last executing test programs:

1m41.080716553s ago: executing program 2 (id=46):
r0 = socket$caif_stream(0x25, 0x1, 0x5)
setsockopt(r0, 0x7, 0x7f, &(0x7f0000001cc0)="c5e6a4d3", 0x4)

1m41.001149477s ago: executing program 2 (id=48):
openat$rtc(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
socket(0x10, 0x803, 0x2)
syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$int_in(r4, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000280))
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = dup(r5)
r7 = fcntl$dupfd(r4, 0x406, r5)
socket$netlink(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000001a40)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6c6f61642064656661756c7420757365723a2b8b8a16114fdddf6b284699df92d53e6f4a02759baf61ac069c26f5e36afa8963714db85286d9d22e9f12ed100cbd1a7c8abbdacf5998675540f24dc0b5df9a8ddb2c6eae0e54808cfdd7b0948274960d4b78c59b8c87968b63bceecc9fe3469956348e3b4da98233e3b36d478fdbed1b05ecfcd1b5fdec40de55dda4c1e44c298ee5918ed477ef95540547acb8c13a20296d68c7f13fbb133bad95d730b60e7f84720ebfc5f6d4dd091418f7ef699303d2f2084b22d2b5aab8c8e0ac99e87375cde64512d7dd96070000000000000052d9e37e576ab0728727ea07cf4f654b9d6157f487409cf3f14b000000000000000000000091e6dbc2a56827df496e970236337eebbe28690ac26b347f12a96560534f738cb4e7466551c624926a5f55fa08eab062596b57c00507437bcc035417a5536b8750c29744b2fa1b9f65f4101aad92ce881bbce13419aad30df4a2c39e3da020e66ae585f8970315aa9230dc7249d808fbc7e77858003e64bba731ad9afbe61387935ce5572dfcfdb84fb96ab8f29d78b286ad9220303030303030303030303030303030"], 0x1b1, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
ftruncate(0xffffffffffffffff, 0x8800000)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000800)=""/251, 0x0, 0x1000})
ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r6})
ioctl$VHOST_RESET_OWNER(r7, 0xaf02, 0x0)

1m39.158316105s ago: executing program 2 (id=59):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x89}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

1m39.079712452s ago: executing program 2 (id=60):
syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000240)={[{@map_off}, {@check_strict}, {@cruft}, {@dmode={'dmode', 0x3d, 0x4}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0xff, 0x544, &(0x7f0000001000)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhhokxae8O4YZu0vQh2uRexd4T2EjbZTvqHJjHQv6u+nwjOiX3s8zup5Z/cxscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSkabzOkhrNrQV+a/dtf+sDC+TWvmJMvyJW/E9yObmSLrry1e7qy/F/czKbvpuVXFzkZPu/l//34NLkxGD7MQF/lt+/cE+bW9vPV3q97qujCuQMunpx9LqG9kzom5bT0MqEvqpWKvadxXqo6qapw+Uw0i3lBtqJ/EDNu7dUsVotK11Y9jteo+Y09WDh/dsl266oh4W2doLQ9+48LITuomk2jddI2sSr4zb34wPxkYlUpJ2WUmvrvW45awBxo+KnNCplNSrZpVKxWCoVK/eq9+7b9uSBBfZH5ECLozto8e90hGdv4HAm+vlfmmLEk44siRr6cqUmgfjSGrG+b5D/v7mjx/a7N/8PsvyV3dUzkuT/a+m7a6Py/4hYTu61KVuyLc9lRXrSk668OvWITvbVEC2eGAnFFyMtcZIlqr9ESVUqUhFbnsii1CUUJXUx0hQtoSxLKJHo5IhyJRAtjkTiSyBK5sWVW6KkKFWpSlmUaCnIsvjSEU8aUhMn2cuarCefe1mUNSrGnUbFkcPID467rpTGjJb8j8M70vM3cBh/D/I/AAAAAAA4t6zkt+/x9f+UXE1qddPU9mmHBQAAAAAAjlDyl//ZuJiKa1fF4vofAAAAAIDzxkrusbNEJC/X09qaWMntUvwSAAAAAACAcyL5+/+1uEjmQLku1s50KVz/AwAAAABwTvycOcd+2L5o/fmXBMGU9ba99LW1kczN62xcSLe78PEeo/qMNd3fSVJU0mJy0tWzVi5ttDMJ5od+sZYVh7UbgLMTwI+fE8ClSflVbqRtbqym5epgTdpLvm6auuD6zQdFcZzpiUgvRd+/WP9BkuH/4rWmrZys97qFpy97q0ksb+O9vN3oT6B4YB7FMbG8TuZbSO65GDriqeRGjH6/eUvW1ntde+/4J9LNJ/b3+GZ6TJ/vZC5tNdef8Ta/f/y5uM9iYdTo+1EUDznyd3IzbXNz/mZaDImilBVFaW8Uwz+Lw0dRzoqifMgoAOC0rGVkIUsO5N0vOMt9WXaXz8zu72Q+bTM/k5xYJ2eGnNHtrDO6fcjs9seBZyCNyrFxv799lFXfxxu8H9lv2CxZ8Ud44fXGd3J5c2v79vrGyrPus+6LUqlcse/a9r2STCXD6BfkHgDAEHufsWMNzf+ZT+Gx7mZcVf9/5ysFBXkqL6Unq7KQ3G2QfONg6F7ze76GsJBx1ZpP0mT6hJeFMVd1/0nuchjstzS27f4YyifwkwAA4OTMZeThT8n/CxnX3ftz+fir4/yep7UBAIDjoYMPVj76yQoC035SrFaLTrSoVeC7j1Rgag2tjBfpwF10vIZW7cCPfNdvxpXHpqZDFXbabT+IVN0PVNsPzVIyfaDqP/o91C3Hi4wbtpvaCbVyfS9y3EjVTOiqdufbpgkXdZBsHLa1a+rGdSLjeyr0O4GrC0qFWu9paGrai0zdxFVPtQPTcoKceuw3Oy2tajp0A9OO/HSHg76MV/eDVrLbwml/2AAAnBGbW9vPV3q97qtjrAztOHfiQwUAAH0ZWRoAAAAAAAAAAAAAAAAAAAAAAJwBJ3H/H5VzXhlMBX1W4qFyBJXMU8ebYz85AThW/wQAAP//rVVPjw==")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00')
r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00')

1m38.999441451s ago: executing program 2 (id=62):
r0 = syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, '\x00\x00'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x6, 0x4, 0xe80, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

1m38.7403202s ago: executing program 2 (id=67):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x63, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0)

1m38.144667127s ago: executing program 32 (id=67):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x63, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0)

59.819438771s ago: executing program 1 (id=419):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=macceltic,fmask=00000000000000000000240,errors=remount-ro,iocharset=cp936,iocharset=cp852,dmask=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x152f, &(0x7f00000037c0)="$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")
r0 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

59.67024718s ago: executing program 1 (id=421):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0)

58.814931384s ago: executing program 1 (id=427):
unshare(0x40600)
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/117, 0x75}], 0x1, 0x7fffffffffffffff, 0x0)

58.743081838s ago: executing program 1 (id=429):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x80a, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=cp855,keep_last_dots,zero_size_dir,sys_tz,utf8,discard,fmask=00000000000000000000005,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x1533, &(0x7f0000001940)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x14f5}], 0x1, 0x7, 0x0, 0x0)

58.547201313s ago: executing program 1 (id=432):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}], [{@dont_measure}, {@flag='async'}, {@dont_measure}, {@appraise}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(0x0, 0x0)
openat$nvram(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = fsmount(r3, 0x0, 0x18)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, 0x0)
r5 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x100}, 0xc)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg(r6, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044840)
fsmount(r5, 0x0, 0xf)
fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x6)
ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0x8000000000000000)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x1, 0xac, &(0x7f0000000100)="$eJzs0jFqwzAUBuBnY7cdu3foDXwHn6BnMB3tzZNLJ9+nlyh07RFygwxZsygYyUP2QAh8H0hPP/8ikP7PP2+xRryvESmlJu2aSPPyNQ7TvLTjMEVEG3+RVWU+Bw+uLs/ZR/4DWz72uatKfzh9f+4rNx+/eT7d7+IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEPV63Wuo+vK8WXbLgEAAP//2Bwh+A==")

58.169926487s ago: executing program 1 (id=439):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a0001000000000000800000800020000000e2"], 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x0)

58.058586792s ago: executing program 33 (id=439):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001a0001000000000000800000800020000000e2"], 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x0)

17.033662007s ago: executing program 4 (id=850):
r0 = socket$inet(0x2, 0x801, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000140)={0x0, {{0x2, 0x4e23, @loopback}}, 0x1, 0x2, [{{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e20, @rand_addr=0x64010101}}]}, 0x18c)

16.898446245s ago: executing program 4 (id=852):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
r1 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)

15.959912239s ago: executing program 4 (id=858):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000310000000400000002"], 0x50)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp6=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0)="01b4", &(0x7f0000000300)=@tcp=r1, 0x1}, 0x20)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r3, 0x1}, 0x20)

15.606759802s ago: executing program 4 (id=860):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xb, 0x1c, 0x0, 0x0, @in6={0xa, 0x4e20, 0x48, @private0, 0x15}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}}}, 0x118)

15.365751514s ago: executing program 4 (id=862):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})

14.508796045s ago: executing program 4 (id=863):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x37, 0xfe, 0x3d, 0x8, 0xccd, 0x99, 0x9e6c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x3d, 0x0, 0x0, 0x58, 0x41, 0x1a}}]}}]}}, 0x0)

7.989952684s ago: executing program 0 (id=900):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = eventfd2(0x0, 0x0)
io_setup(0x81, &(0x7f0000000400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x1, 0x1fb, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}])

7.868725551s ago: executing program 0 (id=903):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4004855}, 0x4840)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000550001002abd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01020100e000050100000000000000000000000008"], 0x38}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000004)

7.868483269s ago: executing program 0 (id=904):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000078000106000000000000ee0007"], 0x18}], 0x1}, 0x0)

7.788710763s ago: executing program 0 (id=906):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000006540)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYBLOB="665134ecfac9621bdd9f0d3c85f7f044fb9b61056494501f1b9bd08326df69b6a59a873a932b5d62e563eea7457b7248182065bc8be2d7f948c4d9e8f1987f25db9566bffd50774befc6477fe948ca12322ebcdce621fdae6f9756938d7902eabe21deaddc305bbb7dc3f32fd8447fe99f8481e34816ff645bc5771882f2471af71e3d105a5c2996145e072ea884d2e6d412b6d934a94f5aa6c585b6364339229b75eae2f6515fd05c57d692ec19558a83b1276fd9f666cf8bd8cf5b2239989248e3d6dfbab467b7c0fc8421dbf4", @ANYRES32, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES16], 0x1, 0x620d, &(0x7f0000000200)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4)
getdents64(r0, 0xfffffffffffffffe, 0xffffffffffffff15)

7.529189413s ago: executing program 0 (id=911):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000e40)=ANY=[@ANYBLOB="12010000687a5a20720c110075090102030109021b00010000000009040000016fc6df00090509"], 0x0)

7.197799227s ago: executing program 0 (id=914):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000000c0)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

7.04964527s ago: executing program 34 (id=914):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000000c0)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

2.148579253s ago: executing program 3 (id=932):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

2.05801202s ago: executing program 3 (id=934):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="000102"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000680)={0x0, 0x14, 0xf, "2382c88fe2e181524cb6144bb6d76f"}, 0x0, 0x0, 0x0, 0x0, 0x0})

1.708422834s ago: executing program 5 (id=942):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

729.666974ms ago: executing program 5 (id=943):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, 0x0, &(0x7f0000000080)=""/120}, 0x20)

