last executing test programs:

2m40.268971851s ago: executing program 1 (id=2224):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0xa79c, 0x4)

2m39.680249293s ago: executing program 1 (id=2227):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write(r0, &(0x7f0000000040)="98faaf4805dc7b4806681b2334c15a4d6ffa777cb1abb147dd89f4ba848008965b830000000000000000e60458eca59cadb16ba8db8097f868360d9737a1f20d08004be5e7d2b9dfec336faedcb601f551c73eb0dcb04fc1b5fdefa2c628e094437473743e6d2afac2dd400fb8003a4530f78503064a", 0x76)

2m39.58756235s ago: executing program 1 (id=2229):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x30, 0x2, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x75}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_FILTER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x84)

2m39.529423648s ago: executing program 1 (id=2231):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x402, &(0x7f00000001c0)=ANY=[], 0x1, 0x242, &(0x7f0000000380)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
link(&(0x7f0000000040)='./file0/file0\x00', 0x0)

2m39.469724606s ago: executing program 1 (id=2233):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {0x2}, {}, {}, {0x1}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f00000006c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit, @exit, @jmp={0x5, 0x0, 0x9, 0x7, 0x9, 0x100, 0x1}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94)

2m39.167493861s ago: executing program 1 (id=2239):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB=' '], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0)

2m38.991804279s ago: executing program 32 (id=2239):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB=' '], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0)

2m1.163242328s ago: executing program 3 (id=2684):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100030010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0)

2m1.083737077s ago: executing program 3 (id=2685):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a1000519"], 0x3c}}, 0x0)

2m1.00535669s ago: executing program 3 (id=2687):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4028, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000280)=0x1800009, 0x48)
sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x8}, 0x1c, 0x0}}], 0x1, 0x20080081)
unshare(0x26020480)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x8)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$sndctrl(0x0, 0x1, 0x200)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
ioctl$BLKBSZGET(r4, 0x80081270, 0x0)
sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f00000020c0), 0x0, 0x82c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1}}, 0x20)
sendfile(r4, r5, 0x0, 0x676c319a)
ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000000200)=0x6f4)

1m59.236589219s ago: executing program 3 (id=2697):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, 0x0, 0x0)

1m58.974685263s ago: executing program 3 (id=2702):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x278, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x244, 0xfc, 0x0, 0x1, [@nested={0x240, 0x8, 0x0, 0x1, [@generic="afca5ff5d515226501d9fac3908ff02f8d09509c26adb6b5d864484d04d69b4da5d7a52bfaaaad3a5c25aa473a0456cf81bd4d74603377984679d221e2a018985f995b9c1787285a3068593180b924ed8d0940610e751d4177f4fdaa3b647713ec058a87aa46f52171df898c7a05121abccd3e66c0d455d5497f9b88f86e97ac669b2ac8acdde2137a259ace56f95c5e39e7db5a34433901da46f369d9dd5ca3e90600b07d4664e1d96191edfaa947604e2f1f75db04", @generic="9bd8923e183ceaf32e67fb16888c806403ecd4458012965b4bf87d769bf5e030474a90f0f8b743003256111a88037a5489878dc68d48348280c55d31a3ea6fc747a0cf299e10637fbc9a618a6bcadf0f6caf923a1dfbd1f2ba8fa08ddffc28b9a387e3b2b35d8a4ac3ea722e6f6089", @generic="cc683eecda71ba25b3f72797dc417fca84d9d8f8baa94057192947b92000ba5770c7b084403a03adc1a2f42acd35c86093d2150d1d0a70f422e4f73eac96a9de66ddc93cb95cbfce68d52b80505ad2cb11893f86e6c26ea10f484762e841ee827d794612312cd37ad973b2ab2986bb65f84b670790bad3776ef66f76955009f71065c51850d6b375827b6e3666e469312a118278044cc8c60724f9c11c75aee12f40a3f53f995cc20d3fef674b2e46dfdf9d48685be6be74cf4374ae2c3627d82fb3523b86a6b5eecc7c852e62b45b72141293a9e3fb1096a448ff5bce3586b50be5d12cbf9a80bca166", @generic="f0e79ebd68b11bafb7f0fcc690fd1895afce6ae42d8ab38b9ebbfedf6d80c37c89ead9c8af0ec8b3f4a81f88d0"]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xa, 0x2, 0x0, 0x1, [@generic="97f0972655b2"]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x278}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

1m58.684628349s ago: executing program 3 (id=2708):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x3e, 0x0, 0x0)

1m58.433558598s ago: executing program 33 (id=2708):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x3e, 0x0, 0x0)

1m39.832882998s ago: executing program 4 (id=2881):
syz_open_dev$evdev(0x0, 0xfffffffffffffffe, 0x180)
syz_usb_connect(0x0, 0xe4, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501", @ANYBLOB="c51e"], 0x0)

1m38.264704054s ago: executing program 4 (id=2900):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
rseq(0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f00000009c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0)
r5 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
read$qrtrtun(r6, &(0x7f00000004c0)=""/57, 0x39)
r7 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, 0x0)
mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000340), 0x889004, &(0x7f0000000680)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x800}}]}})
shmctl$IPC_RMID(r5, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

1m37.336149548s ago: executing program 4 (id=2902):
socket(0x2a, 0x2, 0x0)
socket$inet(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000740)={0x710, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0xe000}, 0x1, 0x2, 0x8000, 0x240, 0x5, 'syz0\x00', "30f1a7f1e7893f5a4c98a01e5c19704caff85e0efcbd7e74a4bf4d298db81a07", "e42a5a426a8ab3da02c7786c5ea6c0ce1d0388c328e5fa67e63bb15252453f34", [{0x0, 0x2, {0x3, 0xfffffff9}}, {0x4, 0x8, {0x2, 0x3be1ae29}}, {0x7f, 0xe, {0x1, 0xb4}}, {0x1, 0x8000, {0x0, 0x5}}, {0x81, 0x10, {0x2, 0x5}}, {0x1, 0x2, {0x1, 0x1000}}, {0x3ff, 0x8, {0x2, 0xffff7fff}}, {0x12, 0x25fd, {0xa078a12dd178018b, 0x10b}}, {0xff, 0x3, {0x2, 0x4}}, {0x6, 0x5, {0x0, 0x2}}, {0xfff, 0xe86, {0x1, 0x1}}, {0x2a73, 0x200, {0x3, 0x3}}, {0x4, 0x7f, {0x2, 0x101}}, {0x9, 0x9, {0x2, 0x9}}, {0x7, 0x80, {0x1, 0x1f}}, {0x4, 0x1, {0x2, 0x9}}, {0x16d, 0x6, {0x1, 0x2a3}}, {0x3, 0x9, {0x2, 0x5}}, {0xfffc, 0xa, {0x2, 0xb}}, {0xb7d, 0x8, {0x0, 0x10001}}, {0x4, 0x749e, {0x3, 0x9}}, {0x8, 0xfff9, {0x3, 0x1}}, {0x5, 0x0, {0x3, 0x2}}, {0x4, 0xec58, {0x24b6c1fde8171efa, 0x8}}, {0x4, 0x1, {0x3, 0x5}}, {0x2, 0x40cd, {0x3, 0x125896ce}}, {0x55f, 0x4, {0x3, 0x6}}, {0x8, 0x1, {0x0, 0xffffffff}}, {0x400, 0x2, {0x3}}, {0x9e, 0x9, {0x2, 0xe211}}, {0x1, 0x6, {0x1, 0xffffffff}}, {0x3, 0xfffc, {0x3, 0x3}}, {0x8, 0x7, {0x2, 0x4}}, {0x2, 0x0, {0x3, 0x1ff}}, {0x859, 0x2, {0x3, 0xd21}}, {0x9, 0xffff, {0x0, 0xffffff43}}, {0x59, 0x8001, {0x0, 0x5}}, {0x3ff, 0x8d82, {0x3, 0x8}}, {0x3e6, 0x7, {0x0, 0x9}}, {0x0, 0x1000, {0x0, 0x75be}}]}}}, {{0x254, 0x1, {{0x0, 0x800}, 0x72, 0x2, 0x3, 0x2c75, 0xf, 'syz1\x00', "7abb81742d91f72562d9ce4aaae1c78250834b54768323fa3b1dab13c3249d7e", "cfb075a789a305ddcfa515eff117634abf180d63379911829b53c9c9d788df59", [{0x7ff, 0x3e0, {0x2, 0x81}}, {0xfffb, 0x200, {0x0, 0x9}}, {0x5, 0xfff7, {0x3, 0x6}}, {0xc, 0x1, {0x1, 0xfffffc00}}, {0x6000, 0x200, {0x2, 0x4}}, {0x6, 0x2, {0x1, 0xfffffff6}}, {0xb, 0x2, {0x2, 0x729}}, {0x1c, 0x9, {0x3, 0x7}}, {0x2, 0x1, {0x1, 0x3}}, {0x9, 0x5}, {0x0, 0x80, {0x1, 0x9}}, {0xd1f, 0x7, {0x1, 0xd2}}, {0x8, 0x2, {0x1, 0x8}}, {0x0, 0xa, {0x0, 0x7f}}, {0x10, 0x5234, {0x0, 0x8}}, {0xd4d7, 0x3ff, {0x0, 0x3003}}, {0x10, 0xfff3, {0x1, 0x8d0}}, {0xb, 0x99, {0x0, 0x7}}, {0xff, 0x3, {0x2, 0x9}}, {0xf, 0x1, {0x1, 0xfffffffe}}, {0xf1, 0x808, {0x2, 0x1}}, {0x6, 0x8, {0x3, 0x889}}, {0x800, 0x0, {0x1, 0x4}}, {0x40, 0x2, {0x1, 0x8}}, {0x4, 0x8001, {0x2, 0x8000}}, {0x5e9b, 0x7ff, {0x1, 0xff}}, {0xa, 0x6, {0x3, 0x5}}, {0xffff, 0x0, {0x2, 0x1}}, {0x7d, 0x1, {0x0, 0x7ff}}, {0x8, 0x737, {0x1, 0x64}}, {0x1ff, 0xb, {0x0, 0xfff}}, {0x0, 0x3, {0x3, 0x7}}, {0xa7b, 0xdff, {0x3, 0xfffffff9}}, {0x18aa, 0x9, {0x0, 0x7f}}, {0x7, 0x1, {0x1, 0x1}}, {0x5, 0x81, {0x1, 0xc6}}, {0x8291, 0x7}, {0xd, 0xfffe, {0x1, 0x1}}, {0x10, 0xb3d, {0x1, 0x2}}, {0x7, 0x5db9, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0x76, 0x1, 0x80, 0x2, 0x1d, 'syz1\x00', "75e4f8cd1ce4f04348e4622059a8c03fd84090119bdef747c01fe49ff6035707", "d09406a0e7096dd6d2395c19e8996b0c2cf760604e36dfa887202f45ec0153f8", [{0x1, 0x7, {0x2, 0x1}}, {0x7ff, 0x8, {0x3, 0xfffffff8}}, {0xed, 0x2dea, {0x2, 0x1}}, {0x2, 0x9, {0x0, 0x8d0}}, {0x4, 0x3, {0x2, 0x1df20000}}, {0x0, 0x3, {0x0, 0xb045}}, {0x89cb, 0x3, {0x0, 0x5}}, {0xaf, 0x6, {0x41998e8385e00d27, 0x4f}}, {0x4, 0x3, {0x1, 0x4}}, {0x7f, 0x666f, {0x0, 0xcf39}}, {0x8001, 0x9, {0x3, 0x8000}}, {0x101, 0x1000, {0x2, 0x8}}, {0xe, 0xfffa, {0x2, 0xf788}}, {0xed4, 0x80, {0x1, 0x8}}, {0x0, 0x9, {0x0, 0x5}}, {0x7ff, 0x901, {0x1, 0x401}}, {0x9, 0x5, {0x1, 0x80000000}}, {0x10, 0xae25, {0x0, 0x7633}}, {0x2, 0x1, {0x3, 0xfffffffd}}, {0x10, 0xfff8, {0x2, 0x8000}}, {0x8001, 0x9, {0x0, 0x10000}}, {0x4, 0x7, {0x2, 0xa0}}, {0x7ff, 0x0, {0x2, 0x9}}, {0x2, 0x3, {0x3, 0x3}}, {0x7fff, 0x1b0, {0x1, 0x6f5a}}, {0x5, 0x499, {0x0, 0x5}}, {0xfff, 0x3, {0x1, 0xa044}}, {0x0, 0xf0f9, {0x3}}, {0x73, 0xb4, {0x3, 0x4e}}, {0x7, 0x56, {0x1, 0x2}}, {0xf, 0x2, {0x1, 0x7}}, {0x2, 0xffff, {0x3, 0x1}}, {0x5, 0x400, {0x2, 0x80000001}}, {0xb81e, 0x6, {0x2, 0x8}}, {0x10, 0x2, {0x2, 0x8001}}, {0x7, 0x1, {0x3, 0x1}}, {0x8, 0x7, {0x2, 0x2}}, {0xab, 0x9, {0x1, 0x7ff}}, {0x0, 0x3, {0x3, 0x2}}, {0x8, 0x0, {0x0, 0x8001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x8010}, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
unshare(0x8000600)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000"], 0x24, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10)
r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
dup3(r4, r5, 0x0)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r6, 0x0, 0x0)

1m36.449320216s ago: executing program 4 (id=2908):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080))
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c})

1m36.244404753s ago: executing program 4 (id=2910):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000200007800c00018008000240000000000800084000000000080006400000000005000500020000000500010006"], 0x6c}}, 0x0)

1m35.862660073s ago: executing program 4 (id=2914):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x6}, 0x50)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020)

1m35.710113282s ago: executing program 34 (id=2914):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x6}, 0x50)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020)

1m0.247183377s ago: executing program 0 (id=3346):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2d840009aa5ab9"], 0xffdd)

1m0.157652116s ago: executing program 0 (id=3349):
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x28, 0x0, &(0x7f0000000000))

1m0.089636347s ago: executing program 0 (id=3351):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800154000000000080008"], 0x48}}, 0x4000000)

59.964895924s ago: executing program 0 (id=3354):
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x48cf, &(0x7f0000000340)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_lower}, {@uni_xlate}, {@rodir}, {@numtail}]}, 0x0, 0x274, &(0x7f0000000a00)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

59.872404426s ago: executing program 0 (id=3358):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x8004587d, &(0x7f0000000180)={@desc={0x1, 0x0, @desc1}})
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

59.601991562s ago: executing program 0 (id=3360):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000440)=""/140, 0x8c}], 0x5}}], 0x3ffffffffffff61, 0x2, 0x0)

59.517695489s ago: executing program 35 (id=3360):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000440)=""/140, 0x8c}], 0x5}}], 0x3ffffffffffff61, 0x2, 0x0)

470.745006ms ago: executing program 6 (id=4132):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1)
read(r0, &(0x7f0000000040)=""/46, 0x2e)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

470.517495ms ago: executing program 5 (id=4133):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073ffe2320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c000100626974776973650024000280080003400000000208000140000000140800024000001a1208000640000000010900010073797a30"], 0x108}}, 0x0)

470.236664ms ago: executing program 2 (id=4134):
r0 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

367.974831ms ago: executing program 5 (id=4135):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
creat(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x3}}}}}}, 0x0)

367.640804ms ago: executing program 6 (id=4136):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000440)="87", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x2, 0x48081)
shutdown(r0, 0x1)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={r2}, &(0x7f0000000240)=0x8)

367.425311ms ago: executing program 2 (id=4137):
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
syz_emit_ethernet(0xce, 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020)
acct(&(0x7f00000001c0)='./file0\x00')
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)
acct(0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
msgget(0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0)

289.020592ms ago: executing program 5 (id=4138):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x40)

288.548844ms ago: executing program 6 (id=4139):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c1f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)

288.241559ms ago: executing program 2 (id=4140):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

219.375644ms ago: executing program 5 (id=4141):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix_mp={0x0, 0x0, 0x33424752, 0x0, 0x0, [{0x0, 0x3}]}})

219.255679ms ago: executing program 6 (id=4142):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f0000000140)='o', 0x1, 0xd1, 0x0, 0x0)
recvfrom$unix(r1, 0x0, 0x50, 0x12123, 0x0, 0xfffffffffffffe5b)

219.085642ms ago: executing program 2 (id=4143):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="0800d720c6e6646f", 0x8}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010101, @broadcast}}}], 0x20}, 0x24008004)

152.415658ms ago: executing program 5 (id=4144):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000050000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

152.089095ms ago: executing program 2 (id=4145):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000a6080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94)

141.285634ms ago: executing program 6 (id=4146):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

505.451µs ago: executing program 6 (id=4147):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x6b929545a606890f)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc1205531, &(0x7f00000010c0)=""/4111)

243.875µs ago: executing program 2 (id=4148):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
shutdown(r0, 0x2)

0s ago: executing program 5 (id=4149):
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r0, 0x0)
write$binfmt_format(r0, &(0x7f0000000000)='0\x00', 0x2)

kernel console output (not intermixed with test programs):

