744]  ? evm_inode_setattr+0x1b6/0x7d0
[  426.950241][T18744]  ? __pfx_current_time+0x10/0x10
[  426.950252][T18744]  ? try_break_deleg+0x5b/0x180
[  426.950261][T18744]  ? __pfx_ocfs2_setattr+0x10/0x10
[  426.950269][T18744]  notify_change+0xc1a/0xf40
[  426.950279][T18744]  do_truncate+0x1c2/0x250
[  426.950286][T18744]  ? __pfx_do_truncate+0x10/0x10
[  426.950292][T18744]  ? apparmor_file_truncate+0x39f/0x470
[  426.950303][T18744]  path_openat+0x2f89/0x3860
[  426.950312][T18744]  ? __pfx_stack_trace_save+0x10/0x10
[  426.950323][T18744]  ? stack_depot_save_flags+0x33/0x810
[  426.950334][T18744]  ? __pfx_path_openat+0x10/0x10
[  426.950340][T18744]  ? __x64_sys_open+0x11e/0x150
[  426.950349][T18744]  ? __lock_acquire+0x6b5/0x2cf0
[  426.950358][T18744]  do_file_open+0x23e/0x4a0
[  426.950365][T18744]  ? __pfx_do_file_open+0x10/0x10
[  426.950374][T18744]  ? _raw_spin_unlock+0x28/0x50
[  426.950381][T18744]  ? alloc_fd+0x64b/0x6c0
[  426.950390][T18744]  do_sys_openat2+0x113/0x200
[  426.950401][T18744]  ? __pfx_do_sys_openat2+0x10/0x10
[  426.950409][T18744]  ? kfree+0x4d/0x640
[  426.950419][T18744]  ? rcu_is_watching+0x15/0xb0
[  426.950427][T18744]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.950435][T18744]  __x64_sys_open+0x11e/0x150
[  426.950444][T18744]  do_syscall_64+0x15f/0xf80
[  426.950453][T18744]  ? trace_irq_disable+0x3b/0x140
[  426.950464][T18744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.950471][T18744] RIP: 0033:0x7f0853f9cdd9
[  426.950479][T18744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  426.950486][T18744] RSP: 002b:00007f0854dcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  426.950495][T18744] RAX: ffffffffffffffda RBX: 00007f0854216270 RCX: 00007f0853f9cdd9
[  426.950500][T18744] RDX: 0000000000000149 RSI: 000000000014927e RDI: 0000200000000300
[  426.950505][T18744] RBP: 00007f0854032d69 R08: 0000000000000000 R09: 0000000000000000
[  426.950513][T18744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  426.950517][T18744] R13: 00007f0854216308 R14: 00007f0854216270 R15: 00007ffed2dfa718
[  426.950526][T18744]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  427.321874][T18750] xt_TPROXY: Can be used only with -p tcp or -p udp
[  427.631013][T18744] ocfs2: Unmounting device (7,8) on (node local)
[  427.750314][T16486] bridge0: port 3(syz_tun) entered disabled state
[  427.782587][T16486] syz_tun (unregistering): left allmulticast mode
[  427.784713][T16486] syz_tun (unregistering): left promiscuous mode
[  427.787174][T16486] bridge0: port 3(syz_tun) entered disabled state
[  428.076927][T17548] bridge_slave_1: left allmulticast mode
[  428.082809][T17548] bridge_slave_1: left promiscuous mode
[  428.084860][T17548] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.090000][T17548] bridge_slave_0: left allmulticast mode
[  428.091891][T17548] bridge_slave_0: left promiscuous mode
[  428.093671][T17548] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.096893][T17548] lo: left allmulticast mode
[  428.197797][T17548] bond4 (unregistering): (slave geneve2): Releasing active interface
[  428.200791][T17548] geneve2 (unregistering): left allmulticast mode
[  428.240394][T17548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  428.244593][T17548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  428.248391][T17548] bond0 (unregistering): Released all slaves
[  428.251960][T17548] bond1 (unregistering): Released all slaves
[  428.256677][T17548] bond2 (unregistering): (slave veth5): Releasing active interface
[  428.260709][T17548] bond2 (unregistering): Released all slaves
[  428.266344][T17548] bond3 (unregistering): (slave 60X): Removing an active aggregator
[  428.270097][T17548] bond3 (unregistering): (slave 60X): Releasing backup interface
[  428.274043][T17548] bond3 (unregistering): Released all slaves
[  428.281390][T17548] bond4 (unregistering): Released all slaves
[  428.286349][T17548] bond5 (unregistering): (slave lo): Releasing backup interface
[  428.289242][T17548] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  428.295743][T17548] bond5 (unregistering): Released all slaves
[  428.302774][ T5354] 8021q: adding VLAN 0 to HW filter on device eth26
[  428.534900][ T5354] 8021q: adding VLAN 0 to HW filter on device eth25
[  428.750407][ T5354] 8021q: adding VLAN 0 to HW filter on device eth27
[  428.806536][T17548] hsr_slave_0: left promiscuous mode
[  428.813916][T17548] hsr_slave_1: left promiscuous mode
[  428.815997][T17548] batman_adv: 60X: Interface deactivated: batadv_slave_0
[  428.821976][T17548] batman_adv: 60X: Removing interface: batadv_slave_0
[  428.826617][T17548] batman_adv: 60X: Interface deactivated: batadv_slave_1
[  428.829272][T17548] batman_adv: 60X: Removing interface: batadv_slave_1
[  428.934410][T17548] team_slave_1 (unregistering): left promiscuous mode
[  428.937245][T17548] team0 (unregistering): Port device team_slave_1 removed
[  428.942489][T17548] team_slave_0 (unregistering): left promiscuous mode
[  428.945213][T17548] team0 (unregistering): Port device team_slave_0 removed
[  429.019737][ T5354] 8021q: adding VLAN 0 to HW filter on device eth28
[  429.265886][T17548] IPVS: stop unused estimator thread 0...