657.25599ms ago: executing program 5 (id=944):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x2105}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000840)=""/198, 0xc6}, {&(0x7f0000000a00)=""/252, 0xfc}, {&(0x7f0000003bc0)=""/4101, 0x1005}, {&(0x7f0000000000)=""/69, 0x45}, {&(0x7f0000000740)=""/251, 0xfb}], 0x5}, 0xb}], 0x4, 0x0, 0x0)

657.059263ms ago: executing program 5 (id=945):
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6)

609.688034ms ago: executing program 5 (id=946):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="c2", 0x1}], 0x1}}], 0x2, 0x4400c800)

609.294145ms ago: executing program 5 (id=947):
socket$inet(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf})
r4 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000580)={0x9, {{0x2, 0x4e24, @multicast2}}, 0x0, 0x3, [{{0x2, 0x4e22, @remote}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}}, {{0x2, 0x4e20, @loopback}}]}, 0x210)

151.31612ms ago: executing program 3 (id=948):
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000060000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff)

58.616539ms ago: executing program 3 (id=949):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@rdma_map={0x24, 0x114, 0x3, {{0x0}, 0x0, 0x31}}], 0x30}, 0x0)

58.372366ms ago: executing program 3 (id=950):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28)
sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)

0s ago: executing program 3 (id=951):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000280)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

kernel console output (not intermixed with test programs):