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=17174 res=1 errno=0
[  190.010624][ T9228] netlink: 'syz.0.1322': attribute type 12 has an invalid length.
[  190.013821][ T9228] netlink: 'syz.0.1322': attribute type 29 has an invalid length.
[  190.017044][ T9228] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1322'.
[  190.020910][ T9228] netlink: 'syz.0.1322': attribute type 1 has an invalid length.
[  190.070729][ T9230] tipc: Enabling <eth:lo> not permitted
[  190.073290][ T9230] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  191.038194][ T9239] binder: 9238:9239 ioctl c018620c 200000000040 returned -1
[  191.278704][ T9254] loop1: detected capacity change from 0 to 2048
[  191.282259][ T9254] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  191.292488][ T9257] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  191.490329][ T9265] netlink: 'syz.0.1339': attribute type 3 has an invalid length.
[  191.761408][ T9279] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  191.765058][ T9279] overlayfs: missing 'lowerdir'
[  194.064436][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.068967][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.177998][ T9312] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1360'.
[  194.182143][ T9312] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1360'.
[  194.185826][ T9312] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1360'.
[  194.526922][ T9335] ALSA: mixer_oss: invalid OSS volume ''
[  194.911786][ T5884] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  195.109807][ T5884] usb 2-1: config 102 has an invalid interface number: 120 but max is 0
[  195.121094][ T5884] usb 2-1: config 102 has no interface number 0
[  195.128863][ T5884] usb 2-1: config 102 interface 120 has no altsetting 0
[  195.151738][ T5884] usb 2-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01
[  195.169640][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.179770][ T5884] usb 2-1: Product: syz
[  195.181290][ T5884] usb 2-1: Manufacturer: syz
[  195.182965][ T5884] usb 2-1: SerialNumber: syz
[  195.458769][ T5884] go7007 2-1:102.120: The Lifeview TV Walker Ultra is not supported. Sorry!
[  195.463629][ T5884] usb 2-1: USB disconnect, device number 13
[  195.607903][ T9349] orangefs_mount: mount request failed with -4
[  196.293801][ T9365] loop1: detected capacity change from 0 to 2048
[  196.754132][ T9376] loop1: detected capacity change from 0 to 4096
[  196.804911][ T9379] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  197.334771][ T9387] can0: slcan on ttyS3.
[  197.413783][ T9387] can0 (unregistered): slcan off ttyS3.
[  197.834923][ T9411] tun0: tun_chr_ioctl cmd 1074025677
[  197.837452][ T9411] tun0: linktype set to 778
[  198.050471][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1412'.
[  198.053868][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1412'.
[  199.224269][ T9472] loop1: detected capacity change from 0 to 1024
[  199.323068][ T9472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.351984][ T9472] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.1430: missing EA_INODE flag
[  199.360168][ T9472] EXT4-fs (loop1): Remounting filesystem read-only
[  199.363033][ T9472] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  199.773043][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.635141][ T9511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1450'.
[  200.647159][ T9508] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1450'.
[  200.842151][ T9513] loop1: detected capacity change from 0 to 32768
[  201.143136][ T9527] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  201.188334][   T33] audit: type=1326 audit(1753416369.947:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.0.1459" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2849f8e9a9 code=0x0
[  201.609561][ T9531] loop1: detected capacity change from 0 to 1024
[  201.645413][ T9531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.681978][   T33] audit: type=1800 audit(1753416370.437:81): pid=9531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1460" name="file1" dev="loop1" ino=15 res=0 errno=0
[  201.761426][   T33] audit: type=1804 audit(1753416370.517:82): pid=9538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1460" name="/newroot/516/file1/file1" dev="loop1" ino=15 res=1 errno=0
[  201.793447][   T33] audit: type=1800 audit(1753416370.537:83): pid=9538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1460" name="file1" dev="loop1" ino=15 res=0 errno=0
[  201.958035][ T9542] netlink: 'syz.2.1464': attribute type 10 has an invalid length.
[  201.993353][ T9531] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1460: Allocating blocks 497-513 which overlap fs metadata
[  202.014995][   T33] audit: type=1326 audit(1753416370.777:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.0.1465" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2849f8e9a9 code=0x7ffc0000
[  202.022768][ T9542] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  202.029226][   T33] audit: type=1326 audit(1753416370.787:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.0.1465" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2849f8e9a9 code=0x7ffc0000
[  202.051152][   T33] audit: type=1326 audit(1753416370.797:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.0.1465" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f2849f8e9a9 code=0x7ffc0000
[  202.058388][   T33] audit: type=1326 audit(1753416370.797:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.0.1465" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2849f8e9a9 code=0x7ffc0000
[  202.067072][   T33] audit: type=1326 audit(1753416370.797:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9543 comm="syz.0.1465" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2849f8e9a9 code=0x7ffc0000
[  202.076533][ T9530] EXT4-fs (loop1): pa ffff88801dd6bae0: logic 32, phys. 161, len 22
[  202.080256][ T9530] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  202.128602][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.397746][   T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x90
[  203.222451][ T9581] loop1: detected capacity change from 0 to 512
[  203.231492][ T9581] EXT4-fs (loop1): 1 truncate cleaned up
[  203.235627][ T9581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.259479][ T9583] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[  203.296072][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.510138][ T9591] loop1: detected capacity change from 0 to 2048
[  203.548690][ T9591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.553635][ T9591] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.594566][ T9591] overlayfs: Failed to create volatile/dirty file.
[  203.628940][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.705120][ T9603] loop1: detected capacity change from 0 to 128
[  203.707850][ T9603] EXT4-fs: Ignoring removed nomblk_io_submit option
[  203.721116][ T9603] EXT4-fs: Ignoring removed nomblk_io_submit option
[  203.723734][ T9603] EXT4-fs (loop1): Test dummy encryption mode enabled
[  203.744776][ T9603] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  203.778812][ T9603] ext4 filesystem being mounted at /524/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  203.917675][ T9603] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  203.973589][ T5829] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  204.049218][ T9616] netlink: 'syz.1.1493': attribute type 1 has an invalid length.
[  204.055298][ T9616] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1493'.
[  204.062415][ T9616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1493'.
[  204.359223][ T9633] loop1: detected capacity change from 0 to 4096
[  205.675609][ T9657] ip6_vti0: entered promiscuous mode
[  205.783299][ T9662] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  206.661028][ T9683] loop1: detected capacity change from 0 to 1024
[  206.664316][ T9683] journal_path: not usable as path
[  206.666307][ T9683] EXT4-fs: error: could not find journal device path
[  207.083159][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1526'.
[  207.125197][ T9691] loop1: detected capacity change from 0 to 128
[  207.393309][ T9705] loop1: detected capacity change from 0 to 256
[  207.419801][ T9705] exfat: Deprecated parameter 'utf8'
[  207.421559][ T9705] exfat: Deprecated parameter 'utf8'
[  207.430978][ T9705] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  207.869314][ T1277] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  208.044042][ T1277] usb 2-1: config 0 has an invalid interface number: 223 but max is 0
[  208.047494][ T1277] usb 2-1: config 0 has no interface number 0
[  208.065342][ T1277] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice=70.28
[  208.068845][ T1277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.081492][ T1277] usb 2-1: Product: syz
[  208.083204][ T1277] usb 2-1: Manufacturer: syz
[  208.085020][ T1277] usb 2-1: SerialNumber: syz
[  208.090549][ T1277] usb 2-1: config 0 descriptor??
[  208.099182][ T1277] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.223/input/input8
[  208.303951][ T5264] bcm5974 2-1:0.223: could not read from device
[  208.324777][ T1277] usb 2-1: USB disconnect, device number 14
[  208.331735][ T5264] bcm5974 2-1:0.223: could not read from device
[  208.405130][ T9764] netlink: 'syz.0.1563': attribute type 5 has an invalid length.
[  209.021644][ T9778] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  209.059177][ T9778] CIFS mount error: No usable UNC path provided in device string!
[  209.059177][ T9778] 
[  209.063555][ T9778] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  209.196044][ T9788] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1575'.
[  209.198867][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1575'.
[  211.860928][ T9846] loop1: detected capacity change from 0 to 1024
[  211.881806][ T9846] hfsplus: failed to load catalog file
[  211.945513][ T9853] input: syz1 as /devices/virtual/input/input9
[  211.978479][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'.
[  211.986112][ T9855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  212.032702][ T9859] netlink: 'syz.2.1605': attribute type 1 has an invalid length.
[  212.036918][ T9857] input: syz1 as /devices/virtual/input/input10
[  212.126569][ T9865] xt_CT: You must specify a L4 protocol and not use inversions on it
[  212.627134][ T6247] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  212.784772][ T6247] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023
[  212.788736][ T6247] usb 2-1: config 1 interface 0 has no altsetting 0
[  212.804983][ T6247] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  212.808882][ T6247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.817660][ T6247] usb 2-1: Product: syz
[  212.820682][ T6247] usb 2-1: Manufacturer: syz
[  212.823205][ T6247] usb 2-1: SerialNumber: syz
[  212.833701][ T9882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  213.050100][ T6247] usb 2-1: USB disconnect, device number 15
[  213.421236][ T6550] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  213.569671][ T6550] usb 1-1: Using ep0 maxpacket: 8
[  214.189928][ T6550] usb 1-1: config 0 has an invalid interface number: 239 but max is 0
[  214.195071][ T6550] usb 1-1: config 0 has no interface number 0
[  214.197512][ T6550] usb 1-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[  214.202542][ T6550] usb 1-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[  214.213172][ T6550] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  214.216801][ T6550] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.222887][ T6550] usb 1-1: Product: syz
[  214.224659][ T6550] usb 1-1: Manufacturer: syz
[  214.226582][ T6550] usb 1-1: SerialNumber: syz
[  214.232385][ T6550] usb 1-1: config 0 descriptor??
[  214.250553][ T9920] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  214.457740][ T6550] ath6kl: Failed to submit usb control message: -71
[  214.469340][ T6550] ath6kl: unable to send the bmi data to the device: -71
[  214.472972][ T6550] ath6kl: Unable to send get target info: -71
[  214.489323][ T6550] ath6kl: Failed to init ath6kl core: -71
[  214.493459][ T6550] ath6kl_usb 1-1:0.239: probe with driver ath6kl_usb failed with error -71
[  214.518981][ T6550] usb 1-1: USB disconnect, device number 17
[  214.603611][ T9931] loop1: detected capacity change from 0 to 32768
[  214.608769][ T9931] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1639 (9931)
[  214.619496][ T9931] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  214.623611][ T9931] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[  214.627314][ T9931] BTRFS info (device loop1): disk space caching is enabled
[  214.630372][ T9931] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  214.672525][ T9931] BTRFS info (device loop1): rebuilding free space tree
[  214.685517][ T9931] BTRFS info (device loop1): disabling free space tree
[  214.688439][ T9931] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  214.693714][ T9931] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  214.774689][ T5829] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  215.108678][ T9977] SET target dimension over the limit!
[  215.373613][   T33] audit: type=1326 audit(1753416384.137:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.0.1664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2849f8e9a9 code=0x7ffc0000
[  215.386365][   T33] audit: type=1326 audit(1753416384.137:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.0.1664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2849f8e9a9 code=0x7ffc0000
[  215.395907][   T33] audit: type=1326 audit(1753416384.147:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.0.1664" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2849f8e9a9 code=0x7ffc0000
[  215.411165][   T33] audit: type=1326 audit(1753416384.147:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.0.1664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2849f8e9a9 code=0x7ffc0000
[  215.449448][   T33] audit: type=1326 audit(1753416384.147:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.0.1664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2849f8e9a9 code=0x7ffc0000
[  215.473215][   T33] audit: type=1326 audit(1753416384.147:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.0.1664" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2849f8e9a9 code=0x7ffc0000
[  215.487340][   T33] audit: type=1326 audit(1753416384.147:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.0.1664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2849f8e9a9 code=0x7ffc0000
[  215.496437][   T33] audit: type=1326 audit(1753416384.147:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.0.1664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2849f8e9a9 code=0x7ffc0000
[  215.506775][   T33] audit: type=1326 audit(1753416384.157:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.0.1664" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2849f8e9a9 code=0x7ffc0000
[  215.530370][   T33] audit: type=1326 audit(1753416384.157:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9996 comm="syz.0.1664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2849f8e9a9 code=0x7ffc0000
[  215.759368][T10013] mmap: syz.0.1670 (10013) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  216.703754][T10026] loop1: detected capacity change from 0 to 32768
[  216.733219][T10026] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  216.771219][T10026] XFS (loop1): Ending clean mount
[  216.828988][ T5829] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  216.990334][T10043] xt_CT: No such helper "pptp"
[  217.905475][T10067] loop1: detected capacity change from 0 to 1024
[  217.940826][T10067] syz.1.1687: attempt to access beyond end of device
[  217.940826][T10067] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  217.947683][T10067] Buffer I/O error on dev loop1, logical block 100663296, async page read
[  217.952071][T10067] hfsplus: unable to mark blocks free: error -5
[  217.954706][T10067] hfsplus: can't free extent
[  218.009251][   T47] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  218.163363][   T47] usb 1-1: Using ep0 maxpacket: 32
[  218.168484][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.172706][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.176285][   T47] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  218.180667][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.185145][   T47] usb 1-1: config 0 descriptor??
[  218.188597][   T47] hub 1-1:0.0: USB hub found
[  218.280714][T10071] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1688'.
[  218.650442][   T47] hub 1-1:0.0: config failed, hub has too many ports! (err -19)
[  218.673489][   T47] usbhid 1-1:0.0: can't add hid device: -71
[  218.675987][   T47] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  218.700035][   T47] usb 1-1: USB disconnect, device number 18
[  218.995759][T10086] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  219.027500][T10088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1696'.
[  219.120704][T10096] netlink: 'syz.1.1700': attribute type 1 has an invalid length.
[  219.124086][T10096] NCSI netlink: No device for ifindex 0
[  219.209852][T10105] loop1: detected capacity change from 0 to 1024
[  219.236458][T10105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.241330][T10105] ext4 filesystem being mounted at /593/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.282574][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.412502][T10121] loop1: detected capacity change from 0 to 128
[  219.779149][ T6550] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  219.929322][ T6550] usb 2-1: Using ep0 maxpacket: 8
[  219.935782][ T6550] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  219.942029][ T6550] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.945323][ T6550] usb 2-1: Product: syz
[  219.947130][ T6550] usb 2-1: Manufacturer: syz
[  219.949225][ T6550] usb 2-1: SerialNumber: syz
[  219.953760][ T6550] usb 2-1: config 0 descriptor??
[  220.368248][ T6550] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  220.380524][ T6550] gspca_sunplus: reg_w_riv err -71
[  220.382617][ T6550] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  220.392042][ T6550] usb 2-1: USB disconnect, device number 16
[  221.233848][T10175] loop1: detected capacity change from 0 to 256
[  221.398411][T10179] loop1: detected capacity change from 0 to 256
[  221.415646][T10179] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  223.039422][T10213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1751'.
[  224.215269][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'.
[  224.218252][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'.
[  224.221791][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'.
[  224.225542][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'.
[  224.228224][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'.
[  224.334861][T10252] loop1: detected capacity change from 0 to 8
[  224.359221][ T5884] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  224.407715][T10256] loop1: detected capacity change from 0 to 4096
[  224.418792][T10256] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  224.509762][ T5884] usb 1-1: Using ep0 maxpacket: 32
[  224.516168][ T5884] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  224.518915][ T5884] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  224.522129][ T5884] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  224.551777][ T5884] usb 1-1: config 1 has no interface number 0
[  224.553898][ T5884] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  224.557990][ T5884] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  224.571416][T10256] ntfs3(loop1): ino=1a, mi_enum_attr
[  224.573313][T10256] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  224.576580][ T5884] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  224.580135][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.596298][T10256] ntfs3(loop1): ino=1e, "file1" ntfs3_write_inode failed, -22.
[  224.597721][ T5884] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  224.682865][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1770'.
[  224.686195][T10260] netlink: 'syz.2.1770': attribute type 30 has an invalid length.
[  224.731363][T10260] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  224.735180][T10260] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  224.738605][T10260] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  224.742000][T10260] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  224.757172][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1770'.
[  224.760928][T10260] netlink: 'syz.2.1770': attribute type 30 has an invalid length.
[  224.984751][ T5884] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  224.999865][ T9032] ntfs3(loop1): ino=1e, ntfs3_write_inode failed, -22.
[  225.299416][T10270] loop1: detected capacity change from 0 to 4096
[  225.381835][T10274] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[  225.387717][T10274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1777'.
[  225.410270][   T47] usb 1-1: USB disconnect, device number 19
[  225.413477][   T47] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  225.490026][T10278] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1779'.
[  225.691653][T10292] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.775153][T10300] netlink: 'syz.2.1790': attribute type 1 has an invalid length.
[  225.777934][T10300] netlink: 'syz.2.1790': attribute type 2 has an invalid length.
[  227.293955][T10357] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  227.353238][T10361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1817'.
[  227.527126][T10377] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for 
[  227.596201][T10382] netlink: 'syz.2.1826': attribute type 4 has an invalid length.
[  227.640927][T10384] netlink: 'syz.0.1828': attribute type 3 has an invalid length.
[  228.109478][ T6247] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  228.172834][T10400] QAT: Device 7 not found
[  228.259837][ T6247] usb 1-1: Using ep0 maxpacket: 32
[  228.270538][ T6247] usb 1-1: New USB device found, idVendor=04cb, idProduct=013d, bcdDevice=a4.42
[  228.274109][ T6247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.282717][ T6247] usb 1-1: config 0 descriptor??
[  228.296888][ T6247] gspca_main: finepix-2.14.0 probing 04cb:013d
[  228.499514][   T10] usb 1-1: USB disconnect, device number 20
[  229.090009][T10439] overlay: ./file0 is not a directory
[  229.749843][ T5884] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  229.921375][ T5884] usb 1-1: Using ep0 maxpacket: 16
[  229.925707][ T5884] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  229.931309][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.935335][ T5884] usb 1-1: config 0 has no interface number 0
[  229.943647][ T5884] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  229.949833][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.953206][ T5884] usb 1-1: Product: syz
[  229.954957][ T5884] usb 1-1: Manufacturer: syz
[  229.956898][ T5884] usb 1-1: SerialNumber: syz
[  229.972768][ T5884] usb 1-1: config 0 descriptor??
[  229.980786][ T5884] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[  229.983405][ T5884] usb 1-1: No valid video chain found.
[  230.034633][T10458] 9pnet_fd: Insufficient options for proto=fd
[  230.077824][T10460] 9pnet_fd: Insufficient options for proto=fd
[  230.173340][T10464] overlayfs: failed to clone upperpath
[  230.190874][ T5879] usb 1-1: USB disconnect, device number 21
[  230.227841][T10466] fuse: Bad value for 'fd'
[  230.268024][T10468] x_tables: duplicate underflow at hook 3
[  230.874513][T10499] __nla_validate_parse: 1 callbacks suppressed
[  230.874528][T10499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1880'.
[  231.021700][T10506] xt_NFQUEUE: number of total queues is 0
[  231.086197][T10510] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.1885'.
[  231.138749][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'.
[  231.546784][T10530] loop1: detected capacity change from 0 to 32768
[  231.565825][T10530] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  231.584530][T10530] XFS (loop1): Ending clean mount
[  231.591897][T10530] XFS (loop1): Quotacheck needed: Please wait.
[  231.614344][T10530] XFS (loop1): Quotacheck: Done.
[  231.669606][ T5829] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  231.863422][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1897'.
[  231.866541][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1897'.
[  231.949381][T10546] netlink: 'syz.1.1899': attribute type 8 has an invalid length.
[  231.964012][T10546] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  232.126462][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1903'.
[  232.151541][T10556] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  232.174711][T10558] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.272732][T10562] loop1: detected capacity change from 0 to 4096
[  232.575890][T10572] loop1: detected capacity change from 0 to 32768
[  232.592275][T10572] JBD2: Ignoring recovery information on journal
[  232.625521][T10572] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  232.666804][ T5829] ocfs2: Unmounting device (7,1) on (node local)
[  233.474702][T10608] loop1: detected capacity change from 0 to 1024
[  233.478737][T10608] EXT4-fs: Ignoring removed orlov option
[  233.481328][T10608] EXT4-fs: Ignoring removed nomblk_io_submit option
[  233.503357][T10608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.554664][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.406537][T10690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1965'.
[  235.433246][T10694] loop1: detected capacity change from 0 to 512
[  235.446036][T10696] binfmt_misc: register: failed to install interpreter file ./file0
[  235.469180][T10694] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1967: bg 0: block 248: padding at end of block bitmap is not set
[  235.475564][T10694] __quota_error: 5 callbacks suppressed
[  235.475578][T10694] Quota error (device loop1): write_blk: dquota write failed
[  235.483438][T10694] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  235.487267][T10694] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1967: Failed to acquire dquot type 1
[  235.497357][T10694] EXT4-fs (loop1): 1 truncate cleaned up
[  235.511916][T10694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.517231][T10694] ext4 filesystem being mounted at /693/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.587862][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.609776][   T27] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5
[  235.615381][   T27] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u10:0: Failed to release dquot type 1
[  235.713515][T10710] loop1: detected capacity change from 0 to 128
[  235.721362][T10710] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  235.755220][ T5829] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  236.190258][ T5853] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  236.240692][T10729] loop1: detected capacity change from 0 to 40427
[  236.245232][T10729] F2FS-fs (loop1): Unrecognized mount option "00000000000000000003" or missing value
[  236.361087][ T5853] usb 1-1: Using ep0 maxpacket: 32
[  236.371187][ T5853] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  236.374290][ T5853] usb 1-1: config 0 has no interface number 0
[  236.382616][ T5853] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  236.386264][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.399223][ T5853] usb 1-1: Product: syz
[  236.400847][ T5853] usb 1-1: Manufacturer: syz
[  236.404390][ T5853] usb 1-1: SerialNumber: syz
[  236.423955][ T5853] usb 1-1: config 0 descriptor??
[  236.443779][ T5853] smsc95xx v2.0.0
[  236.662543][ T5853] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  236.666822][ T5853] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  236.711352][ T5853] usb 1-1: USB disconnect, device number 22
[  237.869178][   T33] audit: type=1107 audit(1753416406.357:104): pid=10735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  238.115585][T10749] netlink: 'syz.1.1990': attribute type 21 has an invalid length.
[  238.154157][T10753] @: renamed from bond_slave_0