[  429.436493][T17548] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.479780][T17548] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.523634][T17548] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.565154][T17548] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.651047][T17548] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.655133][T17548] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.724179][T17548] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.728368][T17548] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.777385][ T5354] 8021q: adding VLAN 0 to HW filter on device eth29
[  429.821230][T17548] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  429.825481][T17548] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.910023][ T5354] 8021q: adding VLAN 0 to HW filter on device eth30
[  430.003035][T17548] bridge_slave_1: left allmulticast mode
[  430.006748][T17548] bridge_slave_1: left promiscuous mode
[  430.009199][T17548] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.013323][T17548] bridge_slave_0: left allmulticast mode
[  430.015631][T17548] bridge_slave_0: left promiscuous mode
[  430.017989][T17548] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.024665][T17548] dummy0: left allmulticast mode
[  430.026869][T17548] dummy0: left promiscuous mode
[  430.029006][T17548] bridge0: port 4(dummy0) entered disabled state
[  430.037416][T17548] bridge_slave_1: left promiscuous mode
[  430.039948][T17548] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.044266][T17548] bridge_slave_0: left allmulticast mode
[  430.046640][T17548] bridge_slave_0: left promiscuous mode
[  430.048963][T17548] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.139697][T17548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  430.143729][T17548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  430.147464][T17548] bond0 (unregistering): Released all slaves
[  430.539086][T17548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  430.542799][T17548] bond_slave_0: left promiscuous mode
[  430.546756][T17548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  430.550894][T17548] bond_slave_1: left promiscuous mode
[  430.553638][T17548] bond0 (unregistering): Released all slaves
[  430.558285][T17548] bond1 (unregistering): Released all slaves
[  430.564224][T17548] bond2 (unregistering): Released all slaves
[  430.571591][T17548] bond3 (unregistering): (slave lo): Releasing backup interface
[  430.574989][T17548] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  430.582671][T17548] bond3 (unregistering): Released all slaves
[  430.590036][ T5354] 8021q: adding VLAN 0 to HW filter on device eth31
[  430.676745][T17548] tipc: Left network mode
[  430.705393][T17548] IPVS: stopping master sync thread 8229 ...
[  430.735540][ T5354] 8021q: adding VLAN 0 to HW filter on device eth32
[  430.839150][ T5354] 8021q: adding VLAN 0 to HW filter on device eth33
[  430.983667][ T5354] 8021q: adding VLAN 0 to HW filter on device eth34
[  431.007949][T17548] hsr_slave_0: left promiscuous mode
[  431.010865][T17548] hsr_slave_1: left promiscuous mode
[  431.013332][T17548] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  431.016176][T17548] batman_adv: batadv0: Removing interface: batadv_slave_0
[  431.019592][T17548] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  431.022657][T17548] batman_adv: batadv0: Removing interface: batadv_slave_1
[  431.029001][T17548] hsr_slave_0: left promiscuous mode
[  431.031156][T17548] hsr_slave_1: left promiscuous mode
[  431.033767][T17548] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  431.037780][T17548] batman_adv: batadv0: Removing interface: batadv_slave_0
[  431.040651][T17548] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  431.043458][T17548] batman_adv: batadv0: Removing interface: batadv_slave_1
[  431.049352][T17548] veth1_macvtap: left promiscuous mode
[  431.051189][T17548] veth0_macvtap: left promiscuous mode
[  431.053312][T17548] veth1_vlan: left promiscuous mode
[  431.055476][T17548] veth0_vlan: left promiscuous mode
[  431.061237][T17548] veth0_to_bridge: left allmulticast mode
[  431.063629][T17548] veth0_to_bridge: left promiscuous mode
[  431.065948][T17548] veth0_macvtap: left promiscuous mode
[  431.068707][T17548] veth1_vlan: left promiscuous mode
[  431.070423][T17548] veth0_vlan: left promiscuous mode
[  431.184735][T17548] team0 (unregistering): Port device team_slave_1 removed
[  431.196818][T17548] team0 (unregistering): Port device team_slave_0 removed
[  431.342968][T17548] team_slave_1 (unregistering): left promiscuous mode
[  431.346322][T17548] team0 (unregistering): Port device team_slave_1 removed
[  431.372683][T17548] team_slave_0 (unregistering): left promiscuous mode
[  431.378970][T17548] team0 (unregistering): Port device team_slave_0 removed
[  431.599720][ T5354] 8021q: adding VLAN 0 to HW filter on device eth35
[  431.707583][ T5354] 8021q: adding VLAN 0 to HW filter on device eth36
[  432.006530][T17548] IPVS: stop unused estimator thread 0...