-3726e2b761d6
[   68.615143][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.34'.
[   68.645774][ T5213] Bluetooth: hci0: command tx timeout
[   68.722653][ T5213] Bluetooth: hci1: command tx timeout
[   68.867744][ T6000] netlink: 'syz.0.39': attribute type 1 has an invalid length.
[   68.870861][ T6000] netlink: 'syz.0.39': attribute type 2 has an invalid length.
[   68.874193][ T6000] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.39'.
[   69.331573][ T6010] process 'syz.2.43' launched './file1' with NULL argv: empty string added
[   69.507844][ T6019] nftables ruleset with unbound chain
[   69.523025][ T6021] netlink: 'syz.2.48': attribute type 1 has an invalid length.
[   69.606557][ T6024] loop0: detected capacity change from 0 to 1024
[   69.680232][ T4404] hfsplus: b-tree write err: -5, ino 4
[   70.017109][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'.
[   70.029221][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'.
[   70.308357][    T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   70.723879][ T5213] Bluetooth: hci2: command tx timeout
[   70.727394][ T5213] Bluetooth: hci0: command tx timeout
[   70.802696][ T5829] Bluetooth: hci1: command tx timeout
[   71.047868][    T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[   71.051403][    T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   71.058113][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[   71.063084][    T9] usb 1-1: config 1 has no interface number 0
[   71.065703][    T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   71.070254][    T9] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   71.092086][    T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   71.096473][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.150647][    T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[   71.211126][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.214505][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.429186][ T6051] loop2: detected capacity change from 0 to 164
[   71.496484][ T5824] iso9660: Corrupted directory entry in block 2 of inode 1920
[   71.511358][ T5824] iso9660: Corrupted directory entry in block 2 of inode 1920
[   71.525983][ T5824] ISOFS: unable to read i-node block
[   71.528603][ T5824] ISOFS: unable to read i-node block
[   71.720842][    T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[   71.816735][ T5853] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.096047][ T5853] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.104975][   T24] usb 1-1: USB disconnect, device number 2
[   72.237296][   T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[   72.406504][ T5853] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.456869][ T5853] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.604806][ T5213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.631158][ T5213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.635763][ T5213] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   72.640432][ T5853] bridge_slave_1: left allmulticast mode
[   72.654320][ T5213] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.657872][ T5213] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.688239][ T5853] bridge_slave_1: left promiscuous mode
[   72.691920][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.728185][ T5853] bridge_slave_0: left allmulticast mode
[   72.730565][ T5853] bridge_slave_0: left promiscuous mode
[   72.739492][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.193476][ T6090] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   73.290849][ T5853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.300549][ T5853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.306378][ T5853] bond0 (unregistering): Released all slaves
[   73.334001][ T6092] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[   73.485370][ T6098] loop0: detected capacity change from 0 to 256
[   73.537940][ T6098] FAT-fs (loop0): Directory bread(block 64) failed
[   73.540764][ T6098] FAT-fs (loop0): Directory bread(block 65) failed
[   73.558573][ T6098] FAT-fs (loop0): Directory bread(block 66) failed
[   73.561346][ T6098] FAT-fs (loop0): Directory bread(block 67) failed
[   73.572647][ T6098] FAT-fs (loop0): Directory bread(block 68) failed
[   73.582895][ T6098] FAT-fs (loop0): Directory bread(block 69) failed
[   73.585743][ T6098] FAT-fs (loop0): Directory bread(block 70) failed
[   73.588499][ T6098] FAT-fs (loop0): Directory bread(block 71) failed
[   73.592577][ T6098] FAT-fs (loop0): Directory bread(block 72) failed
[   73.594892][ T6098] FAT-fs (loop0): Directory bread(block 73) failed
[   74.209347][ T5853] hsr_slave_0: left promiscuous mode
[   74.214570][ T5853] hsr_slave_1: left promiscuous mode
[   74.218564][ T5853] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.221347][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.231400][ T5853] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.238496][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.272084][ T5853] veth1_macvtap: left promiscuous mode
[   74.274917][ T5853] veth0_macvtap: left promiscuous mode
[   74.277593][ T5853] veth1_vlan: left promiscuous mode
[   74.280116][ T5853] veth0_vlan: left promiscuous mode
[   74.331921][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   74.514155][   T24] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[   74.520503][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.526778][   T24] usb 1-1: Product: syz
[   74.528880][   T24] usb 1-1: Manufacturer: syz
[   74.531169][   T24] usb 1-1: SerialNumber: syz
[   74.565593][   T24] usb 1-1: config 0 descriptor??
[   74.596461][   T24] hub 1-1:0.0: bad descriptor, ignoring hub
[   74.599178][   T24] hub 1-1:0.0: probe with driver hub failed with error -5
[   74.604427][   T24] f81232 1-1:0.0: f81534a converter detected
[   74.724091][ T5213] Bluetooth: hci0: command tx timeout
[   74.788270][   T24] f81534a ttyUSB0: f81232_set_register failed status: -71
[   74.791325][   T24] f81534a ttyUSB0: probe with driver f81534a failed with error -5
[   74.815331][   T24] usb 1-1: USB disconnect, device number 3
[   74.840442][   T24] f81232 1-1:0.0: device disconnected
[   75.037214][ T5853] team0 (unregistering): Port device team_slave_1 removed
[   75.077086][ T5853] team0 (unregistering): Port device team_slave_0 removed
[   75.631878][  T972] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   75.655211][ T6067] chnl_net:caif_netlink_parms(): no params data found
[   75.700436][ T6122] loop1: detected capacity change from 0 to 512
[   75.758764][ T6122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.768689][ T6122] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   75.815615][  T972] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   75.819211][  T972] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[   75.831360][  T972] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[   75.838307][  T972] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[   75.846460][  T972] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[   75.867135][  T972] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   75.871405][  T972] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   75.878622][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.882380][  T972] usb 1-1: Product: syz
[   75.884101][  T972] usb 1-1: Manufacturer: syz
[   75.893521][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.895914][ T6067] bridge_slave_0: entered allmulticast mode
[   75.906254][  T972] cdc_wdm 1-1:1.0: skipping garbage
[   75.908291][  T972] cdc_wdm 1-1:1.0: skipping garbage
[   75.910516][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.918379][ T6067] bridge_slave_0: entered promiscuous mode
[   75.918925][  T972] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[   75.927341][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.961882][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.964955][ T6067] bridge_slave_1: entered allmulticast mode
[   75.983604][ T6067] bridge_slave_1: entered promiscuous mode
[   76.040986][ T6137] loop1: detected capacity change from 0 to 1024
[   76.060593][ T6067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.073411][ T6067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.085883][ T6137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.091200][ T6137] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.110433][ T6137] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.91: lblock 3 mapped to illegal pblock 3 (length 13)
[   76.121045][ T6137] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[   76.129630][ T6137] EXT4-fs (loop1): This should not happen!! Data will be lost
[   76.129630][ T6137] 
[   76.133605][ T5291] usb 1-1: USB disconnect, device number 4
[   76.161332][ T6067] team0: Port device team_slave_0 added
[   76.171563][ T6067] team0: Port device team_slave_1 added
[   76.203830][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.228913][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.234273][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.257079][ T6067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.268290][ T6067] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.271040][ T6067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.287922][ T6143] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[   76.291397][ T6143] overlayfs: missing 'lowerdir'
[   76.293919][ T6067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.375769][ T6067] hsr_slave_0: entered promiscuous mode
[   76.380532][ T6067] hsr_slave_1: entered promiscuous mode
[   76.551863][ T6067] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   76.568273][ T6067] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   76.574547][ T6067] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   76.580881][ T6067] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   76.611349][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.614404][ T6067] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.618060][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.620967][ T6067] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.631971][  T972] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   76.694778][ T6067] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.729033][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.735594][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.753499][ T6067] 8021q: adding VLAN 0 to HW filter on device team0
[   76.761175][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.764209][ T4404] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.788219][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.791293][ T4404] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.803128][  T972] usb 2-1: Using ep0 maxpacket: 16
[   76.805503][ T5213] Bluetooth: hci0: command tx timeout
[   76.814633][  T972] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[   76.819976][  T972] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   76.834847][  T972] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   76.848243][  T972] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   76.854995][  T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.860113][  T972] usb 2-1: Product: syz
[   76.864226][  T972] usb 2-1: Manufacturer: syz
[   76.866530][  T972] usb 2-1: SerialNumber: syz
[   77.093062][  T972] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   77.098267][ T6067] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.170687][  T972] usb 2-1: USB disconnect, device number 2
[   77.190569][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   77.201088][ T6067] veth0_vlan: entered promiscuous mode
[   77.238792][ T6067] veth1_vlan: entered promiscuous mode
[   77.283820][ T6067] veth0_macvtap: entered promiscuous mode
[   77.296333][ T6067] veth1_macvtap: entered promiscuous mode
[   77.316071][ T6067] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.327293][ T6067] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.345882][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.349958][ T5716] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.354995][ T5716] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.362890][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.425462][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.428326][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.464177][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.468820][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.536177][ T6193] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   77.591919][ T6197] IPv6: addrconf: prefix option has invalid lifetime
[   77.901853][ T5891] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   78.341830][ T5891] usb 1-1: Using ep0 maxpacket: 8
[   78.346265][ T5891] usb 1-1: unable to get BOS descriptor or descriptor too short
[   78.351330][ T5891] usb 1-1: config 5 has an invalid interface number: 128 but max is 0
[   78.355003][ T5891] usb 1-1: config 5 has no interface number 0
[   78.357492][ T5891] usb 1-1: config 5 interface 128 has no altsetting 0
[   78.364530][ T5891] usb 1-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=5f.dc
[   78.368116][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.371483][ T5891] usb 1-1: Product: syz
[   78.375626][ T5891] usb 1-1: Manufacturer: syz
[   78.377610][ T5891] usb 1-1: SerialNumber: syz
[   78.616867][ T5891] iowarrior 1-1:5.128: no interrupt-out endpoint found
[   78.626943][ T5891] usb 1-1: USB disconnect, device number 5
[   78.821765][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   78.884018][ T5213] Bluetooth: hci0: command tx timeout
[   78.984264][    T9] usb 2-1: config 0 has an invalid interface number: 217 but max is 0
[   78.987632][    T9] usb 2-1: config 0 has no interface number 0
[   78.993189][    T9] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[   78.997801][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.001205][    T9] usb 2-1: Product: syz
[   79.003276][    T9] usb 2-1: Manufacturer: syz
[   79.003315][ T5861] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   79.005340][    T9] usb 2-1: SerialNumber: syz
[   79.013565][    T9] usb 2-1: config 0 descriptor??
[   79.019961][    T9] hub 2-1:0.217: bad descriptor, ignoring hub
[   79.022940][    T9] hub 2-1:0.217: probe with driver hub failed with error -5
[   79.151842][ T5861] usb 4-1: Using ep0 maxpacket: 32
[   79.158543][ T5861] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[   79.163377][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.168999][ T5861] usb 4-1: config 0 descriptor??
[   79.181180][ T5861] gspca_main: sq930x-2.14.0 probing 041e:403c
[   79.221213][    T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[   79.235973][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   79.242967][    T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[   79.246613][    T9] usb 2-1: media controller created
[   79.268273][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   79.307362][    T9] DVB: Unable to find symbol dib7000p_attach()
[   79.310038][    T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[   79.362153][    T9] rc_core: IR keymap rc-dib0700-rc5 not found
[   79.364350][    T9] Registered IR keymap rc-empty
[   79.366675][    T9] dvb-usb: could not initialize remote control.
[   79.369228][    T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[   79.444485][    T9] usb 2-1: USB disconnect, device number 3
[   79.558938][    T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[   80.354564][ T5861] gspca_sq930x: ucbus_write failed -71
[   80.356324][ T5861] sq930x 4-1:0.0: probe with driver sq930x failed with error -71
[   80.376985][ T5861] usb 4-1: USB disconnect, device number 2
[   80.962351][ T5213] Bluetooth: hci0: command tx timeout
[   80.987042][ T6272] warning: `syz.3.134' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   81.018201][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.135'.
[   81.161927][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   81.205072][ T6280] loop3: detected capacity change from 0 to 4096
[   81.237227][ T6281] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.329353][    T9] usb 1-1: Using ep0 maxpacket: 32