[  238.232556][T10761] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.838028][T10777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2002'.
[  239.212514][T10785] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2005'.
[  239.306187][T10790] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2006'.
[  239.312397][T10787] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2006'.
[  239.318902][T10790] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2006'.
[  239.473971][T10797] bridge: RTM_NEWNEIGH with invalid ether address
[  239.528770][T10805] loop1: detected capacity change from 0 to 16
[  239.545044][T10805] erofs (device loop1): mounted with root inode @ nid 36.
[  239.553606][T10805] erofs (device loop1): readahead error at folio 2 @ nid 89
[  239.556063][T10805] erofs (device loop1): readahead error at folio 0 @ nid 89
[  239.564024][T10805] syz.1.2013: attempt to access beyond end of device
[  239.564024][T10805] loop1: rw=524288, sector=524296, nr_sectors = 8 limit=16
[  239.569452][T10805] syz.1.2013: attempt to access beyond end of device
[  239.569452][T10805] loop1: rw=0, sector=524296, nr_sectors = 8 limit=16
[  239.574239][T10805] erofs (device loop1): read error -5 @ 0 of nid 89
[  239.582037][   T33] audit: type=1800 audit(1753416408.337:105): pid=10805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2013" name="file2" dev="loop1" ino=89 res=0 errno=0
[  239.993653][T10825] loop1: detected capacity change from 0 to 32768
[  240.084719][T10825] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  240.084743][T10825]   allowing incompatible features above 0.0: (unknown version)
[  240.084752][T10825]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  240.101976][T10825] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  240.105328][T10825] bcachefs (loop1): initializing new filesystem
[  240.116937][T10825] bcachefs (loop1): going read-write
[  240.126980][T10825] bcachefs (loop1): marking superblocks
[  240.136510][T10825] bcachefs (loop1): initializing freespace
[  240.143064][T10825] bcachefs (loop1): done initializing freespace
[  240.147689][T10825] bcachefs (loop1): reading snapshots table
[  240.151946][T10825] bcachefs (loop1): reading snapshots done
[  240.179237][T10825] bcachefs (loop1): done starting filesystem
[  240.557387][   T33] audit: type=1326 audit(1753416409.317:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.0.2017" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2849f8e9a9 code=0x7fc00000
[  240.741845][ T5829] bcachefs (loop1): shutting down
[  240.743882][ T5829] bcachefs (loop1): going read-only
[  240.745903][ T5829] bcachefs (loop1): finished waiting for writes to stop
[  240.752912][ T5829] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  240.781598][ T5829] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  240.789888][ T5829] bcachefs (loop1): clean shutdown complete, journal seq 4
[  240.801387][ T5829] bcachefs (loop1): marking filesystem clean
[  240.832815][ T5829] bcachefs (loop1): shutdown complete
[  242.655091][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2047'.
[  242.666367][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2047'.
[  242.674785][T10890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2047'.
[  243.129379][ T5853] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  243.304743][ T5853] usb 2-1: config index 0 descriptor too short (expected 61256, got 72)
[  243.308108][ T5853] usb 2-1: config 1 has an invalid interface number: 0 but max is -1
[  243.313044][ T5853] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.317228][ T5853] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 0
[  243.321129][ T5853] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  243.327035][ T5853] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  243.332741][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  243.336336][ T5853] usb 2-1: SerialNumber: syz
[  243.343106][ T5853] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  243.346455][ T5853] cdc_acm 2-1:1.0: This needs exactly 3 endpoints
[  243.350899][ T5853] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22
[  243.545055][   T33] audit: type=1107 audit(2000000001.490:107): pid=10917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  243.547942][ T5853] usb 2-1: USB disconnect, device number 17
[  244.505735][T10943] loop1: detected capacity change from 0 to 16
[  244.508969][T10943] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  244.709435][ T6550] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  244.781667][T10955] loop1: detected capacity change from 0 to 512
[  244.784169][T10955] EXT4-fs: Ignoring removed nomblk_io_submit option
[  244.786279][T10955] EXT4-fs: Invalid want_extra_isize 1
[  244.830696][T10955] loop1: detected capacity change from 0 to 8192
[  244.864502][ T6550] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  244.868453][ T6550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.874408][ T6550] usb 1-1: config 0 descriptor??
[  244.878765][ T6550] cp210x 1-1:0.0: cp210x converter detected
[  244.879866][T10955]  loop1: p2 < > p4
[  244.884018][T10955] loop1: p4 start 2164260864 is beyond EOD, truncated
[  244.886326][    C0] vcan0: j1939_tp_rxtimer: 0xffff888030015000: rx timeout, send abort
[  244.892008][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030015000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  245.300190][ T6550] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  245.419838][ T6550] usb 1-1: cp210x converter now attached to ttyUSB0
[  245.523435][ T6550] usb 1-1: USB disconnect, device number 23
[  245.535301][ T6550] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  245.544866][ T6550] cp210x 1-1:0.0: device disconnected
[  245.633119][T10969] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0
[  246.346635][T10994] syz.0.2095 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  246.729238][ T5853] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  246.892439][ T5853] usb 1-1: config 0 has an invalid interface number: 98 but max is 0
[  246.896002][ T5853] usb 1-1: config 0 has no interface number 0
[  246.898504][ T5853] usb 1-1: config 0 interface 98 has no altsetting 0
[  246.903869][ T5853] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24
[  246.907444][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.912884][ T5853] usb 1-1: Product: syz
[  246.914531][ T5853] usb 1-1: Manufacturer: syz
[  246.916343][ T5853] usb 1-1: SerialNumber: syz
[  246.920889][ T5853] usb 1-1: config 0 descriptor??
[  247.130673][ T5853] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II
[  248.022008][ T5853] usb 1-1: reset high-speed USB device number 24 using dummy_hcd
[  248.037066][T11025] loop1: detected capacity change from 0 to 40427
[  248.041151][T11025] F2FS-fs (loop1): build fault injection type: 0x7
[  248.044676][T11025] F2FS-fs (loop1): invalid crc value
[  248.089897][T11025] F2FS-fs (loop1): Start checkpoint disabled!
[  248.098283][T11025] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  248.127144][T11025] syz.1.2110: attempt to access beyond end of device
[  248.127144][T11025] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  248.160985][  T415] kworker/u10:4: attempt to access beyond end of device
[  248.160985][  T415] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  248.166348][  T415] CPU: 1 UID: 0 PID: 415 Comm: kworker/u10:4 Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  248.166367][  T415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  248.166375][  T415] Workqueue: writeback wb_workfn (flush-7:1)
[  248.166395][  T415] Call Trace:
[  248.166400][  T415]  <TASK>
[  248.166406][  T415]  dump_stack_lvl+0x189/0x250
[  248.166424][  T415]  ? __pfx_dump_stack_lvl+0x10/0x10
[  248.166434][  T415]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  248.166446][  T415]  ? __pfx_queue_work_on+0x10/0x10
[  248.166459][  T415]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  248.166469][  T415]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  248.166481][  T415]  ? f2fs_hw_is_readonly+0x39b/0x470
[  248.166496][  T415]  f2fs_handle_critical_error+0x37c/0x540
[  248.166512][  T415]  f2fs_write_end_io+0x495/0x810
[  248.166523][  T415]  ? blkg_put+0x22/0x240
[  248.166550][  T415]  __submit_merged_bio+0x27a/0x6a0
[  248.166576][  T415]  __submit_merged_write_cond+0x255/0x530
[  248.166599][  T415]  f2fs_write_data_pages+0x261d/0x3000
[  248.166638][  T415]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  248.166661][  T415]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  248.166702][  T415]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  248.166723][  T415]  ? trace_f2fs_writepages+0x7f/0x200
[  248.166735][  T415]  ? f2fs_write_node_pages+0x478/0x6e0
[  248.166755][  T415]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  248.166782][  T415]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  248.166795][  T415]  do_writepages+0x32e/0x550
[  248.166812][  T415]  ? reacquire_held_locks+0x127/0x1d0
[  248.166856][  T415]  ? writeback_sb_inodes+0x372/0x1000
[  248.166877][  T415]  __writeback_single_inode+0x145/0xff0
[  248.166890][  T415]  ? do_raw_spin_unlock+0x4d/0x240
[  248.166907][  T415]  writeback_sb_inodes+0x6b5/0x1000
[  248.166940][  T415]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  248.166986][  T415]  ? rcu_is_watching+0x15/0xb0
[  248.167005][  T415]  wb_writeback+0x43b/0xaf0
[  248.167025][  T415]  ? queue_io+0x321/0x590
[  248.167040][  T415]  ? __pfx_wb_writeback+0x10/0x10
[  248.167060][  T415]  ? _raw_spin_unlock_irq+0x23/0x50
[  248.167075][  T415]  wb_workfn+0x409/0xef0
[  248.167098][  T415]  ? __pfx_wb_workfn+0x10/0x10
[  248.167114][  T415]  ? __lock_acquire+0xab9/0xd20
[  248.167134][  T415]  ? process_scheduled_works+0x9ef/0x17b0
[  248.167150][  T415]  ? _raw_spin_unlock_irq+0x23/0x50
[  248.167160][  T415]  ? process_scheduled_works+0x9ef/0x17b0
[  248.167170][  T415]  ? process_scheduled_works+0x9ef/0x17b0
[  248.167183][  T415]  process_scheduled_works+0xae1/0x17b0
[  248.167219][  T415]  ? __pfx_process_scheduled_works+0x10/0x10
[  248.167248][  T415]  worker_thread+0x8a0/0xda0
[  248.167262][  T415]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  248.167280][  T415]  ? __kthread_parkme+0x7b/0x200
[  248.167301][  T415]  kthread+0x711/0x8a0
[  248.167317][  T415]  ? __pfx_worker_thread+0x10/0x10
[  248.167328][  T415]  ? __pfx_kthread+0x10/0x10
[  248.167343][  T415]  ? _raw_spin_unlock_irq+0x23/0x50
[  248.167353][  T415]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.167363][  T415]  ? __pfx_kthread+0x10/0x10
[  248.167376][  T415]  ret_from_fork+0x3fc/0x770
[  248.167390][  T415]  ? __pfx_ret_from_fork+0x10/0x10
[  248.167406][  T415]  ? __switch_to_asm+0x39/0x70
[  248.167418][  T415]  ? __switch_to_asm+0x33/0x70
[  248.167429][  T415]  ? __pfx_kthread+0x10/0x10
[  248.167444][  T415]  ret_from_fork_asm+0x1a/0x30
[  248.167470][  T415]  </TASK>
[  248.167476][  T415] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  248.484579][ T5853] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware
[  248.488084][ T5853] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[  248.507021][T11037] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.513315][   T10] usb 1-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[  248.516994][   T10] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[  248.657549][T11045] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  248.678139][T11045] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  248.688327][ T6247] usb 1-1: USB disconnect, device number 24
[  248.851597][T11054] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  250.122278][T11070] macsec2: entered promiscuous mode
[  250.124443][T11070] macvlan1: entered promiscuous mode
[  250.129789][T11070] macvlan1: left promiscuous mode
[  250.248469][T11066] loop1: detected capacity change from 0 to 32768
[  250.252047][T11066] XFS: ikeep mount option is deprecated.
[  250.311026][T11066] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  250.351474][T11066] XFS (loop1): Ending clean mount
[  250.359449][T11066] XFS (loop1): Quotacheck needed: Please wait.
[  250.371349][  T138] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  250.376135][  T138] XFS (loop1): Unmount and run xfs_repair
[  250.378438][  T138] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  250.382132][  T138] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  250.385542][  T138] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  250.390190][  T138] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  250.394036][  T138] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  250.398399][  T138] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  250.402511][  T138] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  250.406637][  T138] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  250.410600][  T138] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  250.419552][  T138] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x14 len 4 error 74
[  250.445463][  T138] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  250.451448][  T138] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  250.459307][T11066] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  250.464735][T11066] XFS (loop1): Error -5 reserving per-AG metadata reserve pool.
[  250.881172][T11117] loop1: detected capacity change from 0 to 512
[  250.913129][T11117] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.2150: dx entry: limit 0 != root limit 125
[  250.918019][T11117] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2150: Corrupt directory, running e2fsck is recommended
[  250.931526][T11117] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  250.936180][T11117] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.2150: corrupted in-inode xattr: invalid ea_ino
[  250.954058][T11117] EXT4-fs (loop1): Remounting filesystem read-only
[  250.972460][T11117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.997587][T11117] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.2150: dx entry: limit 0 != root limit 125
[  251.011570][T11117] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2150: Corrupt directory, running e2fsck is recommended
[  251.063922][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.624963][T11136] loop1: detected capacity change from 0 to 32768
[  251.634777][T11136] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2156 (11136)
[  251.657661][T11136] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  251.671745][T11136] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[  251.681857][T11136] BTRFS info (device loop1): using free-space-tree
[  252.340858][T11136] BTRFS info (device loop1): rebuilding free space tree
[  252.815518][   T33] audit: type=1800 audit(2000000010.770:108): pid=11136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2156" name="bus" dev="loop1" ino=263 res=0 errno=0
[  252.908088][T11136] BTRFS info (device loop1 state M): max_inline set to 0
[  253.031392][ T5829] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  253.316031][T11212] netlink: 'syz.1.2187': attribute type 25 has an invalid length.
[  253.323869][T11212] netlink: 'syz.1.2187': attribute type 8 has an invalid length.
[  253.326976][T11212] netlink: 'syz.1.2187': attribute type 1 has an invalid length.
[  253.334299][T11212] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2187'.
[  253.458540][ T5879] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  253.484200][ T5879] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  254.336523][T11232] loop1: detected capacity change from 0 to 32768
[  254.343806][T11232] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  254.365442][T11232] XFS (loop1): Ending clean mount
[  254.409060][ T5829] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  254.540290][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'.
[  254.708079][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'.
[  254.764407][T11266] loop1: detected capacity change from 0 to 4096
[  254.776031][T11266] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  254.788785][T11266] ntfs3(loop1): Failed to load $Extend (-22).
[  254.791406][T11266] ntfs3(loop1): Failed to initialize $Extend.
[  254.837439][T11270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2209'.
[  254.928587][ T5879] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  255.198238][ T5879] usb 1-1: Using ep0 maxpacket: 16
[  255.222293][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.233574][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.238374][ T5879] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  255.242672][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.341577][ T5879] usb 1-1: config 0 descriptor??
[  255.497359][T11281] loop1: detected capacity change from 0 to 32768
[  255.501586][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.504262][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  255.524396][T11281] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  255.555544][T11281] XFS (loop1): Ending clean mount
[  255.562859][T11281] XFS (loop1): Quotacheck needed: Please wait.
[  255.609859][T11281] XFS (loop1): Quotacheck: Done.
[  255.673386][ T5829] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  255.929660][ T5879] corsair 0003:1B1C:1B02.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0
[  256.166491][T11294] loop1: detected capacity change from 0 to 40427
[  256.170123][T11294] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  256.173035][T11294] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  256.177238][T11294] F2FS-fs (loop1): invalid crc value
[  256.217711][ T1277] usb 1-1: USB disconnect, device number 25
[  256.247327][T11294] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  256.252442][T11294] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  256.282013][   T33] audit: type=1800 audit(2000000014.245:109): pid=11294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2216" name="file1" dev="loop1" ino=10 res=0 errno=0
[  256.294109][T11294] syz.1.2216: attempt to access beyond end of device
[  256.294109][T11294] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427
[  256.931869][T11325] ieee802154 phy0 wpan0: encryption failed: -90
[  257.027503][T11333] loop1: detected capacity change from 0 to 16
[  257.030624][T11333] erofs (device loop1): mounted with root inode @ nid 36.
[  257.086022][ T5829] syz-executor: attempt to access beyond end of device
[  257.086022][ T5829] loop1: rw=0, sector=103079215096, nr_sectors = 8 limit=16
[  257.097998][ T5829] erofs (device loop1): failed to readdir of logical block 0 of nid 46
[  257.111542][ T5829] erofs (device loop1): bogus i_mode (0) @ nid 281474976710655
[  257.119669][ T5829] erofs (device loop1): bogus i_mode (0) @ nid 281474976710655
[  257.258875][ T9868] syz_tun (unregistering): left promiscuous mode
[  257.454087][ T5859] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.556960][ T5859] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.603594][ T5859] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.681069][ T5859] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.027984][T11360] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.228388][ T5859] bridge_slave_1: left allmulticast mode
[  258.234101][ T5859] bridge_slave_1: left promiscuous mode
[  258.236719][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.243190][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  258.244550][ T5859] bridge_slave_0: left promiscuous mode
[  258.250432][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  258.250492][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.257870][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  258.262078][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  258.265712][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  258.965747][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  258.973428][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  258.978521][ T5859] bond0 (unregistering): Released all slaves
[  259.069699][ T5859] _Z`Ԁ@: left promiscuous mode
[  259.306844][T11363] chnl_net:caif_netlink_parms(): no params data found
[  259.546344][T11363] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.549140][T11363] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.556218][T11363] bridge_slave_0: entered allmulticast mode
[  259.559610][T11363] bridge_slave_0: entered promiscuous mode
[  259.605490][ T5859] batadv_slave_0: left promiscuous mode
[  259.625413][ T5859] hsr_slave_0: left promiscuous mode
[  259.630916][ T5859] hsr_slave_1: left promiscuous mode
[  259.641347][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.644332][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.660391][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.665575][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  259.710840][ T5859] veth1_macvtap: left promiscuous mode
[  259.713130][ T5859] veth0_macvtap: left promiscuous mode
[  259.715459][ T5859] veth1_vlan: left promiscuous mode
[  259.717854][ T5859] veth0_vlan: left promiscuous mode
[  260.295591][ T5834] Bluetooth: hci0: command tx timeout
[  260.545748][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  260.555514][ T5853] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  260.599139][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  260.705644][ T5853] usb 1-1: Using ep0 maxpacket: 8
[  260.711753][ T5853] usb 1-1: unable to get BOS descriptor or descriptor too short
[  260.716428][ T5853] usb 1-1: config 2 has an invalid interface number: 179 but max is 0
[  260.719647][ T5853] usb 1-1: config 2 has no interface number 0
[  260.722151][ T5853] usb 1-1: config 2 interface 179 has no altsetting 0
[  260.730525][ T5853] usb 1-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b5.a8
[  260.734127][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.744266][ T5853] usb 1-1: Product: syz
[  260.746114][ T5853] usb 1-1: Manufacturer: syz
[  260.748242][ T5853] usb 1-1: SerialNumber: syz
[  260.983248][ T5853] cypress_cy7c63 1-1:2.179: Cypress CY7C63xxx device now attached
[  260.989096][ T5853] usb 1-1: USB disconnect, device number 26
[  260.992758][ T5853] cypress_cy7c63 1-1:2.179: Cypress CY7C63xxx device now disconnected
[  261.309281][T11363] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.312253][T11363] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.316816][T11363] bridge_slave_1: entered allmulticast mode
[  261.320494][T11363] bridge_slave_1: entered promiscuous mode
[  261.367043][T11363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.383127][T11363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.437491][T11363] team0: Port device team_slave_0 added
[  261.462267][T11363] team0: Port device team_slave_1 added
[  261.508805][T11363] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.511601][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.528702][T11363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.542063][T11363] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.548908][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.562914][T11363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.598923][T11447] cgroup: Unknown subsys name '@﬽4*oңhoU'
[  261.668567][T11363] hsr_slave_0: entered promiscuous mode
[  261.671835][T11363] hsr_slave_1: entered promiscuous mode
[  261.679566][T11363] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  261.682646][T11363] Cannot create hsr debugfs directory
[  261.713609][ T5859] IPVS: stop unused estimator thread 0...
[  262.161798][T11363] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  262.192762][T11363] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  262.207171][T11363] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  262.220230][T11363] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  262.375096][   T54] Bluetooth: hci0: command tx timeout
[  262.445587][T11363] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.475082][T11363] 8021q: adding VLAN 0 to HW filter on device team0
[  262.496720][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.499208][ T9028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.520247][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.523493][ T9028] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.915401][T11363] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.052213][T11363] veth0_vlan: entered promiscuous mode
[  263.073122][T11363] veth1_vlan: entered promiscuous mode
[  263.148749][T11363] veth0_macvtap: entered promiscuous mode
[  263.166597][T11363] veth1_macvtap: entered promiscuous mode
[  263.214781][T11363] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.251300][T11363] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.267117][T11363] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.270475][T11363] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.273874][T11363] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.304094][T11363] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.438486][  T415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.441623][  T415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  263.487702][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  263.490832][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.613153][   T54] Bluetooth: hci0: command 0x040f tx timeout
[  265.129008][   T33] audit: type=1107 audit(2000000023.089:110): pid=11496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  265.220897][T11507] xt_TPROXY: Can be used only with -p tcp or -p udp
[  265.576903][T11526] Bluetooth: MGMT ver 1.23
[  265.652328][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2315'.
[  265.657050][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2315'.
[  266.136236][T11556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2326'.
[  266.143865][T11556] syz_tun: entered allmulticast mode
[  266.148062][T11555] syz_tun: left allmulticast mode
[  266.453725][ T5879] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  266.614085][ T5879] usb 4-1: Using ep0 maxpacket: 16
[  266.618924][ T5879] usb 4-1: config 0 has an invalid interface number: 68 but max is 0
[  266.623899][ T5879] usb 4-1: config 0 has no interface number 0
[  266.626655][ T5879] usb 4-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  266.634440][ T5879] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[  266.638328][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.642028][ T5879] usb 4-1: Product: syz
[  266.647617][ T5879] usb 4-1: Manufacturer: syz
[  266.649637][ T5879] usb 4-1: SerialNumber: syz
[  266.654902][ T5879] usb 4-1: config 0 descriptor??
[  266.658040][T11559] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  266.681599][ T5879] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  266.702549][ T5834] Bluetooth: hci0: command 0x040f tx timeout
[  266.875141][ T5659] usb 4-1: Failed to submit usb control message: -71
[  266.878267][ T5659] usb 4-1: unable to send the bmi data to the device: -71
[  266.881021][ T5659] usb 4-1: unable to get target info from device
[  266.885613][ T5879] usb 4-1: USB disconnect, device number 2
[  266.892369][ T5659] usb 4-1: could not get target info (-71)
[  266.895436][ T5659] usb 4-1: could not probe fw (-71)
[  267.535596][T11603] loop3: detected capacity change from 0 to 4096
[  267.563341][T11610] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  267.617099][T11603] NILFS error (device loop3): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[  267.649024][T11603] Remounting filesystem read-only
[  267.781573][T11622] overlayfs: empty lowerdir
[  267.854635][T11628] loop3: detected capacity change from 0 to 512
[  267.869126][T11628] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  267.873326][T11628] EXT4-fs (loop3): orphan cleanup on readonly fs
[  267.877237][T11628] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present
[  267.886717][T11628] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  267.890328][T11628] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2358: Failed to acquire dquot type 1
[  267.900334][T11628] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2358: bg 0: block 40: padding at end of block bitmap is not set
[  267.907766][T11628] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  267.911242][T11628] EXT4-fs (loop3): 1 truncate cleaned up
[  267.919117][T11628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  267.944236][T11628] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  267.971873][T11363] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.156190][T11641] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  268.471554][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  268.681933][   T33] audit: type=1804 audit(2000000026.631:111): pid=11653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2368" name="/newroot/701/file1" dev="fuse" ino=1 res=1 errno=0
[  268.710265][   T33] audit: type=1800 audit(2000000026.631:112): pid=11653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2368" name="/" dev="fuse" ino=1 res=0 errno=0
[  268.773486][ T5834] Bluetooth: hci0: command 0x040f tx timeout
[  268.811374][    T9] usb 4-1: Using ep0 maxpacket: 8
[  268.816938][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b910, bcdDevice=18.c2
[  268.819762][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.823602][    T9] usb 4-1: Product: syz
[  268.824971][    T9] usb 4-1: Manufacturer: syz
[  268.826828][    T9] usb 4-1: SerialNumber: syz
[  268.831934][    T9] usb 4-1: config 0 descriptor??
[  268.836850][    T9] smsusb:smsusb_probe: board id=8, interface number 1
[  268.853814][    T9] smsusb:smsusb_probe: board id=8, interface number 0
[  269.051308][ T6247] usb 4-1: USB disconnect, device number 3
[  270.453996][    T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  270.602758][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  270.605625][    T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00
[  270.609276][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.619719][    T9] usb 1-1: config 0 descriptor??
[  270.814586][T11713] loop3: detected capacity change from 0 to 40427
[  270.820563][T11713] F2FS-fs (loop3): build fault injection rate: 690
[  270.823612][T11713] F2FS-fs (loop3): Image doesn't support compression
[  270.826871][T11713] F2FS-fs (loop3): Image doesn't support compression
[  270.842383][T11713] F2FS-fs (loop3): invalid crc value
[  270.983090][T11713] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  271.037661][T11363] syz-executor: attempt to access beyond end of device
[  271.037661][T11363] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  271.052035][    T9] corsair-psu 0003:1B1C:1C03.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:1c03] on usb-dummy_hcd.0-1/input0
[  271.056860][T11363] CPU: 0 UID: 0 PID: 11363 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  271.056876][T11363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.056882][T11363] Call Trace:
[  271.056886][T11363]  <TASK>
[  271.056890][T11363]  dump_stack_lvl+0x189/0x250
[  271.056908][T11363]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.056916][T11363]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  271.056925][T11363]  ? __pfx_queue_work_on+0x10/0x10
[  271.056938][T11363]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  271.056945][T11363]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  271.056953][T11363]  ? f2fs_hw_is_readonly+0x39b/0x470
[  271.056964][T11363]  f2fs_handle_critical_error+0x37c/0x540
[  271.056975][T11363]  f2fs_write_end_io+0x495/0x810
[  271.056985][T11363]  ? blkg_put+0x22/0x240
[  271.057004][T11363]  __submit_merged_bio+0x27a/0x6a0
[  271.057015][T11363]  __submit_merged_write_cond+0x255/0x530
[  271.057031][T11363]  f2fs_write_data_pages+0x261d/0x3000
[  271.057056][T11363]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  271.057098][T11363]  ? folios_put_refs+0x559/0x640
[  271.057115][T11363]  ? __lock_acquire+0xab9/0xd20
[  271.057128][T11363]  ? do_raw_spin_lock+0x121/0x290
[  271.057144][T11363]  ? do_raw_spin_unlock+0x4d/0x240
[  271.057155][T11363]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  271.057164][T11363]  do_writepages+0x32e/0x550
[  271.057180][T11363]  ? do_raw_spin_unlock+0x4d/0x240
[  271.057224][T11363]  filemap_fdatawrite+0x191/0x230
[  271.057238][T11363]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  271.057270][T11363]  ? do_raw_spin_unlock+0x4d/0x240
[  271.057283][T11363]  f2fs_sync_dirty_inodes+0x31f/0x830
[  271.057300][T11363]  f2fs_write_checkpoint+0x94a/0x1de0
[  271.057320][T11363]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  271.057350][T11363]  ? kill_f2fs_super+0x298/0x6c0
[  271.057363][T11363]  kill_f2fs_super+0x2c3/0x6c0
[  271.057375][T11363]  ? __pfx_kill_f2fs_super+0x10/0x10
[  271.057383][T11363]  ? radix_tree_delete_item+0x2b6/0x400
[  271.057396][T11363]  ? shrinker_free+0x2ce/0x3e0
[  271.057406][T11363]  deactivate_locked_super+0xbc/0x130
[  271.057417][T11363]  cleanup_mnt+0x425/0x4c0
[  271.057428][T11363]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.057438][T11363]  task_work_run+0x1d4/0x260
[  271.057452][T11363]  ? __pfx_task_work_run+0x10/0x10
[  271.057462][T11363]  ? __x64_sys_umount+0x122/0x160
[  271.057475][T11363]  ? exit_to_user_mode_loop+0x40/0x110
[  271.057487][T11363]  exit_to_user_mode_loop+0xec/0x110
[  271.057495][T11363]  do_syscall_64+0x2bd/0x3b0
[  271.057504][T11363]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.057511][T11363]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.057519][T11363]  ? exc_page_fault+0x9f/0xf0
[  271.057528][T11363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.057536][T11363] RIP: 0033:0x7f24c5f8fcd7
[  271.057546][T11363] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  271.057553][T11363] RSP: 002b:00007ffd9d98f738 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  271.057564][T11363] RAX: 0000000000000000 RBX: 00007f24c6010b55 RCX: 00007f24c5f8fcd7
[  271.057569][T11363] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9d98f7f0
[  271.057574][T11363] RBP: 00007ffd9d98f7f0 R08: 0000000000000000 R09: 0000000000000000
[  271.057579][T11363] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd9d990880
[  271.057584][T11363] R13: 00007f24c6010b55 R14: 0000000000042254 R15: 00007ffd9d9908c0
[  271.057597][T11363]  </TASK>
[  271.057600][T11363] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  271.136937][T11737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2405'.
[  271.248141][T11739] netlink: 'syz.2.2406': attribute type 29 has an invalid length.
[  271.253568][T11739] netlink: 'syz.2.2406': attribute type 29 has an invalid length.
[  271.257653][T11739] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2406'.
[  271.262307][T11739] unsupported nla_type 6145
[  271.656357][    T9] corsair-psu 0003:1B1C:1C03.0005: unable to initialize device (-71)
[  271.663758][    T9] corsair-psu 0003:1B1C:1C03.0005: probe with driver corsair-psu failed with error -71
[  271.681364][    T9] usb 1-1: USB disconnect, device number 27
[  272.449641][ T5853] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  272.599434][ T5853] usb 1-1: Using ep0 maxpacket: 8
[  272.603614][ T5853] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  272.607208][ T5853] usb 1-1: config 179 has no interface number 0
[  272.612120][ T5853] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  272.616531][ T5853] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  272.621352][ T5853] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  272.625933][ T5853] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  272.633202][ T5853] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  272.638548][ T5853] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  272.642767][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.661474][T11773] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  272.932712][ T5853] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input11
[  273.092523][ T6550] usb 1-1: USB disconnect, device number 28
[  273.092596][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  273.098978][    C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[  273.155959][T11785] loop3: detected capacity change from 0 to 256
[  273.329193][T11793] netlink: 'syz.2.2430': attribute type 3 has an invalid length.
[  273.444482][T11801] bridge0: entered promiscuous mode
[  273.447451][T11801] macvlan2: entered promiscuous mode
[  273.516701][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2436'.
[  273.530303][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2436'.
[  273.626237][T11813] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2440'.
[  273.629988][T11813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  273.729937][T11819] pim6reg: entered allmulticast mode
[  273.735481][T11819] pim6reg: left allmulticast mode
[  273.998815][ T6247] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  274.158663][ T6247] usb 1-1: Using ep0 maxpacket: 32
[  274.163048][ T6247] usb 1-1: config 0 has no interfaces?
[  274.167936][ T6247] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  274.173818][ T6247] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  274.176429][ T6247] usb 1-1: Product: syz
[  274.177810][ T6247] usb 1-1: Manufacturer: syz
[  274.179633][ T6247] usb 1-1: SerialNumber: syz
[  274.182930][ T6247] usb 1-1: config 0 descriptor??
[  274.388086][T11823] binder: 11822:11823 ioctl c0306201 200000000640 returned -22
[  274.394483][ T5853] usb 1-1: USB disconnect, device number 29
[  274.735215][T11844] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.737667][T11844] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.837503][T11844] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.849029][T11844] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.977988][T11844] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.981639][T11844] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.985219][T11844] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.989455][T11844] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.068212][   T33] audit: type=1800 audit(2000000033.024:113): pid=11851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2456" name="file2" dev="tmpfs" ino=3698 res=0 errno=0
[  275.126526][T11857] loop3: detected capacity change from 0 to 1024
[  275.173247][T11857] hfsplus: request for non-existent node 128 in B*Tree
[  275.176351][T11857] hfsplus: request for non-existent node 128 in B*Tree
[  275.378094][ T6550] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  275.430364][T11873] loop3: detected capacity change from 0 to 4096
[  275.433643][T11873] ntfs3(loop3): Unsupported bytes per MFT record 8192.
[  275.435931][T11873] ntfs3(loop3): try to read out of volume at offset 0x1ffe00
[  275.533324][ T6550] usb 1-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b
[  275.536576][ T6550] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.539647][ T6550] usb 1-1: Product: syz
[  275.541221][ T6550] usb 1-1: Manufacturer: syz
[  275.542702][ T6550] usb 1-1: SerialNumber: syz
[  276.061530][ T6550] gspca_main: pac207-2.14.0 probing 093a:2476
[  276.065303][T11881] netlink: 'syz.2.2471': attribute type 3 has an invalid length.
[  276.067116][ T6550] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[  276.075073][ T6550] usb 1-1: USB disconnect, device number 30
[  276.075251][T11881] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2471'.
[  276.124090][T11883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2472'.
[  276.129042][T11883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2472'.
[  276.675869][T11895] loop3: detected capacity change from 0 to 32768
[  276.688674][T11895] (syz.3.2478,11895,0):ocfs2_journal_init:961 ERROR: Journal file size (0) is too small!
[  276.691702][T11895] (syz.3.2478,11895,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  276.697561][T11895] (syz.3.2478,11895,0):ocfs2_check_volume:2432 ERROR: status = -22
[  276.700039][T11895] (syz.3.2478,11895,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  276.712508][T11895] (syz.3.2478,11895,0):ocfs2_fill_super:1177 ERROR: status = -22
[  276.851505][T11916] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  277.426964][ T6247] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  277.578394][ T6247] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  277.580858][ T6247] usb 1-1: config 0 has no interface number 0
[  277.582794][ T6247] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  277.585842][ T6247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.590372][ T6247] usb 1-1: config 0 descriptor??
[  277.594198][ T6247] usb 1-1: selecting invalid altsetting 1
[  277.598396][ T6247] dvb_ttusb_budget: ttusb_init_controller: error
[  277.600239][ T6247] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  277.637220][ T6247] DVB: Unable to find symbol cx22700_attach()
[  277.664834][ T6247] DVB: Unable to find symbol tda10046_attach()
[  277.667768][ T6247] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  277.820212][ T5853] usb 1-1: USB disconnect, device number 31
[  278.034627][T11938] ceph: No mds server is up or the cluster is laggy
[  278.300592][T11954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2502'.
[  278.737563][ T5879] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  278.888104][ T5879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  278.892341][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  278.899670][ T5879] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a
[  278.903436][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.906928][ T5879] usb 1-1: Product: syz
[  278.908721][ T5879] usb 1-1: Manufacturer: syz
[  278.910581][ T5879] usb 1-1: SerialNumber: syz
[  278.914981][ T5879] usb 1-1: config 0 descriptor??
[  279.122728][ T5879] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  279.125126][ T5879] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[  279.129813][ T5879] usb 1-1: USB disconnect, device number 32
[  279.402537][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2519'.
[  279.693123][T12011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2527'.
[  279.697005][T12011] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2527'.
[  280.005702][ T5879] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  280.155735][ T5879] usb 1-1: Using ep0 maxpacket: 8
[  280.160831][ T5879] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  280.164092][ T5879] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  280.167534][ T5879] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  280.171457][ T5879] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  280.176903][ T5879] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  280.181334][ T5879] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  280.185009][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.404722][ T5879] usb 1-1: GET_CAPABILITIES returned 0
[  280.409017][ T5879] usbtmc 1-1:16.0: can't read capabilities
[  280.449013][T12017] loop3: detected capacity change from 0 to 2048
[  280.468401][T12017] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  280.620020][ T6550] usb 1-1: USB disconnect, device number 33
[  281.169547][T12046] netlink: 'syz.3.2538': attribute type 21 has an invalid length.
[  281.172696][T12046] netlink: 'syz.3.2538': attribute type 15 has an invalid length.
[  281.175936][T12046] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2538'.
[  281.179566][T12046] IPv6: NLM_F_CREATE should be specified when creating new route
[  281.183266][T12046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  281.186290][T12046] IPv6: NLM_F_CREATE should be set when creating new route
[  281.189319][T12046] IPv6: NLM_F_CREATE should be set when creating new route
[  281.192135][T12046] IPv6: NLM_F_CREATE should be set when creating new route
[  282.192668][T12062] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2547'.
[  282.659273][T12086] veth1_macvtap: left promiscuous mode
[  282.661636][T12086] macsec0: entered promiscuous mode
[  282.670541][T12086] macsec0: entered allmulticast mode
[  282.684970][T12086] veth1_macvtap: entered promiscuous mode
[  282.688697][T12086] veth1_macvtap: entered allmulticast mode
[  282.691835][T12086] macsec0: left promiscuous mode
[  282.701081][T12086] macsec0: left allmulticast mode
[  282.705219][T12086] veth1_macvtap: left allmulticast mode
[  282.716982][T12086] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  283.170460][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2561'.
[  284.243008][T12115] netlink: 'syz.2.2571': attribute type 30 has an invalid length.
[  285.468559][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2576'.
[  287.243420][    T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  287.416950][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  287.422172][    T9] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  287.433761][    T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  287.436946][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.439460][    T9] usb 1-1: Product: syz
[  287.440743][    T9] usb 1-1: Manufacturer: syz
[  287.451286][    T9] usb 1-1: SerialNumber: syz
[  287.690945][T12201] loop3: detected capacity change from 0 to 128
[  287.701443][T12201] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  287.705951][T12205] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  287.706654][T12201] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.750225][T12201] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 37 bytes, need 64+ bytes)
[  287.799038][T11363] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  288.571448][    T9] usb 1-1: reset high-speed USB device number 34 using dummy_hcd
[  288.770692][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  288.776504][    T9] usb 1-1: device firmware changed
[  288.794223][    T9] usb 1-1: USB disconnect, device number 34
[  289.054250][T12232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2620'.
[  290.545633][T12265] netlink: 'syz.3.2634': attribute type 10 has an invalid length.
[  290.551485][T12265] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2634'.
[  290.555117][T12265] dummy0: entered promiscuous mode
[  290.565217][T12265] bridge0: port 3(dummy0) entered blocking state
[  290.567760][T12265] bridge0: port 3(dummy0) entered disabled state
[  290.570209][T12265] dummy0: entered allmulticast mode
[  291.797049][T12288] loop3: detected capacity change from 0 to 256
[  291.808006][T12288] FAT-fs (loop3): Directory bread(block 64) failed
[  291.812579][T12288] FAT-fs (loop3): Directory bread(block 65) failed
[  291.814824][T12288] FAT-fs (loop3): Directory bread(block 66) failed
[  291.816857][T12288] FAT-fs (loop3): Directory bread(block 67) failed
[  291.818891][T12288] FAT-fs (loop3): Directory bread(block 68) failed
[  291.821027][T12288] FAT-fs (loop3): Directory bread(block 69) failed
[  291.823147][T12288] FAT-fs (loop3): Directory bread(block 70) failed
[  291.825459][T12288] FAT-fs (loop3): Directory bread(block 71) failed
[  291.827631][T12288] FAT-fs (loop3): Directory bread(block 72) failed
[  291.832407][T12288] FAT-fs (loop3): Directory bread(block 73) failed
[  291.843049][T12288] overlay: ./file0 is not a directory
[  292.109694][ T5879] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  292.202847][T12297] syz.3.2647: attempt to access beyond end of device
[  292.202847][T12297] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  292.208609][T12297] efs: cannot read volume header
[  292.326181][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  292.338783][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  292.418150][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  292.432583][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  292.449505][ T5879] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  292.454831][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.462743][ T5879] usb 1-1: config 0 descriptor??
[  292.465955][T12289] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  292.928706][ T5879] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd
[  292.964480][ T5879] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  293.111888][T12318] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2655'.
[  293.168563][ T5879] usb 1-1: USB disconnect, device number 35
[  294.994783][T12362] loop3: detected capacity change from 0 to 128
[  294.998591][T12362] EXT4-fs: Ignoring removed nobh option
[  295.006197][T12362] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  295.013685][T12362] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  295.089324][T12366] program syz.0.2675 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  295.136232][T11363] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  295.228754][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2676'.
[  295.232327][T12369] netlink: 'syz.0.2676': attribute type 1 has an invalid length.
[  295.330109][T12375] macvtap0: entered promiscuous mode
[  295.335679][T12375] macvtap0: left promiscuous mode
[  295.376591][T12380] delete_channel: no stack
[  296.442723][   T33] audit: type=1326 audit(2000000054.425:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.2.2695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  296.453195][   T33] audit: type=1326 audit(2000000054.435:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.2.2695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  296.479716][   T33] audit: type=1326 audit(2000000054.455:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.2.2695" exe="/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  296.502698][   T33] audit: type=1326 audit(2000000054.455:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.2.2695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  296.518544][   T33] audit: type=1326 audit(2000000054.465:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.2.2695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  296.534323][   T33] audit: type=1326 audit(2000000054.465:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.2.2695" exe="/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  296.555543][   T33] audit: type=1326 audit(2000000054.465:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.2.2695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  296.576009][   T33] audit: type=1326 audit(2000000054.465:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12409 comm="syz.2.2695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  297.355209][T12416] loop3: detected capacity change from 0 to 2048
[  297.389851][T12416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.562726][T12416] loop3: detected capacity change from 2048 to 64
[  297.599568][T12427] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  297.654527][T11970] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.679470][T12419] kmmpd-loop3: attempt to access beyond end of device
[  297.679470][T12419] loop3: rw=14337, sector=256, nr_sectors = 4 limit=64
[  297.693448][T12419] Buffer I/O error on dev loop3, logical block 64, lost sync page write
[  298.523400][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  298.530205][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  298.534450][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  298.542094][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  298.545496][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  298.668265][ T5659] dummy0: left allmulticast mode
[  298.672802][ T5659] bridge0: port 3(dummy0) entered disabled state
[  298.683590][ T5659] bridge_slave_1: left allmulticast mode
[  298.685770][ T5659] bridge_slave_1: left promiscuous mode
[  298.688204][ T5659] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.695325][ T5659] bridge_slave_0: left allmulticast mode
[  298.697924][ T5659] bridge_slave_0: left promiscuous mode
[  298.698744][T12463] xt_CT: You must specify a L4 protocol and not use inversions on it
[  298.700158][ T5659] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.768889][T12465] netlink: 'syz.0.2719': attribute type 9 has an invalid length.
[  298.772043][T12465] netlink: 'syz.0.2719': attribute type 9 has an invalid length.
[  298.901267][T12469] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  298.904120][T12469] /dev/nullb0: Can't open blockdev
[  298.980036][T12471] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2722'.
[  299.262264][ T5659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  299.269824][ T5659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  299.280169][ T5659] bond0 (unregistering): Released all slaves
[  299.513859][T12453] chnl_net:caif_netlink_parms(): no params data found
[  299.662012][ T5659] hsr_slave_0: left promiscuous mode
[  299.668819][ T5659] hsr_slave_1: left promiscuous mode
[  299.677250][ T5659] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.681096][ T5659] batman_adv: batadv0: Removing interface: batadv_slave_1
[  300.405284][ T5659] team0 (unregistering): Port device team_slave_1 removed
[  300.484137][ T5659] team0 (unregistering): Port device team_slave_0 removed
[  300.595579][ T5834] Bluetooth: hci0: command tx timeout
[  301.332412][T12453] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.338309][T12453] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.341149][T12453] bridge_slave_0: entered allmulticast mode
[  301.344559][T12453] bridge_slave_0: entered promiscuous mode
[  301.347522][T12506] : renamed from vlan1 (while UP)
[  301.362038][T12453] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.372720][T12453] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.386080][T12453] bridge_slave_1: entered allmulticast mode
[  301.389979][T12453] bridge_slave_1: entered promiscuous mode
[  301.466645][T12453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  301.549540][T12453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  301.623090][T12453] team0: Port device team_slave_0 added
[  301.654378][T12453] team0: Port device team_slave_1 added
[  301.730150][T12453] batman_adv: batadv0: Adding interface: batadv_slave_0
[  301.732613][T12453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.744827][T12453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.767848][    C0] vkms_vblank_simulate: vblank timer overrun
[  301.773846][T12453] batman_adv: batadv0: Adding interface: batadv_slave_1
[  301.778496][T12453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.791274][T12453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  301.822862][T12453] hsr_slave_0: entered promiscuous mode
[  301.826801][T12453] hsr_slave_1: entered promiscuous mode
[  301.828812][T12453] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  301.831292][T12453] Cannot create hsr debugfs directory
[  302.369105][T12453] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  302.378196][T12453] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  302.385228][T12453] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  302.393285][T12453] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  302.489809][T12453] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.510284][T12453] 8021q: adding VLAN 0 to HW filter on device team0
[  302.518649][ T9030] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.521741][ T9030] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.536091][ T9030] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.539229][ T9030] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.614511][T12453] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  302.619193][T12453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  302.674589][ T5834] Bluetooth: hci0: command tx timeout
[  302.977376][T12453] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.318991][T12453] veth0_vlan: entered promiscuous mode
[  303.333839][T12453] veth1_vlan: entered promiscuous mode
[  303.402656][T12453] veth0_macvtap: entered promiscuous mode
[  303.411585][T12453] veth1_macvtap: entered promiscuous mode
[  303.449715][T12453] batman_adv: batadv0: Interface activated: batadv_slave_0
[  303.468064][T12453] batman_adv: batadv0: Interface activated: batadv_slave_1
[  303.477028][T12453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.479924][T12453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.487474][T12453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.490676][T12453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.608152][ T9028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.613219][ T9028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.642547][ T9028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.661658][ T9028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.713591][T12563] netlink: 'syz.2.2751': attribute type 1 has an invalid length.