[   81.338296][    T9] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[   81.352056][    T9] usb 1-1: config 0 has no interface number 0
[   81.358001][ T6283] netlink: 'syz.3.139': attribute type 1 has an invalid length.
[   81.361515][ T6283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.366998][    T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[   81.370640][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.374882][    T9] usb 1-1: Product: syz
[   81.376673][    T9] usb 1-1: Manufacturer: syz
[   81.378557][    T9] usb 1-1: SerialNumber: syz
[   81.389921][    T9] usb 1-1: config 0 descriptor??
[   81.609611][    T9] radio-si470x 1-1:0.35: this is not a si470x device.
[   81.812642][    T9] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[   81.832476][    T9] usb 1-1: USB disconnect, device number 6
[   81.973688][ T6293] loop3: detected capacity change from 0 to 32768
[   82.137919][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'.
[   82.155003][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.159608][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.692775][ T6315] netlink: 'syz.0.152': attribute type 4 has an invalid length.
[   82.695863][ T6315] netlink: 152 bytes leftover after parsing attributes in process `syz.0.152'.
[   82.708280][ T6315] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   82.760255][ T6317] can0: slcan on ptm0.
[   82.825570][ T6316] can0 (unregistered): slcan off ptm0.
[   83.080194][ T6335] loop0: detected capacity change from 0 to 2048
[   83.089109][ T6335] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   83.097173][ T6335] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.109771][ T6335] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh
[   83.289947][ T6344] netlink: 56 bytes leftover after parsing attributes in process `syz.1.162'.
[   83.296126][ T6344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.162'.
[   83.494656][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   83.512550][    T9] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   83.654819][ T6367] input: syz1 as /devices/virtual/input/input5
[   83.938877][ T6365] loop0: detected capacity change from 0 to 32768
[   83.957418][ T6365] ERROR: (device loop0): xtTruncate: xt_getpage: xtree page corrupt
[   83.957418][ T6365] 
[   83.965310][ T6365] ERROR: (device loop0): remounting filesystem as read-only
[   83.991797][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   84.142014][    T9] usb 2-1: Using ep0 maxpacket: 8
[   84.149596][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   84.158547][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   84.168904][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   84.177670][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   84.184017][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   84.188734][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.348782][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.180'.
[   84.352766][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'.
[   84.414748][    T9] usb 2-1: GET_CAPABILITIES returned 0
[   84.422504][    T9] usbtmc 2-1:16.0: can't read capabilities
[   84.557810][ T6398] loop0: detected capacity change from 0 to 4096
[   84.653818][   T33] audit: type=1800 audit(1759241186.473:7): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.183" name="file1" dev="loop0" ino=30 res=0 errno=0
[   84.675909][ T5291] usb 2-1: USB disconnect, device number 4
[   85.056197][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   85.202094][    T9] usb 1-1: Using ep0 maxpacket: 16
[   85.213824][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.265592][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40
[   85.274219][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.277670][    T9] usb 1-1: Product: syz
[   85.279587][    T9] usb 1-1: Manufacturer: syz
[   85.301029][    T9] usb 1-1: SerialNumber: syz
[   85.333921][    T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6
[   85.580130][    T9] usb 1-1: USB disconnect, device number 7
[   85.658909][ T6408] loop1: detected capacity change from 0 to 256
[   85.828606][ T6415] loop1: detected capacity change from 0 to 128
[   85.841392][ T6415] vfat: Unknown parameter ''
[   86.579863][  T789] cfg80211: failed to load regulatory.db
[   86.679945][ T6414] loop3: detected capacity change from 0 to 32768
[   86.754881][ T6414] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[   86.754881][ T6414] 
[   86.900922][ T6423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.195'.
[   87.948729][ T6440] loop3: detected capacity change from 0 to 16
[   88.073384][ T6440] erofs (device loop3): mounted with root inode @ nid 36.
[   88.408002][ T6433] loop1: detected capacity change from 0 to 32768
[   88.520972][ T6433] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   88.544216][ T6433] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   88.948199][ T5833] ocfs2: Unmounting device (7,1) on (node local)
[   89.242109][  T789] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[   89.416429][  T789] usb 1-1: config 0 has an invalid interface number: 3 but max is 0
[   89.423242][  T789] usb 1-1: config 0 has no interface number 0
[   89.429227][  T789] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8
[   89.442989][  T789] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   89.451388][  T789] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 8
[   89.465250][  T789] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 8
[   89.478667][  T789] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8
[   89.498169][  T789] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[   89.509031][  T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.523702][  T789] usb 1-1: config 0 descriptor??
[   89.529797][ T6460] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   89.547504][  T789] hub 1-1:0.3: bad descriptor, ignoring hub
[   89.557828][  T789] hub 1-1:0.3: probe with driver hub failed with error -5
[   89.565055][  T789] sierra 1-1:0.3: Sierra USB modem converter detected
[   89.785724][  T789] usb 1-1: Sierra USB modem converter now attached to ttyUSB0
[   89.800869][ T6483] netlink: 'syz.1.209': attribute type 29 has an invalid length.
[   89.803914][  T789] usb 1-1: Sierra USB modem converter now attached to ttyUSB1
[   89.849074][  T789] usb 1-1: USB disconnect, device number 8
[   89.900626][  T789] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[   89.924132][  T789] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[   89.930536][ T6491] loop3: detected capacity change from 0 to 2048
[   89.933365][  T789] sierra 1-1:0.3: device disconnected
[   89.947924][ T6491] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   89.966107][ T6493] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   90.008141][ T6495] loop1: detected capacity change from 0 to 256
[   90.031456][ T6495] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[   90.050252][ T6495] exFAT-fs (loop1): valid_size(150994954) is greater than size(10)
[   90.140727][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'.
[   90.496860][ T6517] loop3: detected capacity change from 0 to 256
[   90.525701][ T6517] FAT-fs (loop3): Directory bread(block 64) failed
[   90.528585][ T6517] FAT-fs (loop3): Directory bread(block 65) failed
[   90.531555][ T6517] FAT-fs (loop3): Directory bread(block 66) failed
[   90.551315][ T6517] FAT-fs (loop3): Directory bread(block 67) failed
[   90.556225][ T6517] FAT-fs (loop3): Directory bread(block 68) failed
[   90.558562][ T6517] FAT-fs (loop3): Directory bread(block 69) failed
[   90.565409][ T6517] FAT-fs (loop3): Directory bread(block 70) failed
[   90.568542][ T6517] FAT-fs (loop3): Directory bread(block 71) failed
[   90.585494][ T6517] FAT-fs (loop3): Directory bread(block 72) failed
[   90.593777][ T6517] FAT-fs (loop3): Directory bread(block 73) failed
[   90.649017][ T6521] loop1: detected capacity change from 0 to 512
[   90.656248][ T6521] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   90.660346][ T6521] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[   90.666773][ T6521] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.228: Corrupt directory, running e2fsck is recommended
[   90.672950][ T6521] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[   90.676518][ T6521] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.228: corrupted in-inode xattr: invalid ea_ino
[   90.683783][ T6521] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.228: couldn't read orphan inode 15 (err -117)
[   90.690332][ T6521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.720135][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.990873][ T6539] bridge0: entered allmulticast mode
[   91.182001][  T972] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   91.299089][ T6545] loop1: detected capacity change from 0 to 4096
[   91.337571][ T6545] ntfs3(loop1): Failed to load $Extend (-22).
[   91.342559][ T6545] ntfs3(loop1): Failed to initialize $Extend.
[   91.361556][  T972] usb 4-1: config index 0 descriptor too short (expected 63524, got 36)
[   91.366306][  T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   91.417960][  T972] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   91.423645][  T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.427036][  T972] usb 4-1: Product: syz
[   91.428751][  T972] usb 4-1: Manufacturer: syz
[   91.430623][  T972] usb 4-1: SerialNumber: syz
[   91.444547][  T972] usb 4-1: config 0 descriptor??
[   91.454473][  T972] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00
[   91.476103][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'.
[   91.647800][ T6547] loop0: detected capacity change from 0 to 32768
[   91.660823][ T6547] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.239 (6547)
[   91.702328][ T6547] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   91.709019][ T6547] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   91.713152][  T972] usb 4-1: USB disconnect, device number 3
[   91.735944][ T6037] udevd[6037]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   91.835043][ T6547] BTRFS info (device loop0): enabling ssd optimizations
[   91.838091][ T6547] BTRFS info (device loop0): enabling free space tree
[   91.840936][ T6547] BTRFS info (device loop0): use zstd compression, level 3
[   91.940764][ T5828] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   92.338149][ T6583] trusted_key: encrypted_key: key user:syz not found
[   92.518480][ T6590] team0: Port device team_slave_0 removed
[   92.557281][ T6593] netlink: 10 bytes leftover after parsing attributes in process `syz.3.253'.
[   94.024642][ T6641] overlayfs: failed to decode file handle (len=4, type=251, flags=0, err=-22)
[   94.638295][ T6657] loop0: detected capacity change from 0 to 1024
[   94.772628][ T1092] hfsplus: b-tree write err: -5, ino 4
[   94.878639][ T6661] block device autoloading is deprecated and will be removed.
[   95.593116][  T789] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   95.748413][  T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[   95.752135][  T789] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[   95.756127][  T789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[   95.760071][  T789] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[   95.769392][  T789] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[   95.773399][  T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.776386][  T789] usb 2-1: Product: syz
[   95.778008][  T789] usb 2-1: Manufacturer: syz
[   95.779967][  T789] usb 2-1: SerialNumber: syz
[   95.791062][  T789] usb 2-1: config 0 descriptor??
[   95.806293][  T789] usb 2-1: NFC: Unable to get FW version
[   95.815782][  T789] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -90
[   96.013130][ T5291] usb 2-1: USB disconnect, device number 5
[   96.852052][ T6706] loop0: detected capacity change from 0 to 764
[   97.162614][   T33] audit: type=1800 audit(1759241198.973:8): pid=6720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.306" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[   97.386689][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'.
[   97.390499][ T6729] tipc: Started in network mode
[   97.394468][ T6729] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711
[   97.398454][ T6729] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   97.954229][ T6741] loop3: detected capacity change from 0 to 1024
[   98.014125][ T4310] hfsplus: b-tree write err: -5, ino 4
[   98.154005][ T6749] loop3: detected capacity change from 0 to 128
[   98.205694][ T6749] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   98.233422][ T6749] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   98.241878][  T789] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   98.246019][ T5291] kernel write not supported for file /video8 (pid: 5291 comm: kworker/0:3)
[   98.276651][ T6067] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   98.396128][  T789] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[   98.400261][  T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.413378][  T789] usb 1-1: config 0 descriptor??
[   98.422901][  T789] gspca_main: cpia1-2.14.0 probing 0813:0001
[   98.592089][  T972] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   98.751976][  T972] usb 2-1: Using ep0 maxpacket: 16
[   98.757950][  T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.764532][  T972] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   98.769820][  T972] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   98.773811][  T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.786448][  T972] usb 2-1: config 0 descriptor??
[   98.854359][  T789] cpia1 1-1:0.0: unexpected state after lo power cmd: 00
[   99.226135][  T972] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input8
[   99.240372][  T789] gspca_cpia1: usb_control_msg 02, error -71
[   99.253668][  T789] gspca_cpia1: usb_control_msg 05, error -71
[   99.256660][  T789] cpia1 1-1:0.0: unexpected systemstate: 00
[   99.268507][  T789] usb 1-1: USB disconnect, device number 9
[   99.352423][  T972] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   99.850206][  T789] usb 2-1: USB disconnect, device number 6
[   99.869062][ T6808] loop0: detected capacity change from 0 to 4096
[   99.988700][ T6811] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  100.055950][ T6814] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.366708][ T6836] netlink: 'syz.1.350': attribute type 2 has an invalid length.
[  101.759738][  T789] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  101.914659][  T789] usb 1-1: config 5 has an invalid interface number: 179 but max is 0
[  101.918194][  T789] usb 1-1: config 5 has no interface number 0
[  101.926746][  T789] usb 1-1: New USB device found, idVendor=19d2, idProduct=0038, bcdDevice= e.8c
[  101.930108][  T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.933942][  T789] usb 1-1: Product: syz
[  101.935615][  T789] usb 1-1: Manufacturer: syz
[  101.937602][  T789] usb 1-1: SerialNumber: syz
[  102.123247][ T6843] loop3: detected capacity change from 0 to 40427
[  102.139304][ T6843] F2FS-fs (loop3): invalid crc value
[  102.161052][  T789] usb 1-1: bad CDC descriptors
[  102.183813][  T789] usb 1-1: USB disconnect, device number 10
[  102.236496][ T6843] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  102.260239][ T6843] F2FS-fs (loop3): Start checkpoint disabled!
[  102.271440][ T6843] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  102.295931][ T6849] loop1: detected capacity change from 0 to 4096
[  102.305038][ T6849] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  102.329486][ T6849] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  102.333244][ T6849] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  102.368220][ T1092] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[  102.372371][ T5833] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  102.375393][ T5833] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  102.378532][ T5833] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  102.391200][ T1092] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[  103.116532][ T6864] loop3: detected capacity change from 0 to 32768