[  303.725937][T12563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2751'.
[  303.910112][T12571] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2754'.
[  303.912919][T12571] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2754'.
[  303.916607][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2754'.
[  304.040028][T12580] loop4: detected capacity change from 0 to 512
[  304.050527][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'.
[  304.058188][T12582] ipvlan2: entered promiscuous mode
[  304.085837][T12580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  304.090945][T12580] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.224292][T12453] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  304.325086][T12593] overlayfs: failed to resolve './file0': -2
[  304.753528][ T5834] Bluetooth: hci0: command tx timeout
[  304.854614][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2767'.
[  304.858677][    C1] vcan0: j1939_session_tx_dat: 0xffff888108bb7c00: queue data error: -100
[  304.863248][    C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[  304.866346][    C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[  304.868752][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.871605][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.874679][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.877956][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.881222][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.884463][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.887720][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.891000][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.894299][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.897452][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.900654][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.903934][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.907180][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.910232][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.913590][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.916706][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.919850][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.922907][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.926171][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.929238][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.932374][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.935609][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.938700][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.941606][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.944697][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.947813][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.951049][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.954218][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.957395][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.960561][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.963914][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.967100][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.970315][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.973531][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.976732][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.979918][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.983269][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.986462][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.989704][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.992910][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  304.996253][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  304.999404][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.002688][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.005921][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.009143][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.012309][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.015665][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.019020][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.022299][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.025557][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.028677][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.031707][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.034949][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.037984][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.040999][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.043745][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.046431][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.049510][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.052637][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.055807][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.058889][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.061920][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.064507][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.067183][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.069587][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.071981][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.074511][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.077361][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.080410][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.083591][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.086742][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.089758][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.092907][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.096037][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.099105][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.102126][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.105381][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.108430][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.111577][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.114740][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.117809][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.120820][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.124013][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.126874][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.129512][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.131825][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.134327][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.137104][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.140131][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.143144][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.146185][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.148485][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.151171][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.154131][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.156640][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.159010][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.161491][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.164541][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.166963][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.169747][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.172824][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.175480][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.177923][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.180286][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.183128][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.185575][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.188183][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.191156][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.194256][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.197174][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.200035][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.203033][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.205848][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.208418][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.211471][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.214539][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.217622][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.220430][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.223237][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.226056][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.228592][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.231326][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.234291][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.237124][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.239629][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.242128][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.249503][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.251958][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.254923][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.257712][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.260350][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.263131][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.266071][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.268431][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.270942][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.273950][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.276588][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.279629][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.282787][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.285866][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.288709][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.291269][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.294148][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.296909][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.299981][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.303094][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.306253][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.309294][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.312394][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.315415][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.318410][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.321427][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.324655][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.327713][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.330924][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.334043][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.336964][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.339418][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.341928][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.344508][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.347135][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.349542][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.352221][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.354725][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.357601][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.359987][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.362800][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.366037][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.369202][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.371686][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.374487][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.377344][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.380194][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.383153][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.385751][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.388864][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.391749][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.394118][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.396609][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.398997][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.401410][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.403908][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.406309][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.409142][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.411986][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.414370][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.416928][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.419299][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.421724][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.424419][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.427339][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.430110][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.433143][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.436154][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.439176][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.442046][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.445126][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.448043][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.451010][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.454060][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.456493][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.458790][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.461037][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.463536][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.466500][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.469266][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.471515][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.473938][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.476251][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.478472][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.480831][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.483194][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.485953][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.488282][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.490689][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.493160][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.496091][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.499111][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.502147][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.505068][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.508261][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.511267][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.514416][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.517473][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.520641][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.523285][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.526172][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.528513][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.530971][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.533491][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.536303][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.538865][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.541469][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.544421][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.547085][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.549866][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.552553][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.555169][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.557770][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.560169][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.562604][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.565577][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.568496][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.571564][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.574277][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.576612][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.579020][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.581539][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.584673][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.586236][T12612] Unsupported ieee802154 address type: 0
[  305.587032][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.587090][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.587097][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.587135][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.587142][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.607259][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.609782][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.612195][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.614627][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.617061][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.619426][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.622276][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.624956][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.628122][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.631207][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.634425][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.637518][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.640660][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.643143][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.645733][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.648458][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.650862][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.653369][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.655834][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.658207][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  305.660651][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  305.663061][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  306.000610][T12623] tipc: Trying to set illegal importance in message
[  306.006654][T12623] netlink: 'syz.2.2775': attribute type 7 has an invalid length.
[  306.009819][T12623] netlink: 'syz.2.2775': attribute type 8 has an invalid length.
[  306.102615][T12626] cgroup: fork rejected by pids controller in /syz0
[  306.832362][ T5834] Bluetooth: hci0: command tx timeout
[  306.881503][T12644] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2785'.
[  307.005926][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.135064][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.187369][T12653] tmpfs: Bad value for 'mpol'
[  307.301817][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.319111][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  307.336213][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  307.340163][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  307.345829][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  307.349267][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  307.419451][T12664] loop4: detected capacity change from 0 to 1024
[  307.428380][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.473189][T12664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.480861][T12664] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  307.515207][T12664] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.2794: lblock 1 mapped to illegal pblock 1 (length 15)
[  307.548857][T12674] cgroup: Invalid name
[  307.565001][T12453] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.670278][   T12] bridge_slave_1: left allmulticast mode
[  307.674652][   T12] bridge_slave_1: left promiscuous mode
[  307.677038][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.681515][   T12] bridge_slave_0: left allmulticast mode
[  307.683941][   T12] bridge_slave_0: left promiscuous mode
[  307.688579][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.996642][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2802'.
[  308.410942][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.418263][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.423171][   T12] bond0 (unregistering): Released all slaves
[  308.485604][T12686] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  308.489657][T12686] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  308.494014][T12686] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  308.497605][T12686] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  308.515000][T12686] vxlan0: entered promiscuous mode
[  308.555333][   T12] tipc: Left network mode
[  308.665568][T12657] chnl_net:caif_netlink_parms(): no params data found
[  308.880909][   T12] hsr_slave_0: left promiscuous mode
[  308.885920][   T12] hsr_slave_1: left promiscuous mode
[  308.888070][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  308.890367][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  308.896471][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  308.898794][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  308.910760][   T12] veth1_macvtap: left promiscuous mode
[  308.917089][   T12] veth0_macvtap: left promiscuous mode
[  308.919589][   T12] veth1_vlan: left promiscuous mode
[  309.402568][ T5834] Bluetooth: hci2: command tx timeout
[  309.863524][T12713] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.180250][   T12] team0 (unregistering): Port device team_slave_1 removed
[  310.266608][   T12] team0 (unregistering): Port device team_slave_0 removed
[  311.032418][T12657] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.040502][T12657] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.049316][T12657] bridge_slave_0: entered allmulticast mode
[  311.057944][T12657] bridge_slave_0: entered promiscuous mode
[  311.063182][T12657] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.065568][T12657] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.067837][T12657] bridge_slave_1: entered allmulticast mode
[  311.072974][T12657] bridge_slave_1: entered promiscuous mode
[  311.164207][T12657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.174655][T12657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.297375][T12657] team0: Port device team_slave_0 added
[  311.305457][T12657] team0: Port device team_slave_1 added
[  311.371257][T12657] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.374045][T12657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.398421][T12657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.411388][T12657] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.413560][T12657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.430047][T12657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.470012][ T5834] Bluetooth: hci2: command tx timeout
[  311.524098][T12727] loop4: detected capacity change from 0 to 40427
[  311.537227][T12657] hsr_slave_0: entered promiscuous mode
[  311.541085][T12657] hsr_slave_1: entered promiscuous mode
[  311.543882][T12657] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  311.546805][T12657] Cannot create hsr debugfs directory
[  311.561911][T12727] F2FS-fs (loop4): invalid crc value
[  311.704662][T12727] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  311.793571][   T10] usb 1-1: [UEAGLE-ATM] firmware is not available
[  312.147419][T12736] loop4: detected capacity change from 0 to 1024
[  312.200109][ T9026] hfsplus: b-tree write err: -5, ino 4
[  312.444936][T12657] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  312.462621][T12657] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  312.497848][T12657] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  312.512983][T12657] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  312.684727][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2823'.
[  312.922832][T12657] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.981745][T12657] 8021q: adding VLAN 0 to HW filter on device team0
[  312.987408][  T415] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.989750][  T415] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.023946][  T415] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.026381][  T415] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.176656][T12657] 8021q: adding VLAN 0 to HW filter on device batadv0
[  313.325107][T12657] veth0_vlan: entered promiscuous mode
[  313.363934][T12657] veth1_vlan: entered promiscuous mode
[  313.386575][T12657] veth0_macvtap: entered promiscuous mode
[  313.449977][T12657] veth1_macvtap: entered promiscuous mode
[  313.466512][T12657] batman_adv: batadv0: Interface activated: batadv_slave_0
[  313.477607][T12657] batman_adv: batadv0: Interface activated: batadv_slave_1
[  313.483082][T12657] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.485796][T12657] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.488548][T12657] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.501219][T12657] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.560689][ T5834] Bluetooth: hci2: command tx timeout
[  313.652991][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.668958][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.695784][ T9026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.698385][ T9026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.717532][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2833'.
[  314.361965][   T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  314.525561][   T10] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  314.529234][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.533252][   T10] usb 1-1: Product: syz
[  314.535690][   T10] usb 1-1: Manufacturer: syz
[  314.537686][   T10] usb 1-1: SerialNumber: syz
[  314.544798][   T10] usb 1-1: config 0 descriptor??
[  314.784212][   T10] mos7840 1-1:0.0: required endpoints missing
[  314.938382][ T6550] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  314.999924][   T10] usb 1-1: USB disconnect, device number 36
[  315.090453][ T6550] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  315.094029][ T6550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.099982][ T6550] usb 5-1: config 0 descriptor??
[  315.104394][ T6550] cp210x 5-1:0.0: cp210x converter detected
[  315.342163][ T6550] usb 5-1: cp210x converter now attached to ttyUSB0
[  315.480680][T12813] overlayfs: failed to clone upperpath
[  315.540977][   T10] usb 5-1: USB disconnect, device number 2
[  315.555230][T12815] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  315.556188][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  315.561839][T12815] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  315.572831][   T10] cp210x 5-1:0.0: device disconnected
[  315.640863][ T5834] Bluetooth: hci2: command tx timeout
[  315.958646][T12839] tipc: Started in network mode
[  315.960654][T12839] tipc: Node identity 2dfb7700b7b736ab002e, cluster identity 4711
[  316.095954][T12850] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551612)
[  316.105412][T12850] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  316.289443][T12866] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.911688][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  316.914762][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  317.217299][   T47] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  317.361836][T12895] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2888'.
[  317.420064][   T47] usb 5-1: config 0 has an invalid interface number: 106 but max is 0
[  317.423386][   T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  317.428117][   T47] usb 5-1: config 0 has no interface number 0
[  317.430577][   T47] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  317.434780][   T47] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  317.440591][   T47] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  317.444724][   T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.454271][   T47] usb 5-1: config 0 descriptor??
[  317.470557][T12898] netlink: 'syz.0.2889': attribute type 1 has an invalid length.
[  317.477329][   T47] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  317.522947][T12905] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  317.669747][ T5853] usb 5-1: USB disconnect, device number 3