[  103.120495][ T6864] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.360 (6864)
[  103.127762][ T6864] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  103.144622][ T6864] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  103.189123][ T6864] BTRFS info (device loop3): enabling ssd optimizations
[  103.191631][ T6864] BTRFS info (device loop3): enabling free space tree
[  103.284744][ T6067] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  103.406900][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  103.427172][ T6896] input: syz0 as /devices/virtual/input/input9
[  103.612316][    T9] usb 2-1: Using ep0 maxpacket: 8
[  103.616990][    T9] usb 2-1: config 2 has an invalid interface number: 31 but max is 0
[  103.620115][    T9] usb 2-1: config 2 has no interface number 0
[  103.637165][    T9] usb 2-1: config 2 interface 31 has no altsetting 0
[  103.645384][    T9] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  103.650754][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.655338][    T9] usb 2-1: Product: syz
[  103.657045][    T9] usb 2-1: Manufacturer: syz
[  103.658858][    T9] usb 2-1: SerialNumber: syz
[  103.937645][ T6909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.371'.
[  104.049445][ T5891] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  104.221866][ T5891] usb 4-1: Using ep0 maxpacket: 16
[  104.227463][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.231237][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.235473][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  104.243288][ T5891] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  104.246864][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.253452][ T5891] usb 4-1: config 0 descriptor??
[  104.288336][    T9] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22
[  104.296063][    T9] usb 2-1: USB disconnect, device number 7
[  104.384652][  T972] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  104.533461][  T972] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  104.537529][  T972] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 54257, setting to 64
[  104.542666][  T972] usb 1-1: config 1 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  104.548322][  T972] usb 1-1: config 1 interface 0 has no altsetting 0
[  104.554615][  T972] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  104.558559][  T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.564491][  T972] usb 1-1: Product: syz
[  104.566278][  T972] usb 1-1: Manufacturer: syz
[  104.568231][  T972] usb 1-1: SerialNumber: syz
[  104.574935][ T6921] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  104.675757][ T5891] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  104.681194][ T5891] microsoft 0003:045E:07DA.0003: no inputs found
[  104.684012][ T5891] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway
[  104.790936][  T972] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  104.807649][  T972] usb 1-1: USB disconnect, device number 11
[  104.881371][ T5891] usb 4-1: USB disconnect, device number 4
[  104.974472][ T6923] loop1: detected capacity change from 0 to 32768
[  104.977168][ T6923] btrfs: Deprecated parameter 'usebackuproot'
[  104.979468][ T6923] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  104.985383][ T6923] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.378 (6923)
[  105.000139][ T6923] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  105.004633][ T6923] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  105.008132][ T6923] workqueue: max_active 40574 requested for btrfs-worker is out of range, clamping between 1 and 2048
[  105.013260][ T6923] workqueue: max_active 40574 requested for btrfs-delalloc is out of range, clamping between 1 and 2048
[  105.051034][ T6923] workqueue: max_active 40574 requested for btrfs-endio is out of range, clamping between 1 and 2048
[  105.065688][ T6923] workqueue: max_active 40574 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[  105.080530][ T6923] workqueue: max_active 40574 requested for btrfs-rmw is out of range, clamping between 1 and 2048
[  105.096468][ T6923] workqueue: max_active 40574 requested for btrfs-endio-write is out of range, clamping between 1 and 2048
[  105.111574][ T6923] workqueue: max_active 40574 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048
[  105.163776][ T6923] BTRFS info (device loop1): rebuilding free space tree
[  105.185574][ T6923] BTRFS info (device loop1): enabling ssd optimizations
[  105.188545][ T6923] BTRFS info (device loop1): turning on async discard
[  105.191467][ T6923] BTRFS info (device loop1): enabling free space tree
[  105.194385][ T6923] BTRFS info (device loop1): force clearing of disk cache
[  105.197390][ T6923] BTRFS info (device loop1): doing ref verification
[  105.200181][ T6923] BTRFS info (device loop1): trying to use backup root at mount time
[  105.204064][ T6923] BTRFS info (device loop1): use zlib compression, level 3
[  105.230887][ T6923] BTRFS info (device loop1): balance: start -f -slimit=8589934593
[  105.235546][ T6923] BTRFS info (device loop1): left=0, need=98304, flags=2
[  105.238987][ T6923] BTRFS info (device loop1): space_info SYSTEM (sub-group id 0) has 0 free, is not full
[  105.243888][ T6923] BTRFS info (device loop1): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[  105.249900][ T6923] BTRFS info (device loop1): global_block_rsv: size 1441792 reserved 1441792
[  105.253926][ T6923] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[  105.257180][ T6923] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[  105.260432][ T6923] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0
[  105.264445][ T6923] BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0
[  105.286880][ T6923] BTRFS info (device loop1): relocating block group 1048576 flags system
[  105.333260][ T6923] BTRFS info (device loop1): balance: ended with status: 0
[  105.376365][ T5833] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  105.404753][ T6943] loop0: detected capacity change from 0 to 4096
[  105.424001][ T6943] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  105.471872][ T6943] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  105.478747][ T6943] ntfs3(loop0): ino=19, mi_enum_attr
[  105.714854][ T6953] loop1: detected capacity change from 0 to 1024
[  105.746712][ T6953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.772860][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.863834][ T6962] tipc: Started in network mode
[  105.866145][ T6962] tipc: Node identity 7f000001, cluster identity 4711
[  105.869642][ T6962] tipc: New replicast peer: 0.0.0.0
[  105.876266][ T6962] tipc: Enabled bearer <udp:syz2>, priority 10
[  106.148565][ T6975] netlink: zone id is out of range
[  106.155461][ T6975] netlink: zone id is out of range
[  106.158168][ T6975] netlink: zone id is out of range
[  106.161327][ T6975] netlink: zone id is out of range
[  106.164701][ T6975] netlink: zone id is out of range
[  106.168402][ T6975] netlink: zone id is out of range
[  106.177201][ T6975] netlink: zone id is out of range
[  106.181447][ T6975] netlink: zone id is out of range
[  106.184705][ T6975] netlink: zone id is out of range
[  106.187951][ T6975] netlink: zone id is out of range
[  106.455814][ T6977] loop3: detected capacity change from 0 to 8192
[  106.497174][ T6560]  loop3: p1 < > p2 p3 < p5 >
[  106.498952][ T6560] loop3: partition table partially beyond EOD, truncated
[  106.503237][ T6560] loop3: p1 start 1275068416 is beyond EOD, truncated
[  106.514707][ T6979] loop0: detected capacity change from 0 to 16
[  106.523891][ T6977]  loop3: p1 < > p2 p3 < p5 >
[  106.525995][ T6977] loop3: partition table partially beyond EOD, truncated
[  106.537507][ T6977] loop3: p1 start 1275068416 is beyond EOD, truncated
[  106.553915][ T6979] erofs (device loop0): mounted with root inode @ nid 36.
[  107.064398][ T6982] loop0: detected capacity change from 0 to 131072
[  107.130853][ T6982] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  107.134470][ T6982] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  107.202480][ T6982] F2FS-fs (loop0): invalid crc value
[  107.341872][  T789] tipc: Node number set to 2130706433
[  107.351972][ T6982] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  107.359217][ T6982] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  107.362013][ T6982] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  107.399017][ T6560] udevd[6560]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  107.410736][ T5827] udevd[5827]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  107.424234][ T6036] udevd[6036]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  107.480095][ T5831] udevd[5831]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  107.487952][ T6036] udevd[6036]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  107.598211][ T6995] loop3: detected capacity change from 0 to 256
[  107.627135][ T6995] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  107.632373][ T6995] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  107.646700][ T6995] exFAT-fs (loop3): valid_size(150994954) is greater than size(10)
[  107.673847][   T33] audit: type=1800 audit(1759241209.493:9): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.395" name="file1" dev="loop3" ino=1048599 res=0 errno=0
[  107.909724][ T7001] netlink: 72 bytes leftover after parsing attributes in process `syz.0.394'.
[  107.913566][ T7001] netlink: 'syz.0.394': attribute type 1 has an invalid length.
[  108.041854][  T789] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  108.214922][  T789] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  108.219183][  T789] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  108.232101][  T789] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  108.240363][  T789] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  108.244690][  T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.248131][  T789] usb 4-1: Product: syz
[  108.249886][  T789] usb 4-1: Manufacturer: syz
[  108.252512][    T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  108.259395][  T789] usb 4-1: SerialNumber: syz
[  108.260073][ T7011] loop1: detected capacity change from 0 to 1764
[  108.270149][  T789] usb 4-1: config 0 descriptor??
[  108.280414][ T6999] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  108.286639][ T6999] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  108.290216][ T7011] iso9660: Corrupted directory entry in block 2 of inode 1920
[  108.291086][  T789] usb 4-1: ucan: probing device on interface #0
[  108.428370][    T9] usb 1-1: config 8 has an invalid interface number: 80 but max is 0
[  108.434693][    T9] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  108.441043][    T9] usb 1-1: config 8 has no interface number 0
[  108.444505][    T9] usb 1-1: config 8 interface 80 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32
[  108.450162][    T9] usb 1-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  108.495825][    T9] usb 1-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  108.502535][    T9] usb 1-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14
[  108.507377][    T9] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[  108.510316][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.517584][ T7007] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  108.524342][    T9] usb 1-1: NFC: intf ffff888021fed000 id ffffffff8e6e76c0
[  108.829171][   T24] usb 1-1: USB disconnect, device number 12
[  108.996974][  T789] ucan 4-1:0.0 can0: registered device
[  109.176449][  T789] ucan 4-1:0.0 can0: firmware string: unknown
[  109.192361][  T789] usb 4-1: USB disconnect, device number 5
[  109.428133][ T7022] loop0: detected capacity change from 0 to 256
[  109.456060][ T7022] FAT-fs (loop0): Directory bread(block 64) failed
[  109.458823][ T7022] FAT-fs (loop0): Directory bread(block 65) failed
[  109.464500][ T7022] FAT-fs (loop0): Directory bread(block 66) failed
[  109.467479][ T7022] FAT-fs (loop0): Directory bread(block 67) failed
[  109.470226][ T7022] FAT-fs (loop0): Directory bread(block 68) failed
[  109.474937][ T7022] FAT-fs (loop0): Directory bread(block 69) failed
[  109.477953][ T7022] FAT-fs (loop0): Directory bread(block 70) failed
[  109.480731][ T7022] FAT-fs (loop0): Directory bread(block 71) failed
[  109.484245][ T7022] FAT-fs (loop0): Directory bread(block 72) failed
[  109.486956][ T7022] FAT-fs (loop0): Directory bread(block 73) failed
[  109.505994][ T7022] Zero length message leads to an empty skb
[  109.543284][   T24] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  109.610661][ T7022] syz.0.406: attempt to access beyond end of device
[  109.610661][ T7022] loop0: rw=2049, sector=1224, nr_sectors = 32 limit=256
[  109.617773][ T7022] syz.0.406: attempt to access beyond end of device
[  109.617773][ T7022] loop0: rw=2049, sector=1288, nr_sectors = 32 limit=256
[  109.624919][ T7022] syz.0.406: attempt to access beyond end of device
[  109.624919][ T7022] loop0: rw=2049, sector=1352, nr_sectors = 32 limit=256
[  109.630487][ T7022] syz.0.406: attempt to access beyond end of device
[  109.630487][ T7022] loop0: rw=2049, sector=1416, nr_sectors = 32 limit=256
[  109.636374][ T7022] syz.0.406: attempt to access beyond end of device
[  109.636374][ T7022] loop0: rw=2049, sector=1512, nr_sectors = 32 limit=256
[  109.642485][ T7022] syz.0.406: attempt to access beyond end of device
[  109.642485][ T7022] loop0: rw=2049, sector=1576, nr_sectors = 32 limit=256
[  109.648353][ T7022] syz.0.406: attempt to access beyond end of device
[  109.648353][ T7022] loop0: rw=2049, sector=1640, nr_sectors = 32 limit=256
[  109.654372][ T7022] syz.0.406: attempt to access beyond end of device
[  109.654372][ T7022] loop0: rw=2049, sector=1704, nr_sectors = 32 limit=256
[  109.660145][ T7022] syz.0.406: attempt to access beyond end of device
[  109.660145][ T7022] loop0: rw=2049, sector=1768, nr_sectors = 32 limit=256
[  109.666557][ T7022] syz.0.406: attempt to access beyond end of device
[  109.666557][ T7022] loop0: rw=2049, sector=1864, nr_sectors = 32 limit=256
[  109.708392][   T24] usb 2-1: config 8 has an invalid interface number: 223 but max is 0
[  109.712165][   T24] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  109.716226][   T24] usb 2-1: config 8 has no interface number 0
[  109.718464][   T24] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  109.746153][   T24] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  109.749998][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.758895][   T24] usb 2-1: Product: syz
[  109.760279][   T24] usb 2-1: Manufacturer: syz
[  109.763447][   T24] usb 2-1: SerialNumber: syz
[  109.993974][   T24] usb 2-1: USB disconnect, device number 8
[  110.394636][  T789] kernel read not supported for file /audio1 (pid: 789 comm: kworker/0:2)
[  110.565861][ T7050] loop0: detected capacity change from 0 to 2048
[  110.621079][ T7053] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.650142][ T7050] NILFS (loop0): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3)
[  110.656143][ T7050] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16)
[  110.675757][ T7050] Remounting filesystem read-only
[  110.677847][ T7050] NILFS (loop0): error -5 truncating bmap (ino=16)
[  110.692340][ T7055] loop1: detected capacity change from 0 to 256
[  110.702760][ T7055] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  110.729371][ T5828] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  110.937940][ T7059] capability: warning: `syz.0.420' uses deprecated v2 capabilities in a way that may be insecure
[  111.422233][ T7067] block nbd3: NBD_DISCONNECT
[  111.425860][ T7067] block nbd3: Send disconnect failed -22
[  111.429322][ T7067] block nbd3: Send disconnect failed -22
[  111.433604][ T7066] block nbd3: Disconnected due to user request.
[  111.437936][ T7066] block nbd3: shutting down sockets
[  111.473090][ T7065] loop0: detected capacity change from 0 to 32768
[  111.476324][ T7065] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.423 (7065)
[  111.487475][ T7065] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  111.491164][ T7065] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  111.538785][ T7065] BTRFS info (device loop0): rebuilding free space tree
[  111.557866][ T7065] BTRFS info (device loop0): enabling ssd optimizations
[  111.560344][ T7065] BTRFS info (device loop0): turning on sync discard
[  111.566168][ T7065] BTRFS info (device loop0): enabling free space tree
[  111.569054][ T7065] BTRFS info (device loop0): force clearing of disk cache
[  111.573467][ T7065] BTRFS info (device loop0): enabling auto defrag
[  111.575773][ T7065] BTRFS info (device loop0): max_inline set to 0
[  111.575892][ T7087] batman_adv: batadv0: Adding interface: dummy0
[  111.580860][ T7087] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.590851][ T7087] batman_adv: batadv0: Interface activated: dummy0
[  111.628792][ T7087] net_ratelimit: 17 callbacks suppressed
[  111.628809][ T7087] batadv0: mtu less than device minimum
[  111.635140][ T7087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  111.640947][ T7087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  111.646300][ T7087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  111.651054][ T7087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  111.656340][ T7087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  111.661242][ T7087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  111.665817][ T7087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  111.670453][ T7087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  111.675285][ T7087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  111.699831][ T7088] netlink: 'syz.3.426': attribute type 10 has an invalid length.
[  111.708642][ T7088] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.731143][ T7088] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  111.769168][ T7094] loop1: detected capacity change from 0 to 256
[  111.771144][ T5828] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  111.783831][ T7094] exfat: Deprecated parameter 'utf8'
[  111.786123][ T7094] exfat: Deprecated parameter 'utf8'
[  111.852447][ T7094] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8ecf9da9, utbl_chksum : 0xe619d30d)
[  111.901260][ T7096] loop3: detected capacity change from 0 to 512
[  111.932679][ T7094] loop1: detected capacity change from 256 to 0
[  111.989211][ T7096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.022522][ T7096] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.039836][ T7103] loop0: detected capacity change from 0 to 1024
[  112.040622][ T6113] Buffer I/O error on dev loop1, logical block 0, lost sync page write
[  112.073878][ T7103] EXT4-fs: Ignoring removed nobh option
[  112.085315][ T7103] EXT4-fs: Ignoring removed bh option
[  112.096408][   T33] audit: type=1800 audit(1759241213.913:10): pid=7096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.430" name="file1" dev="loop3" ino=15 res=0 errno=0
[  112.109495][ T7103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.157391][ T7103] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  112.168756][ T7103] EXT4-fs (loop0): Remounting filesystem read-only
[  112.178634][ T6067] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.212338][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.231572][ T7107] loop3: detected capacity change from 0 to 64
[  112.391391][ T5716] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.511423][ T5716] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.686734][ T5716] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.773631][ T5716] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.785347][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.791440][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.796460][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.800126][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.807706][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  113.029609][ T5716] bridge_slave_1: left allmulticast mode
[  113.062153][ T5716] bridge_slave_1: left promiscuous mode
[  113.064681][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.075716][ T5716] bridge_slave_0: left allmulticast mode
[  113.078368][ T5716] bridge_slave_0: left promiscuous mode
[  113.081081][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.488624][ T5716] bridge0 (unregistering): left allmulticast mode
[  113.530327][ T7143] netlink: 1 bytes leftover after parsing attributes in process `syz.3.448'.
[  113.587495][ T7145] loop3: detected capacity change from 0 to 512
[  113.618627][ T7145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.649206][ T7145] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  113.742190][ T6067] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.932317][ T5716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.952586][ T5716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  113.968607][ T5716] bond0 (unregistering): Released all slaves
[  114.271239][ T7131] chnl_net:caif_netlink_parms(): no params data found
[  114.579428][ T7188] Bluetooth: MGMT ver 1.23
[  114.714884][ T5716] hsr_slave_0: left promiscuous mode
[  114.717995][ T5716] hsr_slave_1: left promiscuous mode
[  114.720679][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.724662][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.728402][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.730913][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.743226][ T5716] veth1_macvtap: left promiscuous mode
[  114.745296][ T5716] veth0_macvtap: left promiscuous mode
[  114.747669][ T5716] veth1_vlan: left promiscuous mode
[  114.749564][ T5716] veth0_vlan: left promiscuous mode
[  114.884042][ T5213] Bluetooth: hci2: command tx timeout
[  115.577200][ T5716] team0 (unregistering): Port device team_slave_1 removed
[  116.005766][ T7190] netlink: 36 bytes leftover after parsing attributes in process `syz.0.465'.
[  116.009743][ T7190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.465'.
[  116.015861][ T7131] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.019148][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.029365][ T7131] bridge_slave_0: entered allmulticast mode
[  116.039511][ T7131] bridge_slave_0: entered promiscuous mode
[  116.046670][ T7131] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.050649][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.059729][ T7131] bridge_slave_1: entered allmulticast mode
[  116.070603][ T7131] bridge_slave_1: entered promiscuous mode
[  116.079454][ T7200] netlink: 'syz.3.469': attribute type 4 has an invalid length.
[  116.145654][ T7131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.150341][ T7131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.187838][ T7131] team0: Port device team_slave_0 added
[  116.193366][ T7131] team0: Port device team_slave_1 added
[  116.285634][ T7131] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.288727][ T7131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.324394][ T7131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.348369][ T7131] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.351359][ T7131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.390396][ T7131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.400852][ T7220] netlink: 'syz.0.476': attribute type 1 has an invalid length.
[  116.439801][ T7220] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.480939][ T7220] macvlan2: entered promiscuous mode
[  116.488851][ T7220] macvlan2: entered allmulticast mode
[  116.496220][ T7220] bond1: entered promiscuous mode
[  116.498439][ T7220] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  116.504400][ T7220] bond1: left promiscuous mode
[  116.550153][ T7131] hsr_slave_0: entered promiscuous mode
[  116.557241][ T7131] hsr_slave_1: entered promiscuous mode
[  116.561069][ T7131] debugfs: 'hsr0' already exists in 'hsr'
[  116.571816][ T7131] Cannot create hsr debugfs directory
[  116.875690][ T7131] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  116.885059][ T7131] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  116.891212][ T7131] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  116.898190][ T7131] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  116.972699][ T5213] Bluetooth: hci2: command tx timeout
[  116.998298][ T7131] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.023476][ T7131] 8021q: adding VLAN 0 to HW filter on device team0
[  117.037512][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.040491][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.056866][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.059959][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.161420][ T7264] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  117.316016][ T7131] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.431507][ T7284] syz.0.492 uses obsolete (PF_INET,SOCK_PACKET)
[  117.588451][ T7298] loop0: detected capacity change from 0 to 128
[  117.614962][ T7131] veth0_vlan: entered promiscuous mode
[  117.624717][ T7131] veth1_vlan: entered promiscuous mode
[  117.636158][   T33] audit: type=1800 audit(1759241219.453:11): pid=7298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.498" name="file1" dev="loop0" ino=1048607 res=0 errno=0
[  117.665240][ T7131] veth0_macvtap: entered promiscuous mode
[  117.689844][ T7131] veth1_macvtap: entered promiscuous mode
[  117.710935][ T7131] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.723857][ T7131] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.734240][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.738168][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.747540][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.753110][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.831531][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.837265][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.887668][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.890331][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.091240][ T7316] loop0: detected capacity change from 0 to 128
[  118.393050][ T7320] net_ratelimit: 12 callbacks suppressed
[  118.393115][ T7320] IPv6: addrconf: prefix option has invalid lifetime
[  118.566269][ T7323] loop6: detected capacity change from 0 to 524287487
[  118.570640][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.576281][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.580062][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.583966][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.587709][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.591043][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.596199][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.600625][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.604936][ T6560] ldm_validate_partition_table(): Disk read failed.
[  118.609972][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.615837][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.620107][ T6560] Dev loop6: unable to read RDB block 0
[  118.625176][ T6560]  loop6: unable to read partition table
[  118.629685][ T7323] ldm_validate_partition_table(): Disk read failed.
[  118.635611][ T7323] Dev loop6: unable to read RDB block 0
[  118.638705][ T7323]  loop6: unable to read partition table
[  118.641418][ T7323] loop_reread_partitions: partition scan of loop6 (3xC) failed (rc=-5)
[  118.786940][ T7330] netlink: 'syz.0.509': attribute type 1 has an invalid length.
[  119.052710][ T5829] Bluetooth: hci2: command tx timeout
[  119.287552][ T7340] infiniband syz1: set down
[  119.290149][ T7340] infiniband syz1: added ipvlan0
[  119.658304][ T7340] RDS/IB: syz1: added
[  119.660673][ T7340] smc: adding ib device syz1 with port count 1
[  119.665836][ T7340] smc:    ib device syz1 port 1 has pnetid 
[  119.762002][ T5829] Bluetooth: hci3: command 0x1003 tx timeout
[  119.766094][ T5213] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  120.108601][ T7353] loop3: detected capacity change from 0 to 4096
[  120.126995][ T7355] sctp: [Deprecated]: syz.0.520 (pid 7355) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.126995][ T7355] Use struct sctp_sack_info instead
[  120.135495][ T7353] ntfs3(loop3): Primary boot: unsupported bytes per index 8192.
[  120.138554][ T7353] ntfs3(loop3): try to read out of volume at offset 0x1ffe00
[  120.525282][ T7373] raw_sendmsg: syz.3.529 forgot to set AF_INET. Fix it!
[  120.641529][ T7383] loop4: detected capacity change from 0 to 1024
[  120.715998][ T7383] hfsplus: xattr search failed
[  120.740114][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'.
[  120.861869][ T7395] loop3: detected capacity change from 0 to 256
[  120.865346][ T7395] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  120.876357][ T7395] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  121.102354][ T5891] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[  121.122325][ T5213] Bluetooth: hci2: command tx timeout
[  121.565682][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'.
[  121.584013][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  121.591903][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.595993][ T5891] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  121.599542][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.611100][ T5891] usb 5-1: config 0 descriptor??
[  121.638550][ T7412] bond_slave_0: entered promiscuous mode
[  121.641417][ T7412] bond_slave_1: entered promiscuous mode
[  121.644351][ T7412] macvlan2: entered allmulticast mode
[  121.648442][ T7412] bond0: entered allmulticast mode
[  121.650732][ T7412] bond_slave_0: entered allmulticast mode
[  121.653558][ T7412] bond_slave_1: entered allmulticast mode
[  121.656677][ T7412] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  121.661313][ T7412] bond0: left allmulticast mode
[  121.663558][ T7412] bond_slave_0: left allmulticast mode
[  121.666010][ T7412] bond_slave_1: left allmulticast mode
[  121.668636][ T7412] bond_slave_0: left promiscuous mode
[  121.670977][ T7412] bond_slave_1: left promiscuous mode
[  122.053880][ T5891] glorious 0003:258A:0036.0004: unknown main item tag 0x1
[  122.079805][ T7425] loop0: detected capacity change from 0 to 1024
[  122.080119][ T5891] glorious 0003:258A:0036.0004: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.4-1/input0
[  122.108150][ T7425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.153361][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.197685][ T7431] loop0: detected capacity change from 0 to 164
[  122.222624][ T7431] iso9660: Corrupted directory entry in block 2 of inode 1920
[  122.271599][ T7024] usb 5-1: USB disconnect, device number 2
[  122.287348][ T7427] loop3: detected capacity change from 0 to 32768
[  122.291489][ T7427] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.554 (7427)
[  122.324085][ T7427] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.337998][ T7427] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  122.372506][ T7435] loop0: detected capacity change from 0 to 4096
[  122.445427][ T7427] BTRFS info (device loop3): rebuilding free space tree
[  122.460310][ T7427] BTRFS info (device loop3): disabling free space tree
[  122.468196][ T7427] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  122.480325][ T7427] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  122.492681][ T7427] BTRFS info (device loop3): setting nodatasum
[  122.495357][ T7427] BTRFS info (device loop3): enabling ssd optimizations
[  122.498290][ T7427] BTRFS info (device loop3): turning off barriers
[  122.500762][ T7427] BTRFS info (device loop3): turning on flush-on-commit
[  122.504285][ T7427] BTRFS info (device loop3): force clearing of disk cache
[  122.507183][ T7427] BTRFS info (device loop3): doing ref verification
[  122.509764][ T7427] BTRFS info (device loop3): max_inline set to 0
[  122.540391][ T6067] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.590644][ T5272] udevd[5272]: worker [6560] terminated by signal 33 (Unknown signal 33)
[  122.605159][ T5272] udevd[5272]: worker [6560] failed while handling '/devices/virtual/block/loop3'
[  122.614952][ T5272] udevd[5272]: worker [5831] terminated by signal 33 (Unknown signal 33)
[  122.623903][ T5272] udevd[5272]: worker [5831] failed while handling '/devices/virtual/block/loop0'
[  122.676753][ T7459] loop0: detected capacity change from 0 to 256