[  317.671546][   T12] usb 5-1: Failed to submit usb control message: -71
[  317.675253][   T12] usb 5-1: unable to send the bmi data to the device: -71
[  317.689035][   T12] usb 5-1: unable to get target info from device
[  317.699476][   T12] usb 5-1: could not get target info (-71)
[  317.702006][   T12] usb 5-1: could not probe fw (-71)
[  320.169631][T12953] loop4: detected capacity change from 0 to 512
[  320.177811][T12953] EXT4-fs (loop4): Test dummy encryption mode enabled
[  320.180040][T12953] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  320.226850][T12953] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.2908: bad orphan inode 131083
[  320.237662][T12953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.268606][T12953] overlayfs: upper fs needs to support d_type.
[  320.272372][T12953] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  320.293729][T12957] random: crng reseeded on system resumption
[  320.356547][T12453] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /40/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  320.623349][T12453] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.727022][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.735085][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.852969][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.857236][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.954547][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.962345][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.041165][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  321.044448][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.125987][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  321.134606][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  321.138878][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  321.145940][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  321.149829][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  321.253030][   T12] bridge_slave_1: left allmulticast mode
[  321.256807][   T12] bridge_slave_1: left promiscuous mode
[  321.259337][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.269306][   T12] bridge_slave_0: left allmulticast mode
[  321.271697][   T12] bridge_slave_0: left promiscuous mode
[  321.274151][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.129961][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  322.137235][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  322.142057][   T12] bond0 (unregistering): Released all slaves
[  322.559072][   T12] hsr_slave_0: left promiscuous mode
[  322.562213][   T12] hsr_slave_1: left promiscuous mode
[  322.566166][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  322.569226][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  322.573019][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  322.577006][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.601112][   T12] veth1_macvtap: left promiscuous mode
[  322.607959][   T12] veth0_macvtap: left promiscuous mode
[  322.610292][   T12] veth1_vlan: left promiscuous mode
[  322.612508][   T12] veth0_vlan: left promiscuous mode
[  322.641610][T12990] orangefs_mount: mount request failed with -4
[  323.254917][   T54] Bluetooth: hci0: command tx timeout
[  323.270217][   T12] team0 (unregistering): Port device team_slave_1 removed
[  323.400890][   T12] team0 (unregistering): Port device team_slave_0 removed
[  324.702947][T13015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2932'.
[  324.715422][T12970] chnl_net:caif_netlink_parms(): no params data found
[  324.805643][T12970] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.808767][T12970] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.811688][T12970] bridge_slave_0: entered allmulticast mode
[  324.834566][T12970] bridge_slave_0: entered promiscuous mode
[  324.840130][T12970] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.842588][T12970] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.850555][T12970] bridge_slave_1: entered allmulticast mode
[  324.875792][T12970] bridge_slave_1: entered promiscuous mode
[  324.964686][T12970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.971242][T12970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.017395][T13030] could not open pipe file descriptor
[  325.100439][T12970] team0: Port device team_slave_0 added
[  325.109027][T12970] team0: Port device team_slave_1 added
[  325.166514][T12970] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.169234][T12970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.193191][T12970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.204588][T12970] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.211191][T12970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.230775][T12970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.299500][T12970] hsr_slave_0: entered promiscuous mode
[  325.303149][T12970] hsr_slave_1: entered promiscuous mode
[  325.303934][   T54] Bluetooth: hci0: command tx timeout
[  325.306046][T12970] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  325.310751][T12970] Cannot create hsr debugfs directory
[  325.489090][T13054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.561951][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2951'.
[  325.641725][T13066] ptrace attach of "/syz-executor exec"[7617] was attempted by "/syz-executor exec"[13066]
[  325.674680][T12970] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  325.678277][T12970] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  325.694670][T12970] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  325.702596][T12970] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  325.821803][T13076] sg_write: data in/out 8388572/14 bytes for SCSI command 0x0-- guessing data in;
[  325.821803][T13076]    program syz.0.2956 not setting count and/or reply_len properly
[  325.886798][T12970] 8021q: adding VLAN 0 to HW filter on device bond0
[  325.905384][T12970] 8021q: adding VLAN 0 to HW filter on device team0
[  325.918799][  T415] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.921185][  T415] bridge0: port 1(bridge_slave_0) entered forwarding state
[  325.935151][  T415] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.938030][  T415] bridge0: port 2(bridge_slave_1) entered forwarding state
[  325.972421][T12970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  326.123715][T12970] 8021q: adding VLAN 0 to HW filter on device batadv0
[  326.368574][T12970] veth0_vlan: entered promiscuous mode
[  326.378392][T12970] veth1_vlan: entered promiscuous mode
[  326.412711][T12970] veth0_macvtap: entered promiscuous mode
[  326.419462][T12970] veth1_macvtap: entered promiscuous mode
[  326.440841][T12970] batman_adv: batadv0: Interface activated: batadv_slave_0
[  326.454864][T12970] batman_adv: batadv0: Interface activated: batadv_slave_1
[  326.464502][T12970] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.468028][T12970] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.471348][T12970] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.477626][T12970] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.584487][  T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.587745][  T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.619770][  T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.625000][  T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.674987][T13103] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  326.684356][T13103] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  327.057466][T13125] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  327.062558][   T47] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  327.116199][   T33] audit: type=1326 audit(2000000085.110:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.2.2976" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  327.125615][   T33] audit: type=1326 audit(2000000085.110:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.2.2976" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  327.141913][   T33] audit: type=1326 audit(2000000085.130:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.2.2976" exe="/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  327.172163][   T33] audit: type=1326 audit(2000000085.130:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.2.2976" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  327.196816][   T33] audit: type=1326 audit(2000000085.130:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.2.2976" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  327.214520][   T47] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  327.218800][   T47] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  327.243003][   T47] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  327.246700][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.259253][T13111] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  327.267628][   T47] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  327.384363][   T54] Bluetooth: hci0: command tx timeout
[  327.494322][   T47] usb 6-1: USB disconnect, device number 2
[  327.554165][T13147] netlink: 'syz.0.2985': attribute type 1 has an invalid length.
[  327.588479][T13147] 8021q: adding VLAN 0 to HW filter on device bond1
[  327.610605][T13147] vlan2: entered allmulticast mode
[  327.616501][T13147] geneve1: entered allmulticast mode
[  327.624263][T13147] bond1: (slave vlan2): making interface the new active one
[  327.632834][T13147] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  327.755599][T13157] trusted_key: syz.2.2989 sent an empty control message without MSG_MORE.
[  328.222645][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2998'.
[  328.458336][T13172] loop5: detected capacity change from 0 to 40427
[  328.515827][T13172] F2FS-fs (loop5): invalid crc value
[  328.641939][T13172] F2FS-fs (loop5): Start checkpoint disabled!
[  328.654668][T13172] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  328.678288][   T33] audit: type=1800 audit(2000000086.671:127): pid=13172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2997" name="file1" dev="loop5" ino=10 res=0 errno=0
[  328.709761][T13172] syz.5.2997: attempt to access beyond end of device
[  328.709761][T13172] loop5: rw=2049, sector=77824, nr_sectors = 968 limit=40427
[  328.742662][T13193] syz.5.2997: attempt to access beyond end of device
[  328.742662][T13193] loop5: rw=2049, sector=78792, nr_sectors = 136 limit=40427
[  328.775955][ T9030] kworker/u9:11: attempt to access beyond end of device
[  328.775955][ T9030] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  328.785479][ T9030] CPU: 0 UID: 0 PID: 9030 Comm: kworker/u9:11 Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  328.785496][ T9030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  328.785503][ T9030] Workqueue: writeback wb_workfn (flush-7:5)
[  328.785521][ T9030] Call Trace:
[  328.785525][ T9030]  <TASK>
[  328.785530][ T9030]  dump_stack_lvl+0x189/0x250
[  328.785546][ T9030]  ? __pfx_dump_stack_lvl+0x10/0x10
[  328.785555][ T9030]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  328.785565][ T9030]  ? __pfx_queue_work_on+0x10/0x10
[  328.785577][ T9030]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  328.785584][ T9030]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  328.785593][ T9030]  ? f2fs_hw_is_readonly+0x39b/0x470
[  328.785605][ T9030]  f2fs_handle_critical_error+0x37c/0x540
[  328.785617][ T9030]  f2fs_write_end_io+0x495/0x810
[  328.785626][ T9030]  ? blkg_put+0x22/0x240
[  328.785648][ T9030]  __submit_merged_bio+0x27a/0x6a0
[  328.785659][ T9030]  __submit_merged_write_cond+0x255/0x530
[  328.785676][ T9030]  f2fs_write_data_pages+0x261d/0x3000
[  328.785703][ T9030]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  328.785719][ T9030]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  328.785747][ T9030]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  328.785762][ T9030]  ? trace_f2fs_writepages+0x7f/0x200
[  328.785771][ T9030]  ? f2fs_write_node_pages+0x478/0x6e0
[  328.785786][ T9030]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  328.785807][ T9030]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  328.785816][ T9030]  do_writepages+0x32e/0x550
[  328.785832][ T9030]  ? reacquire_held_locks+0x127/0x1d0
[  328.785842][ T9030]  ? writeback_sb_inodes+0x372/0x1000
[  328.785857][ T9030]  __writeback_single_inode+0x145/0xff0
[  328.785868][ T9030]  ? do_raw_spin_unlock+0x4d/0x240
[  328.785881][ T9030]  writeback_sb_inodes+0x6b5/0x1000
[  328.785905][ T9030]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  328.785937][ T9030]  ? rcu_is_watching+0x15/0xb0
[  328.785952][ T9030]  wb_writeback+0x43b/0xaf0
[  328.785967][ T9030]  ? queue_io+0x321/0x590
[  328.785978][ T9030]  ? __pfx_wb_writeback+0x10/0x10
[  328.785993][ T9030]  ? _raw_spin_unlock_irq+0x23/0x50
[  328.786003][ T9030]  wb_workfn+0x409/0xef0
[  328.786019][ T9030]  ? __pfx_wb_workfn+0x10/0x10
[  328.786030][ T9030]  ? __lock_acquire+0xab9/0xd20
[  328.786044][ T9030]  ? process_scheduled_works+0x9ef/0x17b0
[  328.786057][ T9030]  ? _raw_spin_unlock_irq+0x23/0x50
[  328.786063][ T9030]  ? process_scheduled_works+0x9ef/0x17b0
[  328.786078][ T9030]  ? process_scheduled_works+0x9ef/0x17b0
[  328.786087][ T9030]  process_scheduled_works+0xae1/0x17b0
[  328.786135][ T9030]  ? __pfx_process_scheduled_works+0x10/0x10
[  328.786154][ T9030]  worker_thread+0x8a0/0xda0
[  328.786178][ T9030]  kthread+0x711/0x8a0
[  328.786192][ T9030]  ? __pfx_worker_thread+0x10/0x10
[  328.786201][ T9030]  ? __pfx_kthread+0x10/0x10
[  328.786213][ T9030]  ? _raw_spin_unlock_irq+0x23/0x50
[  328.786220][ T9030]  ? lockdep_hardirqs_on+0x9c/0x150
[  328.786229][ T9030]  ? __pfx_kthread+0x10/0x10
[  328.786240][ T9030]  ret_from_fork+0x3fc/0x770
[  328.786252][ T9030]  ? __pfx_ret_from_fork+0x10/0x10
[  328.786264][ T9030]  ? __switch_to_asm+0x39/0x70
[  328.786273][ T9030]  ? __switch_to_asm+0x33/0x70
[  328.786283][ T9030]  ? __pfx_kthread+0x10/0x10
[  328.786294][ T9030]  ret_from_fork_asm+0x1a/0x30
[  328.786313][ T9030]  </TASK>
[  328.786317][ T9030] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  329.163250][T13197] netlink: 'syz.5.3006': attribute type 25 has an invalid length.
[  329.426130][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3009'.
[  329.465440][   T54] Bluetooth: hci0: command tx timeout
[  330.719597][   T54] Bluetooth: hci2: unexpected cc 0x0403 length: 81 > 1
[  330.777447][T13238] netlink: 'syz.0.3023': attribute type 3 has an invalid length.
[  331.000246][    T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  331.158448][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  331.163762][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  331.168147][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1280, setting to 64
[  331.172489][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  331.194548][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40
[  331.198367][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  331.203772][    T9] usb 6-1: SerialNumber: syz
[  331.208910][T13234] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  331.213455][T13234] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  331.219796][    T9] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[  331.439107][    T9] cdc_acm 6-1:1.0: ttyACM0: USB ACM device
[  331.450239][    T9] usb 6-1: USB disconnect, device number 3
[  331.520338][   T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  331.669971][   T10] usb 1-1: Using ep0 maxpacket: 8
[  331.673461][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.677000][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.683107][   T10] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00
[  331.686520][T13266] netlink: 'syz.2.3034': attribute type 1 has an invalid length.
[  331.689036][T13266] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3034'.
[  331.694982][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.700621][   T10] usb 1-1: config 0 descriptor??
[  332.068373][T13274] netlink: 'syz.5.3038': attribute type 11 has an invalid length.
[  332.079663][T13274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3038'.
[  332.117144][   T10] aquacomputer_d5next 0003:0C70:F00A.0007: item fetching failed at offset 1/5
[  332.130279][   T10] aquacomputer_d5next 0003:0C70:F00A.0007: probe with driver aquacomputer_d5next failed with error -22
[  332.320218][   T47] usb 1-1: USB disconnect, device number 37
[  332.539755][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  332.718894][   T10] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  332.728782][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.733182][   T10] usb 6-1: config 0 descriptor??
[  332.738411][   T10] gspca_main: cpia1-2.14.0 probing 0813:0001
[  332.758731][T13286] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3043'.
[  332.983774][T13296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3047'.
[  332.987991][T13296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3047'.
[  333.000773][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'.
[  333.154197][   T10] cpia1 6-1:0.0: unexpected state after lo power cmd: 00
[  333.555315][   T10] gspca_cpia1: usb_control_msg 02, error -32
[  333.558188][   T10] gspca_cpia1: usb_control_msg 02, error -71
[  333.561399][   T10] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0)
[  333.566237][   T10] usb 6-1: USB disconnect, device number 4
[  334.657419][T13352] sctp: [Deprecated]: syz.2.3072 (pid 13352) Use of int in max_burst socket option.
[  334.657419][T13352] Use struct sctp_assoc_value instead
[  335.795718][T13387] loop5: detected capacity change from 0 to 1024
[  335.801031][T13387] EXT4-fs: Ignoring removed nobh option
[  335.803862][T13387] EXT4-fs: Ignoring removed bh option
[  335.829984][T13387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  335.866351][T13387] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  336.311951][T12970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.480458][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3095'.
[  336.985011][   T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  337.023454][T13427] netlink: 272 bytes leftover after parsing attributes in process `syz.5.3103'.
[  337.137096][   T10] usb 1-1: Using ep0 maxpacket: 8
[  337.147955][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.157080][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.257192][   T10] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  337.260373][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.279584][   T10] usb 1-1: config 0 descriptor??
[  337.762151][   T10] hid-multitouch 0003:0EEF:72C4.0008: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0
[  337.944854][   T47] usb 1-1: USB disconnect, device number 38
[  338.269456][T13430] netlink: 'syz.5.3104': attribute type 1 has an invalid length.
[  338.504227][T13441] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3109'.
[  338.653722][T13449] geneve2: entered promiscuous mode
[  338.655956][T13449] geneve2: entered allmulticast mode
[  338.754349][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3114'.
[  338.843163][T13455] x_tables: ip_tables: osf match: only valid for protocol 6
[  338.898295][T13445] loop5: detected capacity change from 0 to 32768
[  338.901464][T13445] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3110 (13445)
[  338.919836][T13445] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  338.924062][T13445] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm
[  338.927900][T13445] BTRFS info (device loop5): using free-space-tree
[  339.008634][T12970] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  339.206205][ T6550] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  339.368091][ T6550] usb 1-1: config 0 has an invalid interface number: 170 but max is 0
[  339.376502][ T6550] usb 1-1: config 0 has no interface number 0
[  339.378747][ T6550] usb 1-1: config 0 interface 170 altsetting 0 endpoint 0x3 has an invalid bInterval 31, changing to 7
[  339.382688][ T6550] usb 1-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6
[  339.386253][ T6550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.391302][ T6550] usb 1-1: config 0 descriptor??
[  339.396624][ T6550] HFC-S_USB 1-1:0.170: probe with driver HFC-S_USB failed with error -5
[  339.487466][T13478] loop5: detected capacity change from 0 to 32768
[  339.508890][T13478] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  339.530748][T13478] XFS (loop5): Ending clean mount
[  339.543028][T13478] XFS (loop5): Quotacheck needed: Please wait.
[  339.583576][T13478] XFS (loop5): Quotacheck: Done.
[  339.610004][    T9] usb 1-1: USB disconnect, device number 39
[  339.645411][T12970] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  339.840558][T13488] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3121'.
[  340.220231][T13488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  340.237868][T13488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  340.244067][T13488] bond0 (unregistering): Released all slaves
[  340.526766][T13509] syzkaller1: entered promiscuous mode
[  340.529134][T13509] syzkaller1: entered allmulticast mode
[  341.507640][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3153'.
[  341.661362][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3157'.
[  341.744925][   T33] audit: type=1326 audit(2000000099.748:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13566 comm="syz.0.3158" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f5c38e9a9 code=0x0
[  341.870576][T13571] loop5: detected capacity change from 0 to 1024
[  341.873265][T13571] EXT4-fs: Ignoring removed bh option
[  341.904757][T13571] EXT4-fs: Ignoring removed nomblk_io_submit option
[  341.908155][T13571] EXT4-fs (loop5): Test dummy encryption mode enabled
[  341.924718][T13571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.957502][T13571] VFS: Lookup of 'file0' in ext4 loop5 would have caused loop
[  341.996303][T12970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.132071][T13587] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  342.151810][T13587] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  342.194799][    T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  342.346301][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  342.362880][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  342.372087][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  342.376736][    T9] usb 1-1: SerialNumber: syz
[  342.458958][T13599] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3174'.
[  343.059554][    T9] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42
[  343.248617][T13606] loop5: detected capacity change from 0 to 32768
[  343.473237][ T6550] usb 1-1: USB disconnect, device number 40
[  343.477528][ T6550] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[  343.545041][T13615] loop5: detected capacity change from 0 to 32768
[  343.561154][T13624] netlink: 'syz.2.3184': attribute type 21 has an invalid length.
[  343.631547][T13615] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  343.631576][T13615]   allowing incompatible features above 0.0: (unknown version)
[  343.631586][T13615]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  343.652759][T13615] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  343.658259][T13615] bcachefs (loop5): initializing new filesystem
[  343.673143][T13615] bcachefs (loop5): going read-write
[  343.681669][T13615] bcachefs (loop5): marking superblocks
[  343.718004][T13615] bcachefs (loop5): initializing freespace
[  343.732115][T13615] bcachefs (loop5): done initializing freespace
[  343.741518][T13615] bcachefs (loop5): reading snapshots table
[  343.744926][T13615] bcachefs (loop5): reading snapshots done
[  343.789979][T13615] bcachefs (loop5): done starting filesystem
[  343.807559][   T33] audit: type=1800 audit(2000000101.819:129): pid=13615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3178" name="file1" dev="loop5" ino=4098 res=0 errno=0
[  343.858652][T12970] bcachefs (loop5): shutting down
[  343.860375][T12970] bcachefs (loop5): going read-only
[  343.862134][T12970] bcachefs (loop5): finished waiting for writes to stop
[  343.870301][T12970] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  343.899674][T12970] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  343.903131][T12970] bcachefs (loop5): clean shutdown complete, journal seq 4
[  343.906577][T12970] bcachefs (loop5): marking filesystem clean
[  343.925370][T12970] bcachefs (loop5): shutdown complete
[  344.353546][T13658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3197'.
[  344.663932][   T33] audit: type=1326 audit(2000000102.659:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.2.3204" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  344.672672][   T33] audit: type=1326 audit(2000000102.669:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.2.3204" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  344.682137][   T33] audit: type=1326 audit(2000000102.679:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.2.3204" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  344.692755][   T33] audit: type=1326 audit(2000000102.679:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.2.3204" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  344.701475][   T33] audit: type=1326 audit(2000000102.679:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.2.3204" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  344.724126][   T33] audit: type=1326 audit(2000000102.689:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.2.3204" exe="/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  344.731361][   T33] audit: type=1326 audit(2000000102.709:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.2.3204" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  344.738823][   T33] audit: type=1326 audit(2000000102.709:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13671 comm="syz.2.3204" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  345.578536][T13682] loop5: detected capacity change from 0 to 8
[  346.257003][T13696] loop5: detected capacity change from 0 to 64
[  346.324677][T13699] netlink: 'syz.2.3215': attribute type 1 has an invalid length.
[  346.335538][T13699] netlink: 15 bytes leftover after parsing attributes in process `syz.2.3215'.
[  346.457369][T13712] loop5: detected capacity change from 0 to 512
[  347.182846][T13725] TCP: TCP_TX_DELAY enabled
[  348.248379][T13766] trusted_key: encrypted_key: key trusted:syz not found
[  348.369027][T13760] loop5: detected capacity change from 0 to 32768
[  348.385613][T13760] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  348.407951][T13760] XFS (loop5): Ending clean mount
[  348.470503][T12970] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  348.546402][T13784] Bluetooth: MGMT ver 1.23
[  348.547902][T13784] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes
[  349.092641][  T974] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  349.264788][  T974] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  349.267359][  T974] usb 6-1: config 0 has no interface number 0
[  349.274055][  T974] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  349.277593][  T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.284058][  T974] usb 6-1: config 0 descriptor??
[  349.287245][  T974] cp210x 6-1:0.1: cp210x converter detected
[  349.681550][   T33] kauditd_printk_skb: 50 callbacks suppressed
[  349.681563][   T33] audit: type=1326 audit(2000000107.692:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.0.3257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5c38e9a9 code=0x7fc00000
[  349.701183][  T974] cp210x 6-1:0.1: failed to get vendor val 0x000e size 3: -32
[  349.705959][   T33] audit: type=1326 audit(2000000107.702:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.0.3257" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f5c38e9a9 code=0x7fc00000
[  349.719644][   T33] audit: type=1326 audit(2000000107.702:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.0.3257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5c38e9a9 code=0x7fc00000
[  349.728106][   T33] audit: type=1326 audit(2000000107.702:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.0.3257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5c38e9a9 code=0x7fc00000