[  122.702805][ T7459] vfat: Bad value for 'tz'
[  122.732422][ T7459] 9pnet_fd: p9_fd_create_tcp (7459): problem connecting socket to 127.0.0.1
[  123.089401][ T7477] netlink: 'syz.0.569': attribute type 29 has an invalid length.
[  123.096117][ T7477] netlink: 'syz.0.569': attribute type 29 has an invalid length.
[  123.205436][ T7484] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005
[  123.291184][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.572'.
[  123.785206][   T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  123.952286][   T24] usb 4-1: Using ep0 maxpacket: 16
[  123.958294][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  123.967827][   T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  123.972510][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.975956][   T24] usb 4-1: Product: syz
[  123.980208][   T24] usb 4-1: Manufacturer: syz
[  123.986545][   T24] usb 4-1: SerialNumber: syz
[  124.007654][   T24] usb 4-1: config 0 descriptor??
[  124.029624][   T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  124.075597][   T24] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  124.198900][ T7511] loop4: detected capacity change from 0 to 128
[  124.204429][ T7511] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  124.244845][ T7511] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.297668][ T7513] trusted_key: encrypted_key: insufficient parameters specified
[  124.475036][ T7522] loop4: detected capacity change from 0 to 256
[  124.488264][ T7522] exfat: Unknown parameter '-ڴgBBgλ#;2!"|XaXǩ'
[  124.636322][ T7529] loop4: detected capacity change from 0 to 128
[  124.643142][   T24] em28xx 4-1:0.0: chip ID is em2765
[  124.660968][ T7529] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  124.668823][ T7529] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.872128][ T7527] loop0: detected capacity change from 0 to 32768
[  125.322147][   T24] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  125.339134][   T24] em28xx 4-1:0.0: board has no eeprom
[  126.407742][ T7501] em28xx 4-1:0.0: writing to i2c device at 0x8 failed (error=-5)
[  126.461912][   T24] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  126.465413][   T24] em28xx 4-1:0.0: dvb set to bulk mode.
[  126.473101][ T7024] em28xx 4-1:0.0: Binding DVB extension
[  126.532185][   T24] usb 4-1: USB disconnect, device number 6
[  126.555376][   T24] em28xx 4-1:0.0: Disconnecting em28xx
[  126.687800][ T7024] em28xx 4-1:0.0: Registering input extension
[  126.700717][   T24] em28xx 4-1:0.0: Closing input extension
[  126.806903][   T24] em28xx 4-1:0.0: Freeing device
[  127.024849][ T7552] capability: warning: `syz.3.596' uses 32-bit capabilities (legacy support in use)
[  127.224099][   T33] audit: type=1800 audit(1759241229.033:12): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.602" name="bus" dev="overlay" ino=919 res=0 errno=0
[  127.248089][ T7568] 9pnet: p9_errstr2errno: server reported unknown error @
[  127.834072][ T7577] Driver unsupported XDP return value 0 on prog  (id 52) dev N/A, expect packet loss!
[  127.907659][ T7583] cgroup: none used incorrectly
[  127.994838][ T7590] vlan2: entered promiscuous mode
[  127.997036][ T7590] macvtap0: entered promiscuous mode
[  128.190224][ T7598] loop3: detected capacity change from 0 to 256
[  128.210196][ T7598] FAT-fs (loop3): Directory bread(block 64) failed
[  128.213372][ T7598] FAT-fs (loop3): Directory bread(block 65) failed
[  128.218038][ T7598] FAT-fs (loop3): Directory bread(block 66) failed
[  128.221024][ T7598] FAT-fs (loop3): Directory bread(block 67) failed
[  128.226462][ T7598] FAT-fs (loop3): Directory bread(block 68) failed
[  128.228627][ T7598] FAT-fs (loop3): Directory bread(block 69) failed
[  128.231326][ T7598] FAT-fs (loop3): Directory bread(block 70) failed
[  128.234110][ T7598] FAT-fs (loop3): Directory bread(block 71) failed
[  128.236934][ T7598] FAT-fs (loop3): Directory bread(block 72) failed
[  128.239855][ T7598] FAT-fs (loop3): Directory bread(block 73) failed
[  128.652990][ T7024] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  128.814360][ T7024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.821448][ T7024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.834835][ T7024] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  128.838960][ T7024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.853894][ T7024] usb 5-1: config 0 descriptor??
[  128.864678][ T7623] netlink: 40 bytes leftover after parsing attributes in process `syz.0.624'.
[  129.275564][ T7024] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0
[  129.288543][ T7024] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0
[  129.666553][ T7024] arvo 0003:1E7D:30D4.0005: couldn't init struct arvo_device
[  129.668901][ T7024] arvo 0003:1E7D:30D4.0005: couldn't install keyboard
[  129.672494][ T7024] arvo 0003:1E7D:30D4.0005: probe with driver arvo failed with error -71
[  129.677306][ T7024] usb 5-1: USB disconnect, device number 3
[  129.700199][ T7635] loop3: detected capacity change from 0 to 40427
[  129.704431][ T7635] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  129.707502][ T7635] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  129.753741][ T7635] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  129.757990][ T7635] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  129.760481][ T7635] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  131.777844][ T7687] netlink: 152 bytes leftover after parsing attributes in process `syz.0.642'.
[  131.793049][ T7687] tipc: Enabled bearer <udp:syz0>, priority 0
[  132.003996][ T7684] loop3: detected capacity change from 0 to 32768
[  132.087755][ T7684] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  132.107027][ T7684] XFS (loop3): Ending clean mount
[  132.120399][ T7684] XFS (loop3): Quotacheck needed: Please wait.
[  132.210350][ T7699] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  132.451130][ T7684] XFS (loop3): Quotacheck: Done.
[  132.489296][ T6067] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  132.646296][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.649328][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.913722][  T789] tipc: Node number set to 4278190081
[  132.913770][ T7705] loop3: detected capacity change from 0 to 1764
[  134.925477][ T7740] loop4: detected capacity change from 0 to 1024
[  134.960664][ T7740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.050355][ T7725] loop0: detected capacity change from 0 to 32768
[  135.097846][ T7725] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  135.155245][ T7725] XFS (loop0): Ending clean mount
[  135.311437][ T5828] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  135.578782][ T7760] loop3: detected capacity change from 0 to 128
[  135.596102][ T7760] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  135.601454][ T7760] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.645320][ T6067] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  135.813865][ T7131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.862472][ T7769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.668'.
[  135.886623][ T7762] loop0: detected capacity change from 0 to 32768
[  135.900683][ T7771] CUSE: info not properly terminated
[  135.907347][ T7762] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.662 (7762)
[  135.937678][ T7762] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.957508][ T7762] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  136.020978][ T7762] BTRFS info (device loop0): turning off barriers
[  136.027229][ T7762] BTRFS info (device loop0): enabling free space tree
[  136.029816][ T7762] BTRFS info (device loop0): use zlib compression, level 3
[  136.187125][ T5828] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  136.237881][ T7798] loop3: detected capacity change from 0 to 1024
[  136.279538][ T7798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.355133][ T7798] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  136.426957][ T7798] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  136.460561][ T7804] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  136.487809][ T7798] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  136.507764][ T7798] EXT4-fs (loop3): This should not happen!! Data will be lost
[  136.507764][ T7798] 
[  136.510774][ T7798] EXT4-fs (loop3): Total free blocks count 0
[  136.529413][ T7804] EXT4-fs (loop3): This should not happen!! Data will be lost
[  136.529413][ T7804] 
[  136.539876][ T7798] EXT4-fs (loop3): Free/Dirty block details
[  136.543058][ T7804] EXT4-fs (loop3): Total free blocks count 0
[  136.545200][ T7804] EXT4-fs (loop3): Free/Dirty block details
[  136.547498][ T7798] EXT4-fs (loop3): free_blocks=20480
[  137.049143][ T7818] loop0: detected capacity change from 0 to 32768
[  137.085759][ T7827] syz_tun: entered promiscuous mode
[  137.088519][ T7827] macvtap1: entered promiscuous mode
[  137.111366][ T7828] loop3: detected capacity change from 0 to 2048
[  137.115264][ T7827] syz_tun: left promiscuous mode
[  137.126181][ T7828] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  137.147677][ T7828] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.186036][ T7829] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  137.441114][ T7837] loop4: detected capacity change from 0 to 128
[  137.462114][ T7837] EXT4-fs (loop4): Test dummy encryption mode enabled
[  137.488984][ T7837] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  137.498349][ T7837] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  137.549877][ T7847] netlink: 'syz.0.694': attribute type 5 has an invalid length.
[  137.554411][ T7846] loop3: detected capacity change from 0 to 512
[  137.563486][ T7846] EXT4-fs: inline encryption not supported
[  137.567897][ T7847] ip6erspan0: entered promiscuous mode
[  137.576854][ T7846] EXT4-fs (loop3): Test dummy encryption mode enabled
[  137.579558][ T7846] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  137.585059][ T7846] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  137.600117][ T7846] EXT4-fs (loop3): 1 truncate cleaned up
[  137.604749][ T7846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.758926][ T7837] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  137.771453][   T33] audit: type=1800 audit(1759241239.583:13): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.692" name="file1" dev="loop4" ino=12 res=0 errno=0
[  137.803573][ T7846] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  137.821167][ T7863] loop7: detected capacity change from 0 to 1
[  137.824177][ T7131] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  137.856676][ T7508] Dev loop7: unable to read RDB block 1
[  137.858711][ T6067] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.859010][ T7508]  loop7: unable to read partition table
[  137.882830][ T7508] loop7: partition table beyond EOD, truncated
[  137.907519][ T7863] Dev loop7: unable to read RDB block 1
[  137.911350][ T7863]  loop7: unable to read partition table
[  137.923851][ T7863] loop7: partition table beyond EOD, truncated
[  137.930991][ T7863] loop_reread_partitions: partition scan of loop7 (ݷU@:B${Wɴ) failed (rc=-5)
[  138.163337][ T7871] loop3: detected capacity change from 0 to 32768
[  138.175896][ T7871] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  138.195689][ T7871] XFS (loop3): Ending clean mount
[  138.202582][ T7871] XFS (loop3): Quotacheck needed: Please wait.
[  138.225700][ T7871] XFS (loop3): Quotacheck: Done.
[  138.249009][ T6067] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  138.262101][ T7024] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  138.412071][ T7024] usb 5-1: Using ep0 maxpacket: 32
[  138.416664][ T7024] usb 5-1: config 0 interface 0 has no altsetting 0
[  138.424302][ T7024] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  138.431776][ T7024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.435215][ T7024] usb 5-1: Product: syz
[  138.436909][ T7024] usb 5-1: Manufacturer: syz
[  138.439039][ T7024] usb 5-1: SerialNumber: syz
[  138.443553][ T7024] usb 5-1: config 0 descriptor??
[  138.879546][ T7892] random: crng reseeded on system resumption
[  139.221920][ T7024] gs_usb 5-1:0.0: Configuring for 2 interfaces
[  139.225503][ T7024] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[  139.229455][ T7024] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[  139.416061][ T7024] usb 5-1: USB disconnect, device number 4
[  140.099523][ T5213] Bluetooth: hci1: command tx timeout
[  140.166478][ T7913] loop3: detected capacity change from 0 to 128
[  140.237118][ T7908] netlink: 96 bytes leftover after parsing attributes in process `syz.4.711'.
[  140.465899][ T7917] fuse: Unknown parameter '0x000000000000000600000000000000000000'
[  141.697859][ T7927] loop0: detected capacity change from 0 to 256
[  141.915723][ T7933] loop4: detected capacity change from 0 to 512
[  141.953190][ T7933] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  141.968091][ T7933] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  141.990088][ T7933] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  142.016526][ T7933] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  142.032057][ T7933] System zones: 0-2, 18-18, 34-35
[  142.039944][ T7933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.065189][ T7941] netlink: 'syz.0.726': attribute type 39 has an invalid length.
[  142.106154][ T7131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.210168][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'.
[  142.289630][ T7952] loop0: detected capacity change from 0 to 1764
[  142.418797][ T7952] iso9660: Corrupted directory entry in block 1 of inode 1920
[  143.054032][ T7962] block device autoloading is deprecated and will be removed.
[  143.066951][ T7962] loop0: detected capacity change from 0 to 8
[  143.104229][ T7962] Page size > filesystem block size (0).  This is currently not supported!
[  143.685563][ T7968] netlink: 56 bytes leftover after parsing attributes in process `syz.3.736'.
[  143.689431][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'.
[  143.764994][ T7971] netlink: 'syz.0.738': attribute type 39 has an invalid length.
[  145.368617][ T7992] loop0: detected capacity change from 0 to 2048
[  145.679067][ T8003] loop3: detected capacity change from 0 to 512
[  145.692322][ T8003] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent
[  145.892294][ T8016] loop0: detected capacity change from 0 to 128
[  145.922630][ T8016] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  145.935786][ T8016] ext4 filesystem being mounted at /292/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  145.979777][ T5828] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  146.186735][ T8020] loop4: detected capacity change from 0 to 32768
[  146.197727][ T8020] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.760 (8020)
[  146.216034][ T8020] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  146.231310][ T8020] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  146.312873][ T8020] BTRFS info (device loop4): enabling ssd optimizations
[  146.315344][ T8020] BTRFS info (device loop4): enabling free space tree
[  146.525213][ T7131] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  147.864031][ T8101] loop0: detected capacity change from 0 to 256
[  147.885908][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'.
[  147.892610][ T8101] exfat: Deprecated parameter 'namecase'
[  147.894480][ T8101] exfat: Deprecated parameter 'utf8'
[  147.919192][ T8101] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  147.951295][ T8105] loop4: detected capacity change from 0 to 1024
[  147.957763][ T8105] EXT4-fs: Ignoring removed bh option
[  147.974785][ T8105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  148.013441][ T8105] EXT4-fs: Ignoring removed orlov option
[  148.022315][ T8105] EXT4-fs error (device loop4): __ext4_remount:6746: comm syz.4.790: Abort forced by user
[  148.055099][ T8105] EXT4-fs (loop4): Remounting filesystem read-only
[  148.057758][ T8105] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-001000000000.
[  148.095903][ T7131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  148.170138][ T8114] netlink: 'syz.4.792': attribute type 1 has an invalid length.