[  349.734908][   T33] audit: type=1326 audit(2000000107.702:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.0.3257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5c38e9a9 code=0x7fc00000
[  349.741710][   T33] audit: type=1326 audit(2000000107.702:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.0.3257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5c38e9a9 code=0x7fc00000
[  349.748582][   T33] audit: type=1326 audit(2000000107.702:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.0.3257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5c38e9a9 code=0x7fc00000
[  349.755845][   T33] audit: type=1326 audit(2000000107.702:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.0.3257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5c38e9a9 code=0x7fc00000
[  349.765934][   T33] audit: type=1326 audit(2000000107.702:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.0.3257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5c38e9a9 code=0x7fc00000
[  349.773840][   T33] audit: type=1326 audit(2000000107.702:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.0.3257" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5c38e9a9 code=0x7fc00000
[  349.962181][  T974] usb 6-1: cp210x converter now attached to ttyUSB0
[  350.365941][  T974] usb 6-1: USB disconnect, device number 5
[  350.374162][  T974] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  350.384100][  T974] cp210x 6-1:0.1: device disconnected
[  350.798248][T13855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3282'.
[  351.889375][T13880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3292'.
[  351.893011][T13880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3292'.
[  352.436527][T13913] loop5: detected capacity change from 0 to 4096
[  352.451826][T13913] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  352.455037][T13913] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  352.463742][T13913] ntfs3(loop5): ino=1e, "file1" attr_set_size
[  352.643915][T13914] loop0: detected capacity change from 0 to 32768
[  352.660964][T13914] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3308 (13914)
[  352.761359][T13914] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  352.765482][T13914] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm
[  352.769697][T13914] BTRFS info (device loop0): using free-space-tree
[  353.009405][T13914] BTRFS info (device loop0): rebuilding free space tree
[  353.034808][T13921] loop5: detected capacity change from 0 to 8
[  353.039756][T13921] SQUASHFS error: lzo decompression failed, data probably corrupt
[  353.042504][T13921] SQUASHFS error: Failed to read block 0x1b2: -5
[  353.044582][T13921] SQUASHFS error: Unable to read metadata cache entry [1b0]
[  353.046945][T13921] SQUASHFS error: Unable to read inode 0x11f
[  353.080099][T12657] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  353.327855][T13941] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  353.397888][T13945] loop0: detected capacity change from 0 to 4096
[  353.401646][T13945] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  354.194443][T13980] netlink: 'syz.0.3329': attribute type 9 has an invalid length.
[  354.197314][T13980] netlink: 'syz.0.3329': attribute type 7 has an invalid length.
[  354.199895][T13980] netlink: 'syz.0.3329': attribute type 8 has an invalid length.
[  355.141148][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3333'.
[  355.194139][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3333'.
[  355.975416][T14012] loop5: detected capacity change from 0 to 16
[  355.978571][T14012] erofs (device loop5): mounted with root inode @ nid 36.
[  355.995988][T14012] erofs (device loop5): read error -22 @ 43 of nid 36
[  356.228383][T14018] loop5: detected capacity change from 0 to 1024
[  356.262704][T14018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.266845][T14018] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  356.296971][T12970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.613879][T14043] loop0: detected capacity change from 0 to 128
[  356.666755][T14046] netlink: 'syz.5.3356': attribute type 1 has an invalid length.
[  356.888421][T14049] loop5: detected capacity change from 0 to 32768
[  356.892096][T14049] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3359 (14049)
[  356.899322][T14049] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  356.902876][T14049] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm
[  356.906094][T14049] BTRFS info (device loop5): using free-space-tree
[  356.990177][T12475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.116537][T12970] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  357.122260][T12475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.285305][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  357.291911][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  357.295823][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  357.300539][T12475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.305883][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  357.313437][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  357.459559][T12475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.661950][T14068] chnl_net:caif_netlink_parms(): no params data found
[  357.881360][T14068] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.884272][T14068] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.887230][T14068] bridge_slave_0: entered allmulticast mode
[  357.891297][T14068] bridge_slave_0: entered promiscuous mode
[  357.905503][T12475] bridge_slave_1: left allmulticast mode
[  357.908067][T12475] bridge_slave_1: left promiscuous mode
[  357.913501][T12475] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.922923][T12475] bridge_slave_0: left allmulticast mode
[  357.924678][T12475] bridge_slave_0: left promiscuous mode
[  357.926669][T12475] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.959005][  T974] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  357.960507][T14088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3367'.
[  358.112877][  T974] usb 6-1: Using ep0 maxpacket: 8
[  358.119081][  T974] usb 6-1: config 64 has an invalid interface number: 45 but max is 0
[  358.122385][  T974] usb 6-1: config 64 has no interface number 0
[  358.142378][  T974] usb 6-1: config 64 interface 45 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  358.152915][  T974] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 0.a1
[  358.156537][  T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.159857][  T974] usb 6-1: Product: syz
[  358.161807][  T974] usb 6-1: Manufacturer: syz
[  358.163597][  T974] usb 6-1: SerialNumber: syz
[  358.254918][T12475] bond1 (unregistering): (slave vlan2): Releasing active interface
[  358.384565][  T974] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2
[  358.393459][  T974] usb 6-1: USB disconnect, device number 6
[  358.577752][T12475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  358.584030][T12475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  358.589517][T12475] bond0 (unregistering): Released all slaves
[  358.852115][T12475] bond1 (unregistering): Released all slaves
[  358.863242][T14068] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.866224][T14068] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.868873][T14068] bridge_slave_1: entered allmulticast mode
[  358.872566][T14068] bridge_slave_1: entered promiscuous mode
[  358.971148][T14068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  358.975231][T12475] tipc: Left network mode
[  358.991332][T14068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  359.092797][T14068] team0: Port device team_slave_0 added
[  359.185193][T14096] loop5: detected capacity change from 0 to 512
[  359.209669][T14096] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  359.215081][T14068] team0: Port device team_slave_1 added
[  359.249313][T14068] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.251498][T14068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.262470][T14068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.269887][T14096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  359.274254][T14096] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  359.280870][T14068] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.283129][T14068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.307773][T14068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.351417][T12970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  359.370729][   T54] Bluetooth: hci2: command tx timeout
[  359.563619][T12475] hsr_slave_0: left promiscuous mode
[  359.566379][T12475] hsr_slave_1: left promiscuous mode
[  359.570983][T12475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  359.574047][T12475] batman_adv: batadv0: Removing interface: batadv_slave_0
[  359.580848][T12475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  359.583850][T12475] batman_adv: batadv0: Removing interface: batadv_slave_1
[  359.612341][T12475] veth1_macvtap: left promiscuous mode
[  359.614513][T12475] veth0_macvtap: left promiscuous mode
[  359.616479][T12475] veth1_vlan: left promiscuous mode
[  359.618521][T12475] veth0_vlan: left promiscuous mode
[  360.830581][T12475] team0 (unregistering): Port device team_slave_1 removed
[  360.906902][T12475] team0 (unregistering): Port device team_slave_0 removed
[  361.450950][   T54] Bluetooth: hci2: command tx timeout
[  361.561876][T14068] hsr_slave_0: entered promiscuous mode
[  361.564233][T14068] hsr_slave_1: entered promiscuous mode
[  361.566369][T14068] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  361.572077][T14068] Cannot create hsr debugfs directory
[  361.884963][T14141] geneve2: entered allmulticast mode
[  362.123333][T14068] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  362.127944][T14068] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  362.132552][T14068] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  362.138515][T14068] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  362.212384][T14068] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.228530][T14068] 8021q: adding VLAN 0 to HW filter on device team0
[  362.237560][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.240193][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.247519][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.249807][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.355317][T14147] loop5: detected capacity change from 0 to 32768
[  362.361020][T14147] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3392 (14147)
[  362.372351][T14147] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  362.376788][T14147] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm
[  362.381318][T14147] BTRFS info (device loop5): using free-space-tree
[  362.403234][T14068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.511440][T12970] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  362.687579][T14068] veth0_vlan: entered promiscuous mode
[  362.711777][T14068] veth1_vlan: entered promiscuous mode
[  362.783854][T14068] veth0_macvtap: entered promiscuous mode
[  362.808416][T14068] veth1_macvtap: entered promiscuous mode
[  362.837137][T14068] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.845663][T14068] batman_adv: batadv0: Interface activated: batadv_slave_1
[  362.854906][T14068] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  362.858373][T14068] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  362.861955][T14068] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  362.865367][T14068] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.171897][T13607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.175117][T13607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.230727][ T9028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.233171][ T9028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.428351][T14211] overlayfs: failed to clone upperpath
[  363.529117][   T54] Bluetooth: hci2: command tx timeout
[  363.544303][T14215] loop5: detected capacity change from 0 to 4096
[  363.561059][T14215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.587358][T14215] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3408: bg 0: block 66: padding at end of block bitmap is not set
[  363.615160][T14215] fs-verity (loop5, inode 16): Error -117 writing Merkle tree block 0
[  363.618371][T14215] fs-verity (loop5, inode 16): Error -117 building Merkle tree
[  363.660380][T12970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.844512][T14251] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3422'.
[  365.211271][T14277] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3433'.
[  365.629056][   T54] Bluetooth: hci2: command tx timeout
[  366.596855][T14324] loop6: detected capacity change from 0 to 2048
[  366.609718][T14324] EXT4-fs: Ignoring removed mblk_io_submit option
[  366.612373][T14324] EXT4-fs: Ignoring removed nobh option
[  366.642023][T14324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  366.770250][T14068] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.866689][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3459'.
[  367.026617][T14352] loop6: detected capacity change from 0 to 512
[  367.044881][T14352] __quota_error: 27 callbacks suppressed
[  367.044897][T14352] Quota error (device loop6): v2_read_file_info: Can't read info structure
[  367.068916][T14352] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  367.074775][T14352] EXT4-fs (loop6): mount failed
[  367.085814][T14358] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3469'.
[  367.417297][T14364] loop5: detected capacity change from 0 to 32768
[  367.454329][T14364] ERROR: (device loop5): dbAlloc: the hint is outside the map
[  367.454329][T14364] 
[  367.460798][T14364] ERROR: (device loop5): remounting filesystem as read-only
[  367.788086][  T116] blkno = 5002c, nblocks = 1
[  367.795162][  T116] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  367.795162][  T116] 
[  368.290177][T14398] xt_connbytes: Forcing CT accounting to be enabled
[  368.293541][T14398] set match dimension is over the limit!
[  368.748805][  T974] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  368.908849][  T974] usb 7-1: Using ep0 maxpacket: 16
[  368.913278][  T974] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  368.918337][  T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  368.930243][  T974] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  368.938879][  T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.967067][  T974] usb 7-1: Product: syz
[  368.969385][  T974] usb 7-1: Manufacturer: syz
[  368.971240][  T974] usb 7-1: SerialNumber: syz
[  368.994607][  T974] usb 7-1: config 0 descriptor??
[  369.098587][T14404] netlink: 'syz.5.3489': attribute type 10 has an invalid length.
[  369.109890][T14404] syz_tun: entered promiscuous mode
[  369.207165][  T974] pegasus_notetaker 7-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  369.216486][  T974] usb 7-1: USB disconnect, device number 2
[  369.235982][T14408] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3491'.
[  369.242200][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3491'.
[  371.293282][T14474] netlink: 'syz.6.3518': attribute type 1 has an invalid length.
[  371.293635][   T12] tipc: Subscription rejected, illegal request
[  371.309057][T14474] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3518'.
[  371.365134][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3519'.
[  373.976607][T14551] netlink: 'syz.2.3550': attribute type 1 has an invalid length.
[  373.996331][T14553] loop5: detected capacity change from 0 to 164
[  374.140250][T14553] iso9660: Corrupted directory entry in block 4 of inode 1792
[  374.616722][T14577] loop6: detected capacity change from 0 to 4096
[  374.628248][T14577] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  375.058933][ T5853] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  375.209103][ T5853] usb 6-1: Using ep0 maxpacket: 32
[  375.216674][ T5853] usb 6-1: unable to get BOS descriptor or descriptor too short
[  375.222650][ T5853] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[  375.226077][ T5853] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  375.230243][ T5853] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[  375.233836][ T5853] usb 6-1: config 128 has no interface number 0
[  375.237125][ T5853] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024
[  375.243858][ T5853] usb 6-1: config 128 interface 127 has no altsetting 0
[  375.249756][ T5853] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  375.253215][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.256295][ T5853] usb 6-1: Product: syz
[  375.258232][ T5853] usb 6-1: Manufacturer: syz
[  375.264133][ T5853] usb 6-1: SerialNumber: syz
[  375.269832][T14585] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  375.469041][T14577] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  375.488743][T14577] ntfs3(loop6): ino=19, mi_enum_attr
[  375.520599][T14577] ntfs3(loop6): failed to convert "c46c" to cp874
[  375.533900][T14577] ntfs3(loop6): ino=20, mi_enum_attr
[  375.584121][ T5853] usb 6-1: USB disconnect, device number 7
[  375.656261][T14595] loop6: detected capacity change from 0 to 512
[  375.662622][T14595] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  375.665362][T14595] EXT4-fs (loop6): orphan cleanup on readonly fs
[  375.668068][T14595] Quota error (device loop6): dq_insert_tree: Quota tree root isn't allocated!
[  375.671044][T14595] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota
[  375.674042][T14595] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3569: Failed to acquire dquot type 1
[  375.684914][T14595] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3569: bg 0: block 40: padding at end of block bitmap is not set
[  375.694760][T14595] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  375.700553][T14595] EXT4-fs (loop6): 1 truncate cleaned up
[  375.710129][T14595] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  375.738869][T14068] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.829987][T14600] : renamed from bridge_slave_0 (while UP)
[  376.959800][T14635] loop6: detected capacity change from 0 to 2364
[  376.963332][T14635] iso9660: Bad value for 'sbsector'
[  377.085964][T14648] comedi comedi0: Minor 47 could not be opened
[  377.267382][T14657] loop6: detected capacity change from 0 to 1024
[  377.345366][   T33] audit: type=1804 audit(2000000252.480:225): pid=14657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3591" name="/newroot/60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop6" ino=2 res=1 errno=0
[  377.530226][T14666] netlink: 'syz.6.3595': attribute type 1 has an invalid length.
[  377.772841][T14656] loop5: detected capacity change from 0 to 131072
[  377.778965][T14656] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  377.782097][T14656] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  377.787494][T14656] F2FS-fs (loop5): invalid crc value
[  377.830320][T14656] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  377.832808][T14656] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  378.329513][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  378.332663][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  380.928146][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3621'.
[  381.110721][ T5834] Bluetooth: hci0: command 0x1407 tx timeout
[  381.111530][   T54] Bluetooth: hci0: Opcode 0x1407 failed: -110
[  381.708584][T14762] ip6t_srh: unknown srh invflags 7D00
[  381.844502][T14770] 9pnet_fd: Insufficient options for proto=fd
[  382.293946][T14792] loop6: detected capacity change from 0 to 128
[  382.306402][T14792] FAT-fs (loop6): Directory bread(block 32) failed
[  382.308673][T14792] FAT-fs (loop6): Directory bread(block 33) failed
[  382.313970][T14792] FAT-fs (loop6): Directory bread(block 34) failed
[  382.316075][T14792] FAT-fs (loop6): Directory bread(block 35) failed
[  382.318202][T14792] FAT-fs (loop6): Directory bread(block 36) failed
[  382.320516][T14792] FAT-fs (loop6): Directory bread(block 37) failed
[  382.323136][T14792] FAT-fs (loop6): Directory bread(block 38) failed
[  382.325858][T14792] FAT-fs (loop6): Directory bread(block 39) failed
[  382.328453][T14792] FAT-fs (loop6): Directory bread(block 40) failed
[  382.332380][T14792] FAT-fs (loop6): Directory bread(block 41) failed
[  382.384470][T14792] syz.6.3647: attempt to access beyond end of device
[  382.384470][T14792] loop6: rw=0, sector=4108, nr_sectors = 4 limit=128
[  382.407155][T14792] FAT-fs (loop6): Filesystem has been set read-only
[  382.410138][T14792] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF
[  382.459447][   T33] audit: type=1326 audit(2000000513.640:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.2.3651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  382.476678][   T33] audit: type=1326 audit(2000000513.650:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.2.3651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  382.493899][   T33] audit: type=1326 audit(2000000513.660:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.2.3651" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  382.509422][   T33] audit: type=1326 audit(2000000513.660:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.2.3651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  382.525933][   T33] audit: type=1326 audit(2000000513.660:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.2.3651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  382.548947][T14803] sch_tbf: burst 9 is lower than device lo mtu (65550) !
[  382.554476][   T33] audit: type=1326 audit(2000000513.660:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.2.3651" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  382.583606][   T33] audit: type=1326 audit(2000000513.660:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.2.3651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  382.591985][   T33] audit: type=1326 audit(2000000513.660:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.2.3651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  382.598902][   T33] audit: type=1326 audit(2000000513.660:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.2.3651" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  382.612607][   T33] audit: type=1326 audit(2000000513.660:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.2.3651" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ffc0000
[  382.687628][T14814] loop5: detected capacity change from 0 to 512
[  382.730868][T14814] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  382.742498][T14814] EXT4-fs (loop5): 1 truncate cleaned up
[  382.748257][T14814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.861752][T12970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.856872][T14860] Option 'TXƮ' to dns_resolver key: bad/missing value
[  383.929552][T14862] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  384.012461][T14872] netlink: 'syz.6.3682': attribute type 29 has an invalid length.
[  384.156078][T14879] netlink: 'syz.6.3686': attribute type 2 has an invalid length.
[  384.159318][T14879] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3686'.
[  384.162726][T14879] nbd: must specify a device to reconfigure
[  384.272402][T14883] loop5: detected capacity change from 0 to 164
[  384.276966][T14883] ISOFS: unable to read i-node block
[  384.284805][T14883] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  385.881791][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802fd12400: rx timeout, send abort
[  386.381635][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802fd11400: rx timeout, send abort
[  386.385169][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802fd12400: abort rx timeout. Force session deactivation
[  386.836516][T14953] loop5: detected capacity change from 0 to 8
[  386.885410][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802fd11400: abort rx timeout. Force session deactivation
[  387.003293][T14957] SQUASHFS error: zlib decompression failed, data probably corrupt
[  387.018342][T14957] SQUASHFS error: Failed to read block 0x4e8: -5
[  387.064329][T14916] loop6: detected capacity change from 0 to 262144
[  387.075024][T14916] F2FS-fs (loop6): invalid crc value
[  387.143760][T14916] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  387.164227][T14916] F2FS-fs (loop6): sanity_check_inode: inode (ino=7, mode=33261) should not have inline_data, run fsck to fix
[  387.605793][T14972] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  387.780772][T14978] loop6: detected capacity change from 0 to 2560
[  387.784461][T14978] Buffer I/O error on dev loop6, logical block 0, async page read
[  387.797458][T14978] Buffer I/O error on dev loop6, logical block 0, async page read
[  387.802904][T14978] Buffer I/O error on dev loop6, logical block 0, async page read
[  387.806621][T14978] Buffer I/O error on dev loop6, logical block 0, async page read
[  387.811748][T14978] Buffer I/O error on dev loop6, logical block 0, async page read
[  387.816307][T14978] Buffer I/O error on dev loop6, logical block 0, async page read
[  387.820132][T14978] Buffer I/O error on dev loop6, logical block 0, async page read
[  387.823933][T14978] Buffer I/O error on dev loop6, logical block 0, async page read
[  387.830265][T14978] ldm_validate_partition_table(): Disk read failed.
[  387.834152][T14978] Buffer I/O error on dev loop6, logical block 0, async page read
[  387.838083][T14978] Buffer I/O error on dev loop6, logical block 0, async page read
[  387.843164][T14978] Dev loop6: unable to read RDB block 0
[  387.846178][T14978]  loop6: unable to read partition table
[  387.851478][T14978] loop_reread_partitions: partition scan of loop6 (3) failed (rc=-5)
[  387.972107][T14982] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3732'.
[  388.019522][T14986] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3734'.
[  389.095649][T15043] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3754'.
[  389.767580][ T1277] kernel read not supported for file inotify (pid: 1277 comm: kworker/0:2)
[  389.894115][T15095] netlink: 'syz.5.3779': attribute type 1 has an invalid length.
[  389.898017][T15095] netlink: 'syz.5.3779': attribute type 1 has an invalid length.
[  390.476906][T15132] loop6: detected capacity change from 0 to 8
[  390.487546][T15132] SQUASHFS error: xz decompression failed, data probably corrupt
[  390.490634][T15132] SQUASHFS error: Failed to read block 0x108: -5
[  390.493289][T15132] SQUASHFS error: Unable to read metadata cache entry [106]
[  390.497511][T15132] SQUASHFS error: Unable to read inode 0x11f
[  390.636515][ T1277] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  390.787855][ T1277] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  390.793233][ T1277] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  390.799252][ T1277] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  390.802872][ T1277] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.809346][T15126] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  390.812916][T15136] loop6: detected capacity change from 0 to 40427
[  390.815334][ T1277] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  390.816757][T15136] F2FS-fs (loop6): build fault injection rate: 25
[  390.820547][T15136] F2FS-fs (loop6): build fault injection type: 0x7698c
[  390.824977][T15136] F2FS-fs (loop6): invalid crc value
[  390.828280][T15136] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970
[  390.838407][T15136] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  390.903285][T15136] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  390.934413][T15136] F2FS-fs (loop6): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0
[  390.985954][T14068] syz-executor: attempt to access beyond end of device
[  390.985954][T14068] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  390.993084][T14068] CPU: 1 UID: 0 PID: 14068 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  390.993099][T14068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  390.993105][T14068] Call Trace:
[  390.993110][T14068]  <TASK>
[  390.993114][T14068]  dump_stack_lvl+0x189/0x250
[  390.993133][T14068]  ? __pfx_dump_stack_lvl+0x10/0x10
[  390.993142][T14068]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  390.993153][T14068]  ? __pfx_queue_work_on+0x10/0x10
[  390.993165][T14068]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  390.993173][T14068]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  390.993181][T14068]  ? f2fs_hw_is_readonly+0x39b/0x470
[  390.993193][T14068]  f2fs_handle_critical_error+0x37c/0x540
[  390.993205][T14068]  f2fs_write_end_io+0x495/0x810
[  390.993216][T14068]  ? blkg_put+0x22/0x240
[  390.993237][T14068]  __submit_merged_bio+0x27a/0x6a0
[  390.993249][T14068]  __submit_merged_write_cond+0x255/0x530
[  390.993266][T14068]  f2fs_write_data_pages+0x261d/0x3000
[  390.993293][T14068]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  390.993331][T14068]  ? folios_put_refs+0x559/0x640
[  390.993348][T14068]  ? __lock_acquire+0xab9/0xd20
[  390.993368][T14068]  ? do_raw_spin_lock+0x121/0x290
[  390.993393][T14068]  ? do_raw_spin_unlock+0x4d/0x240
[  390.993409][T14068]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  390.993420][T14068]  do_writepages+0x32e/0x550
[  390.993438][T14068]  ? do_raw_spin_unlock+0x4d/0x240
[  390.993463][T14068]  filemap_fdatawrite+0x191/0x230
[  390.993482][T14068]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  390.993523][T14068]  ? do_raw_spin_unlock+0x4d/0x240
[  390.993536][T14068]  f2fs_sync_dirty_inodes+0x31f/0x830
[  390.993554][T14068]  f2fs_write_checkpoint+0x94a/0x1de0
[  390.993577][T14068]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  390.993611][T14068]  ? kill_f2fs_super+0x298/0x6c0
[  390.993625][T14068]  kill_f2fs_super+0x2c3/0x6c0
[  390.993638][T14068]  ? __pfx_kill_f2fs_super+0x10/0x10
[  390.993647][T14068]  ? radix_tree_delete_item+0x2b6/0x400
[  390.993661][T14068]  ? shrinker_free+0x2ce/0x3e0
[  390.993672][T14068]  deactivate_locked_super+0xbc/0x130
[  390.993708][T14068]  cleanup_mnt+0x425/0x4c0
[  390.993720][T14068]  ? lockdep_hardirqs_on+0x9c/0x150
[  390.993732][T14068]  task_work_run+0x1d4/0x260
[  390.993747][T14068]  ? __pfx_task_work_run+0x10/0x10
[  390.993757][T14068]  ? __x64_sys_umount+0x122/0x160
[  390.993771][T14068]  ? exit_to_user_mode_loop+0x40/0x110
[  390.993783][T14068]  exit_to_user_mode_loop+0xec/0x110
[  390.993808][T14068]  do_syscall_64+0x2bd/0x3b0
[  390.993818][T14068]  ? lockdep_hardirqs_on+0x9c/0x150
[  390.993826][T14068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.993834][T14068]  ? exc_page_fault+0x9f/0xf0
[  390.993844][T14068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.993851][T14068] RIP: 0033:0x7fc4ee98fcd7
[  390.993861][T14068] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  390.993868][T14068] RSP: 002b:00007fff6e302e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  390.993879][T14068] RAX: 0000000000000000 RBX: 00007fc4eea10b55 RCX: 00007fc4ee98fcd7
[  390.993885][T14068] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff6e302f50
[  390.993889][T14068] RBP: 00007fff6e302f50 R08: 0000000000000020 R09: 0000000000000000
[  390.993894][T14068] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff6e303fe0
[  390.993899][T14068] R13: 00007fc4eea10b55 R14: 000000000005f719 R15: 00007fff6e304020
[  390.993914][T14068]  </TASK>
[  390.998223][T14068] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  391.030302][   T47] usb 6-1: USB disconnect, device number 8
[  392.754121][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3825'.
[  392.848697][T15198] input: syz0 as /devices/virtual/input/input17
[  392.852908][T15200] loop6: detected capacity change from 0 to 256
[  392.862190][T15200] exfat: Deprecated parameter 'utf8'
[  392.877405][T15200] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  392.930386][T15204] loop5: detected capacity change from 0 to 764
[  394.102934][T15227] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  394.143075][T15223] loop6: detected capacity change from 0 to 32768
[  394.221169][T15223] ERROR: (device loop6): dbAllocAG: unable to allocate blocks
[  394.221169][T15223] 
[  394.231080][T15223] jfs_create: dtInsert returned -EIO
[  394.233813][T15223] ERROR: (device loop6): jfs_create: 
[  394.233813][T15223] 
[  394.736312][T12475] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  395.490123][T15255] netlink: 'syz.5.3851': attribute type 1 has an invalid length.
[  395.492880][T15255] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3851'.
[  395.811242][T15274] tipc: Started in network mode
[  395.815159][T15274] tipc: Node identity 06c6ef681c41, cluster identity 4711
[  395.822246][T15274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.833009][T15274] syzkaller0: entered promiscuous mode
[  395.835307][T15274] syzkaller0: entered allmulticast mode
[  395.879708][T15274] tipc: Resetting bearer <eth:syzkaller0>
[  395.887931][T15273] tipc: Resetting bearer <eth:syzkaller0>
[  395.922119][T15273] tipc: Disabling bearer <eth:syzkaller0>
[  396.905379][T15311] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  397.528034][T15326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3883'.
[  398.617496][T15363] loop5: detected capacity change from 0 to 1024
[  398.620847][T15363] EXT4-fs: inline encryption not supported
[  398.628816][T15363] EXT4-fs: Ignoring removed bh option
[  398.653470][T15363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.264306][T12970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.344494][T15402] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3917'.
[  399.347455][T15402] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3917'.
[  399.493155][T15406] __vm_enough_memory: pid: 15406, comm: syz.6.3918, bytes: 21200000630784 not enough memory for the allocation
[  400.369227][T15428] overlayfs: failed to clone upperpath
[  401.064659][T15451] loop6: detected capacity change from 0 to 512
[  401.067889][T15451] EXT4-fs: Ignoring removed orlov option
[  401.074736][T15451] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  401.093946][T15453] geneve2: entered promiscuous mode
[  401.096122][T15453] geneve2: entered allmulticast mode
[  401.103714][T15451] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  401.107657][T15451] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.3937: corrupted in-inode xattr: e_value size too large
[  401.116742][T15451] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.3937: couldn't read orphan inode 15 (err -117)
[  401.131940][T15451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  401.209950][T14068] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.475664][T15469] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3944'.
[  401.561747][T15477] GUP no longer grows the stack in syz.2.3946 (15477): 200000005000-200000008000 (200000004000)
[  401.570614][T15477] CPU: 0 UID: 0 PID: 15477 Comm: syz.2.3946 Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  401.570637][T15477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  401.570646][T15477] Call Trace:
[  401.570654][T15477]  <TASK>
[  401.570662][T15477]  dump_stack_lvl+0x189/0x250
[  401.570689][T15477]  ? __pfx_dump_stack_lvl+0x10/0x10
[  401.570708][T15477]  ? __pfx__printk+0x10/0x10
[  401.570724][T15477]  ? find_vma+0xe7/0x160
[  401.570753][T15477]  __get_user_pages+0x2a60/0x30b0
[  401.570798][T15477]  ? __pfx___get_user_pages+0x10/0x10
[  401.570816][T15477]  ? __gup_longterm_locked+0xbf7/0x15b0
[  401.570835][T15477]  ? down_read_killable+0x1d1/0x350
[  401.570858][T15477]  __gup_longterm_locked+0xd66/0x15b0
[  401.570891][T15477]  ? gup_fast_fallback+0x1afc/0x2260
[  401.570909][T15477]  gup_fast_fallback+0x1cd4/0x2260
[  401.570925][T15477]  ? sched_clock+0x3f/0x60
[  401.571005][T15477]  ? __pfx_gup_fast_fallback+0x10/0x10
[  401.571026][T15477]  ? futex_unqueue+0x22/0x240
[  401.571045][T15477]  ? futex_unqueue+0x22/0x240
[  401.571061][T15477]  ? futex_unqueue+0x22/0x240
[  401.571076][T15477]  ? is_valid_gup_args+0x11f/0x200
[  401.571090][T15477]  ? get_user_pages_fast+0x4d/0xb0
[  401.571107][T15477]  get_futex_key+0x915/0x1640
[  401.571127][T15477]  ? get_futex_key+0x880/0x1640
[  401.571146][T15477]  ? __pfx_get_futex_key+0x10/0x10
[  401.571169][T15477]  ? __pfx_futex_wake_mark+0x10/0x10
[  401.571202][T15477]  futex_wake_op+0x127/0xca0
[  401.571222][T15477]  ? futex_wait+0x285/0x360
[  401.571233][T15477]  ? __pfx_futex_wake_op+0x10/0x10
[  401.571262][T15477]  do_futex+0x3bd/0x420
[  401.571280][T15477]  ? __fget_files+0x2a/0x420
[  401.571292][T15477]  ? __fget_files+0x3a0/0x420
[  401.571307][T15477]  ? __pfx_do_futex+0x10/0x10
[  401.571324][T15477]  ? fdget+0x184/0x1e0
[  401.571343][T15477]  __se_sys_futex+0x36f/0x400
[  401.571365][T15477]  ? __bad_area_nosemaphore+0x3fb/0x780
[  401.571380][T15477]  ? __pfx___se_sys_futex+0x10/0x10
[  401.571399][T15477]  ? rcu_is_watching+0x15/0xb0
[  401.571419][T15477]  ? __x64_sys_futex+0x21/0xf0
[  401.571441][T15477]  do_syscall_64+0xfa/0x3b0
[  401.571457][T15477]  ? lockdep_hardirqs_on+0x9c/0x150
[  401.571472][T15477]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.571489][T15477]  ? exc_page_fault+0x9f/0xf0
[  401.571506][T15477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.571519][T15477] RIP: 0033:0x7ff46d78e9a9
[  401.571534][T15477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  401.571548][T15477] RSP: 002b:00007ff46e534038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  401.571566][T15477] RAX: ffffffffffffffda RBX: 00007ff46d9b6080 RCX: 00007ff46d78e9a9
[  401.571577][T15477] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000004000
[  401.571587][T15477] RBP: 00007ff46d810d69 R08: 0000200000004000 R09: 00000000a3020000
[  401.571599][T15477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  401.571608][T15477] R13: 0000000000000000 R14: 00007ff46d9b6080 R15: 00007fffe4276218
[  401.571629][T15477]  </TASK>
[  401.577482][T15476] loop5: detected capacity change from 0 to 764
[  401.724426][T15476] iso9660: Unknown parameter '	'
[  402.033050][T15492] tipc: Started in network mode
[  402.035091][T15492] tipc: Node identity ac14140f, cluster identity 4711
[  402.052819][T15492] tipc: New replicast peer: 255.255.255.255
[  402.058566][T15492] tipc: Enabled bearer <udp:syz2>, priority 10
[  402.075407][T15492] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3954'.
[  402.080542][T15492] tipc: Disabling bearer <udp:syz2>
[  403.119067][T15500] loop6: detected capacity change from 0 to 32768
[  403.125409][T15500] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3958 (15500)
[  403.142010][T15500] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  403.146206][T15500] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm
[  403.149311][T15500] BTRFS info (device loop6): using free-space-tree
[  403.350270][T14068] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  403.548260][T15523] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3963'.
[  404.129598][ T5884] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  404.307210][ T5884] usb 7-1: Using ep0 maxpacket: 32
[  404.326251][ T5884] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  404.330422][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  404.334030][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  404.342349][ T5884] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  404.351704][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.370361][ T5884] usb 7-1: config 0 descriptor??
[  404.374130][T15540] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  404.380311][ T5884] hub 7-1:0.0: USB hub found
[  404.591035][T15551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3973'.
[  404.595275][T15551] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3973'.
[  404.607770][ T5884] hub 7-1:0.0: 11 ports detected
[  404.611453][ T5884] hub 7-1:0.0: insufficient power available to use all downstream ports
[  404.815257][ T5884] hub 7-1:0.0: hub_hub_status failed (err = -71)
[  404.828914][ T5884] hub 7-1:0.0: config failed, can't get hub status (err -71)
[  404.842043][ T5884] usbhid 7-1:0.0: can't add hid device: -71
[  404.844240][ T5884] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  404.872167][ T5884] usb 7-1: USB disconnect, device number 3
[  405.417615][   T54] Bluetooth: hci2: Unknown advertising packet type: 0x18
[  405.417709][   T54] Bluetooth: hci2: Unknown advertising packet type: 0x1e
[  405.643866][T15574] loop5: detected capacity change from 0 to 40427
[  405.650449][T15574] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  405.653681][T15574] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  405.659251][T15574] F2FS-fs (loop5): invalid crc value
[  405.723021][T15574] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  405.726081][T15574] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  405.889765][T15593] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  405.973946][T15597] overlayfs: failed to clone upperpath
[  406.178531][T15601] netlink: 'syz.6.3994': attribute type 1 has an invalid length.
[  406.185020][T15601] netlink: 'syz.6.3994': attribute type 4 has an invalid length.
[  406.192375][T15601] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3994'.
[  406.216878][T15601] netlink: 'syz.6.3994': attribute type 1 has an invalid length.
[  406.225382][T15601] netlink: 'syz.6.3994': attribute type 4 has an invalid length.
[  406.232449][T15601] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3994'.
[  406.469635][T15605] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3996'.
[  406.992662][   T33] kauditd_printk_skb: 20 callbacks suppressed
[  406.992676][   T33] audit: type=1326 audit(2000000538.192:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15622 comm="syz.2.4006" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ff00000
[  407.014174][   T33] audit: type=1326 audit(2000000538.202:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15622 comm="syz.2.4006" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ff00000
[  407.023165][   T33] audit: type=1326 audit(2000000538.202:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15622 comm="syz.2.4006" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ff00000
[  407.032836][   T33] audit: type=1326 audit(2000000538.202:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15622 comm="syz.2.4006" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ff00000
[  407.044200][   T33] audit: type=1326 audit(2000000538.202:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15622 comm="syz.2.4006" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ff00000
[  407.052102][   T33] audit: type=1326 audit(2000000538.202:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15622 comm="syz.2.4006" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ff00000
[  407.060849][   T33] audit: type=1326 audit(2000000538.202:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15622 comm="syz.2.4006" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ff00000
[  407.069391][   T33] audit: type=1326 audit(2000000538.202:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15622 comm="syz.2.4006" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ff00000
[  407.081685][   T33] audit: type=1326 audit(2000000538.202:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15622 comm="syz.2.4006" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ff00000
[  407.090711][   T33] audit: type=1326 audit(2000000538.202:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15622 comm="syz.2.4006" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46d78e9a9 code=0x7ff00000
[  407.508205][T15640] loop6: detected capacity change from 0 to 64
[  407.558201][ T5853] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  407.717533][ T5853] usb 6-1: Using ep0 maxpacket: 16
[  407.731020][ T5853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  407.738426][ T5853] usb 6-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc
[  407.772717][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.775666][ T5853] usb 6-1: Product: syz
[  407.777163][ T5853] usb 6-1: Manufacturer: syz
[  407.780760][ T5853] usb 6-1: SerialNumber: syz
[  407.784162][ T5853] usb 6-1: config 0 descriptor??
[  407.809743][ T5853] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  408.285104][ T1277] usb 6-1: USB disconnect, device number 9
[  408.746978][T15676] sp0: Synchronizing with TNC
[  409.146760][   T47] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  409.163997][T15688] loop5: detected capacity change from 0 to 32768
[  409.193949][T15688] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  409.225819][T15688] (syz.5.4036,15688,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  409.271291][T12970] ocfs2: Unmounting device (7,5) on (node local)
[  409.315532][   T47] usb 7-1: unable to get BOS descriptor or descriptor too short
[  409.320836][   T47] usb 7-1: not running at top speed; connect to a high speed hub
[  409.325520][   T47] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  409.337018][   T47] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  409.340544][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.343653][   T47] usb 7-1: Product: syz
[  409.355790][   T47] usb 7-1: Manufacturer: syz
[  409.357799][   T47] usb 7-1: SerialNumber: syz
[  409.586832][   T47] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  409.624399][   T47] usb 7-1: USB disconnect, device number 4
[  409.699623][T15702] loop5: detected capacity change from 0 to 512
[  409.702594][T15702] EXT4-fs: journaled quota format not specified
[  410.043139][T15714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4046'.
[  410.213720][T15719] loop6: detected capacity change from 0 to 512
[  410.222995][T15719] EXT4-fs: Ignoring removed mblk_io_submit option
[  410.235299][T15719] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  410.253723][T15719] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  410.262976][T15719] EXT4-fs (loop6): orphan cleanup on readonly fs
[  410.283376][T15719] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.4048: Invalid block bitmap block 0 in block_group 0
[  410.322777][T15719] EXT4-fs (loop6): Remounting filesystem read-only
[  410.335810][T15719] EXT4-fs (loop6): 1 orphan inode deleted
[  410.358758][T15719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  410.489539][T14068] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.250853][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4075'.
[  412.254427][T15784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4075'.
[  412.874912][  T974] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  413.024793][  T974] usb 6-1: Using ep0 maxpacket: 16
[  413.033179][  T974] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  413.041279][  T974] usb 6-1: config 1 has no interface number 0
[  413.043887][  T974] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  413.048349][  T974] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  413.052665][  T974] usb 6-1: config 1 interface 105 has no altsetting 0
[  413.058549][  T974] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  413.062380][  T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.069929][  T974] usb 6-1: Product: syz
[  413.073992][  T974] usb 6-1: Manufacturer: syz
[  413.078503][  T974] usb 6-1: SerialNumber: syz
[  413.085748][T15793] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  413.089869][T15793] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  413.501549][T15793] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  413.508389][T15793] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  413.716778][  T974] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  413.721294][  T974] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71
[  413.727373][  T974] usb 6-1: USB disconnect, device number 10
[  413.734780][T15826] PID 15826 killed due to inadequate hugepage pool
[  414.307543][T15834] loop5: detected capacity change from 0 to 128
[  414.317477][T15834] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  414.321656][T15834] ext4 filesystem being mounted at /319/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  414.342217][T15834] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.4096: No space for directory leaf checksum. Please run e2fsck -D.
[  414.354109][T15834] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.4096: checksumming directory block 0
[  414.398787][T12970] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  414.408289][T15842] ceph: No source
[  415.972864][T15906] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4129'.
[  416.238053][ T5853] Process accounting resumed
[  416.316862][T15929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4140'.
[  416.320356][T15929] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  416.323539][T15929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  416.563824][T15947] loop5: detected capacity change from 0 to 128
[  416.586944][   T33] kauditd_printk_skb: 384 callbacks suppressed
[  416.586962][   T33] audit: type=1800 audit(2000000547.787:647): pid=15947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4149" name="file2" dev="loop5" ino=1048670 res=0 errno=0
[  416.602080][T15945] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  416.611129][T15945] FAT-fs (loop5): Filesystem has been set read-only
[  416.617158][T15945] syz.5.4149: attempt to access beyond end of device
[  416.617158][T15945] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  416.626172][T15945] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  416.630638][T15945] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  416.635536][   T33] audit: type=1326 audit(2000000547.827:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.6.4150" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4ee985967 code=0x7ffc0000
[  416.675025][   T33] audit: type=1326 audit(2000000547.827:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.6.4150" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4ee92ab89 code=0x7ffc0000
[  416.705128][   T33] audit: type=1326 audit(2000000547.827:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.6.4150" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4ee985967 code=0x7ffc0000
Connection to localhost closed by remote host.
[  416.730265][   T33] audit: type=1326 audit(2000000547.827:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.6.4150" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4ee92ab89 code=0x7ffc0000
[  416.747639][   T33] audit: type=1326 audit(2000000547.827:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.6.4150" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4ee985967 code=0x7ffc0000
[  416.777001][   T33] audit: type=1326 audit(2000000547.827:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.6.4150" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4ee92ab89 code=0x7ffc0000
[  416.803044][   T33] audit: type=1326 audit(2000000547.827:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.6.4150" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4ee985967 code=0x7ffc0000
[  416.811638][   T33] audit: type=1326 audit(2000000547.827:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.6.4150" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4ee92ab89 code=0x7ffc0000
[  416.822473][   T33] audit: type=1326 audit(2000000547.827:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.6.4150" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4ee985967 code=0x7ffc0000
[  416.937375][  T974] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  417.464072][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.623432][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.780278][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.904372][  T974] usb 7-1: device descriptor read/all, error -71
[  417.909386][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.034398][   T13] bridge_slave_1: left allmulticast mode
[  418.036721][   T13] bridge_slave_1: left promiscuous mode
[  418.039167][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.044664][   T13] bridge_slave_0: left allmulticast mode
[  418.046900][   T13] bridge_slave_0: left promiscuous mode
[  418.049250][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.488698][   T13] bond0 (unregistering): Released all slaves
[  418.572606][   T13] tipc: Left network mode
[  418.821289][   T13] hsr_slave_0: left promiscuous mode
[  418.824652][   T13] hsr_slave_1: left promiscuous mode
[  418.826746][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  418.829028][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  418.831926][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  418.834387][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  418.849140][   T13] veth1_macvtap: left promiscuous mode
[  418.854220][   T13] veth0_macvtap: left promiscuous mode
[  418.856325][   T13] veth1_vlan: left promiscuous mode
[  418.858244][   T13] veth0_vlan: left promiscuous mode
[  419.509214][   T13] team0 (unregistering): Port device team_slave_1 removed
[  419.570948][   T13] team0 (unregistering): Port device team_slave_0 removed
[  420.686675][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.692079][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.784139][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.788322][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.851998][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.855814][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.974301][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  420.978529][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.121781][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.197405][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.264236][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.343400][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.430198][   T13] bridge_slave_1: left allmulticast mode
[  421.433623][   T13] bridge_slave_1: left promiscuous mode
[  421.436034][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.440242][   T13] : left allmulticast mode
[  421.442479][   T13] : left promiscuous mode
[  421.444010][   T13] bridge0: port 1() entered disabled state
[  422.016109][   T13] team0: Port device bond0 removed
[  422.020640][   T13] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  422.024369][   T13] bond0 (unregistering): Released all slaves
[  422.035767][   T13] bond1 (unregistering): Released all slaves
[  422.477496][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  422.484191][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  422.488944][   T13] bond0 (unregistering): Released all slaves
[  422.650053][   T13] tipc: Left network mode
[  422.681930][   T13] IPVS: stopping master sync thread 10969 ...
[  423.036008][   T13] hsr_slave_0: left promiscuous mode
[  423.038781][   T13] hsr_slave_1: left promiscuous mode
[  423.048452][   T13] hsr_slave_0: left promiscuous mode
[  423.052483][   T13] hsr_slave_1: left promiscuous mode
[  423.055109][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  423.057945][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  423.064288][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  423.067142][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  423.112820][   T13] veth1_macvtap: left promiscuous mode
[  423.114982][   T13] veth0_macvtap: left promiscuous mode
[  423.117178][   T13] veth1_vlan: left promiscuous mode
[  423.119257][   T13] veth0_vlan: left promiscuous mode
[  423.124372][   T13] veth1_macvtap: left promiscuous mode
[  423.126572][   T13] veth0_macvtap: left promiscuous mode
[  423.128816][   T13] veth1_vlan: left promiscuous mode
[  423.131538][   T13] veth0_vlan: left promiscuous mode
[  424.867766][   T13] team0 (unregistering): Port device team_slave_1 removed
[  424.923147][   T13] team0 (unregistering): Port device team_slave_0 removed
[  426.100462][   T13] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
03:16:13  Registers:
info registers vcpu 0

CPU#0
RAX=8f442cd80b762d00 RBX=ffffffff81976a18 RCX=8f442cd80b762d00 RDX=0000000000000001
RSI=ffffffff8d996419 RDI=ffffffff8be28d00 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1dcf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d94f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff46e4e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=234f4cb62c6b0600 RBX=ffffffff81976a18 RCX=234f4cb62c6b0600 RDX=0000000000000001
RSI=ffffffff8d996419 RDI=ffffffff8be28d00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1dcf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110201d1000
RIP=ffffffff8b6d94f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff46d9802d8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