[  148.183702][ T8114] netlink: 184 bytes leftover after parsing attributes in process `syz.4.792'.
[  148.233619][ T8099] loop3: detected capacity change from 0 to 32768
[  148.243326][ T5829] Bluetooth: hci2: command 0x0405 tx timeout
[  148.267051][ T8099] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  148.305205][ T6067] ocfs2: Unmounting device (7,3) on (node local)
[  148.455148][ T8131] loop4: detected capacity change from 0 to 128
[  148.469797][ T8131] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  148.477709][ T8131] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  148.524599][ T7131] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  148.748562][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'.
[  148.814213][  T789] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  148.969030][ T8164] sch_tbf: peakrate 4294967290 is lower than or equals to rate 4567553665213837456 !
[  148.983174][  T789] usb 5-1: Using ep0 maxpacket: 32
[  148.991804][  T789] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  148.996025][  T789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.006798][  T789] usb 5-1: config 0 descriptor??
[  149.027859][ T8166] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  149.030603][ T8166] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  149.078936][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'.
[  149.221481][  T789] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  149.237340][  T789] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  149.251144][  T789] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  149.256828][  T789] usb 5-1: media controller created
[  149.278760][  T789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  149.571783][ T7024] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  149.723479][ T7024] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  149.726661][ T7024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.731546][ T7024] usb 1-1: config 0 descriptor??
[  149.944889][ T7024] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  149.952792][  T789] az6027: usb out operation failed. (-71)
[  149.956989][ T7024] [drm:udl_init] *ERROR* Selecting channel failed
[  149.964611][  T789] az6027: usb out operation failed. (-71)
[  149.971144][  T789] stb0899_attach: Driver disabled by Kconfig
[  149.976222][  T789] az6027: no front-end attached
[  149.976222][  T789] 
[  149.986830][  T789] az6027: usb out operation failed. (-71)
[  149.990554][ T7024] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 3
[  149.996019][ T7024] [drm] Initialized udl on minor 3
[  149.996695][  T789] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  150.001029][ T7024] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  150.009351][ T7024] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  150.016506][  T789] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12
[  150.019887][   T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  150.029274][ T7024] usb 1-1: USB disconnect, device number 13
[  150.032828][  T789] dvb-usb: schedule remote query interval to 400 msecs.
[  150.035421][   T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  150.040543][  T789] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  150.064757][  T789] usb 5-1: USB disconnect, device number 5
[  150.129981][  T789] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  151.001840][   T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  151.232541][   T24] usb 1-1: Using ep0 maxpacket: 32
[  151.237937][   T24] usb 1-1: config 2 has an invalid interface number: 157 but max is 0
[  151.241978][   T24] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 1
[  151.247785][   T24] usb 1-1: config 2 has no interface number 1
[  151.256111][   T24] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b
[  151.260913][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.265875][   T24] usb 1-1: Product: syz
[  151.268463][   T24] usb 1-1: Manufacturer: syz
[  151.270473][   T24] usb 1-1: SerialNumber: syz
[  151.282388][   T24] imon 1-1:2.157: inconsistent driver matching
[  151.285099][   T24] imon 1-1:2.157: unable to register, err -22
[  151.287676][   T24] imon 1-1:2.157: probe with driver imon failed with error -22
[  151.295471][   T24] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  151.299001][   T24] imon 1-1:2.0: unable to initialize intf0, err -19
[  151.301445][   T24] imon:imon_probe: failed to initialize context!
[  151.304243][   T24] imon 1-1:2.0: unable to register, err -19
[  151.489015][ T6218] usb 1-1: USB disconnect, device number 14
[  153.015164][ T8240] loop0: detected capacity change from 0 to 256
[  153.762820][ T8250] loop0: detected capacity change from 0 to 40427
[  153.765727][ T8250] F2FS-fs: heap/no_heap options were deprecated
[  153.779776][ T8250] F2FS-fs (loop0): invalid crc value
[  153.839786][ T8250] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  153.850158][ T8250] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  153.933330][ T5828] bio_check_eod: 20 callbacks suppressed
[  153.933346][ T5828] syz-executor: attempt to access beyond end of device
[  153.933346][ T5828] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  153.955868][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  153.955889][ T5828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.955897][ T5828] Call Trace:
[  153.955904][ T5828]  <TASK>
[  153.955910][ T5828]  dump_stack_lvl+0x189/0x250
[  153.955948][ T5828]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.955964][ T5828]  ? __pfx_queue_work_on+0x10/0x10
[  153.955976][ T5828]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  153.955989][ T5828]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  153.956013][ T5828]  f2fs_handle_critical_error+0x37c/0x540
[  153.956033][ T5828]  f2fs_write_end_io+0x886/0xb60
[  153.956066][ T5828]  __submit_merged_bio+0x27a/0x6a0
[  153.956086][ T5828]  __submit_merged_write_cond+0x255/0x530
[  153.956113][ T5828]  f2fs_write_data_pages+0x261d/0x3000
[  153.956160][ T5828]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  153.956218][ T5828]  ? check_path+0x21/0x40
[  153.956231][ T5828]  ? check_noncircular+0xe0/0x160
[  153.956292][ T5828]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  153.956308][ T5828]  do_writepages+0x32e/0x550
[  153.956337][ T5828]  ? do_raw_spin_unlock+0x4d/0x240
[  153.956356][ T5828]  filemap_fdatawrite+0x199/0x240
[  153.956408][ T5828]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  153.956471][ T5828]  ? do_raw_spin_unlock+0x4d/0x240
[  153.956489][ T5828]  f2fs_sync_dirty_inodes+0x31f/0x830
[  153.956518][ T5828]  f2fs_write_checkpoint+0x95a/0x1df0
[  153.956556][ T5828]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  153.956616][ T5828]  ? kill_f2fs_super+0x298/0x6c0
[  153.956636][ T5828]  kill_f2fs_super+0x2c3/0x6c0
[  153.956658][ T5828]  ? __pfx_kill_f2fs_super+0x10/0x10
[  153.956671][ T5828]  ? radix_tree_delete_item+0x2b6/0x400
[  153.956690][ T5828]  ? shrinker_free+0x2ce/0x3e0
[  153.956707][ T5828]  deactivate_locked_super+0xbc/0x130
[  153.956725][ T5828]  cleanup_mnt+0x425/0x4c0
[  153.956740][ T5828]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.956757][ T5828]  task_work_run+0x1d4/0x260
[  153.956777][ T5828]  ? __pfx_task_work_run+0x10/0x10
[  153.956791][ T5828]  ? __x64_sys_umount+0x122/0x160
[  153.956813][ T5828]  ? exit_to_user_mode_loop+0x40/0x110
[  153.956835][ T5828]  exit_to_user_mode_loop+0xec/0x110
[  153.956853][ T5828]  do_syscall_64+0x2bd/0x3b0
[  153.956866][ T5828]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.956879][ T5828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.956891][ T5828]  ? exc_page_fault+0x9f/0xf0
[  153.956906][ T5828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.956917][ T5828] RIP: 0033:0x7f435818ff57
[  153.956930][ T5828] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  153.956945][ T5828] RSP: 002b:00007ffd8a010b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  153.956959][ T5828] RAX: 0000000000000000 RBX: 00007f4358211c2d RCX: 00007f435818ff57
[  153.956967][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8a010bf0
[  153.956973][ T5828] RBP: 00007ffd8a010bf0 R08: 0000000000000000 R09: 0000000000000000
[  153.956980][ T5828] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd8a011c80
[  153.956989][ T5828] R13: 00007f4358211c2d R14: 0000000000025890 R15: 00007ffd8a011cc0
[  153.957014][ T5828]  </TASK>
[  153.957020][ T5828] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  154.798341][   T47] IPVS: starting estimator thread 0...
[  154.883055][ T8335] IPVS: using max 82 ests per chain, 196800 per kthread
[  155.052291][   T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  155.261840][   T24] usb 4-1: Using ep0 maxpacket: 8
[  155.266148][   T24] usb 4-1: config 0 has an invalid interface number: 143 but max is 0
[  155.269648][   T24] usb 4-1: config 0 has no interface number 0
[  155.273017][   T24] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  155.276821][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.282976][   T24] usb 4-1: config 0 descriptor??
[  155.394051][   T24] viperboard 4-1:0.143: version 0.00 found at bus 004 address 007
[  155.422815][   T24] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100
[  155.427429][   T24] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5
[  156.311811][ T6218] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  156.461903][ T6218] usb 1-1: Using ep0 maxpacket: 8
[  156.467791][ T6218] usb 1-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67
[  156.470920][ T6218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.474261][ T6218] usb 1-1: Product: syz
[  156.475842][ T6218] usb 1-1: Manufacturer: syz
[  156.477364][ T6218] usb 1-1: SerialNumber: syz
[  156.480510][ T6218] usb 1-1: config 0 descriptor??
[  156.484397][ T6218] ipw 1-1:0.0: IPWireless converter converter detected
[  156.690887][   T24] usb 1-1: USB disconnect, device number 15
[  156.696718][   T24] ipw 1-1:0.0: device disconnected
[  157.461800][   T47] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  157.567264][   T24] usb 4-1: USB disconnect, device number 7
[  157.652222][   T47] usb 1-1: Using ep0 maxpacket: 32
[  157.656283][   T47] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  157.659674][   T47] usb 1-1: config 0 has no interface number 0
[  157.663982][   T47] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  157.667099][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.670134][   T47] usb 1-1: Product: syz
[  157.671960][   T47] usb 1-1: Manufacturer: syz
[  157.674288][   T47] usb 1-1: SerialNumber: syz
[  157.678467][   T47] usb 1-1: config 0 descriptor??
[  157.683476][   T47] hub 1-1:0.89: bad descriptor, ignoring hub
[  157.686001][   T47] hub 1-1:0.89: probe with driver hub failed with error -5
[  157.689795][   T47] option 1-1:0.89: GSM modem (1-port) converter detected
[  157.696409][   T47] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0
[  157.931871][   T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  158.012074][    T9] usb 1-1: USB disconnect, device number 16
[  158.018228][    T9] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  158.025915][    T9] option 1-1:0.89: device disconnected
[  158.083276][   T24] usb 4-1: Using ep0 maxpacket: 16
[  158.087765][   T24] usb 4-1: config 254 has an invalid interface number: 235 but max is 0
[  158.091334][   T24] usb 4-1: config 254 has no interface number 0
[  158.096157][   T24] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 237, changing to 7
[  158.101295][   T24] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid maxpacket 42803, setting to 1024
[  158.105930][   T24] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  158.110075][   T24] usb 4-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  158.113813][   T24] usb 4-1: config 254 interface 235 has no altsetting 0
[  158.119117][   T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  158.122436][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.125129][   T24] usb 4-1: Product: syz
[  158.126557][   T24] usb 4-1: Manufacturer: syz
[  158.128246][   T24] usb 4-1: SerialNumber: syz
[  158.341871][   T24] usbtest 4-1:254.235: Linux gadget zero
[  158.343861][   T24] usbtest 4-1:254.235: high-speed {control in/out bulk-in iso-out} tests (+alt)
[  158.568088][   T24] usb 4-1: USB disconnect, device number 8
[  158.788272][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.873'.
[  158.793271][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.873'.
[  158.878138][ T8370] tracefs: Unknown parameter '0x0000000000000000'
[  159.170040][ T8374] loop0: detected capacity change from 0 to 32768
[  159.230599][ T8374] ERROR: (device loop0): dbAllocNext: Corrupt dmap page
[  159.230599][ T8374] 
[  159.239056][ T8374] ERROR: (device loop0): remounting filesystem as read-only
[  159.245156][ T8374] ialloc: diAlloc returned -5!
[  159.255204][ T8374] ERROR: (device loop0): dbAllocAG: unable to allocate blocks
[  159.255204][ T8374] 
[  159.259216][ T8374] ERROR: (device loop0): dbDiscardAG: -EIO
[  159.259216][ T8374] 
[  159.269649][ T8382] loop3: detected capacity change from 0 to 256
[  159.314148][ T8382] FAT-fs (loop3): Directory bread(block 64) failed
[  159.324129][ T8382] FAT-fs (loop3): Directory bread(block 65) failed
[  159.326822][ T8382] FAT-fs (loop3): Directory bread(block 66) failed
[  159.328780][ T8382] FAT-fs (loop3): Directory bread(block 67) failed
[  159.351975][ T8382] FAT-fs (loop3): Directory bread(block 68) failed
[  159.355050][ T8382] FAT-fs (loop3): Directory bread(block 69) failed
[  159.358015][ T8382] FAT-fs (loop3): Directory bread(block 70) failed
[  159.360423][ T8382] FAT-fs (loop3): Directory bread(block 71) failed
[  159.382354][ T8382] FAT-fs (loop3): Directory bread(block 72) failed
[  159.384694][ T8382] FAT-fs (loop3): Directory bread(block 73) failed
[  159.420877][ T8384] loop0: detected capacity change from 0 to 1024
[  159.533481][ T8386] loop0: detected capacity change from 0 to 64
[  159.559338][ T8386] BFS-fs: bfs_iget(): Bad inode number loop0:00000002
[  160.252428][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  160.333575][ T8395] loop3: detected capacity change from 0 to 32768
[  160.340351][ T8395] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  160.383730][ T8395] XFS (loop3): Ending clean mount
[  160.390623][ T8395] XFS (loop3): Quotacheck needed: Please wait.
[  160.413257][    T9] usb 1-1: Using ep0 maxpacket: 8
[  160.417092][ T8395] XFS (loop3): Quotacheck: Done.
[  160.420613][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  160.424765][    T9] usb 1-1: config 9 has an invalid interface number: 5 but max is 0
[  160.426090][ T8395] XFS (loop3): User initiated shutdown received.
[  160.427801][    T9] usb 1-1: config 9 has no interface number 0
[  160.427846][    T9] usb 1-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xD7, changing to 0x87
[  160.427865][    T9] usb 1-1: config 9 interface 5 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[  160.430699][ T8395] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  160.432343][    T9] usb 1-1: config 9 interface 5 has no altsetting 0
[  160.444426][    T9] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8
[  160.447720][ T8395] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  160.449751][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.464020][    T9] usb 1-1: Product: syz
[  160.465596][    T9] usb 1-1: Manufacturer: syz
[  160.467098][    T9] usb 1-1: SerialNumber: syz
[  160.474311][ T6067] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  160.690461][    T9] usb 1-1: USB disconnect, device number 17
[  162.269333][ T8424] loop0: detected capacity change from 0 to 32768
[  162.296323][ T8424] (syz.0.896,8424,1):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  162.299006][ T8424] (syz.0.896,8424,1):ocfs2_read_locked_inode:597 ERROR: status = -12
[  162.301602][ T8424] (syz.0.896,8424,1):_ocfs2_get_system_file_inode:144 ERROR: status = -12
[  162.304718][ T8424] (syz.0.896,8424,1):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=8, slot=0
[  162.309155][ T8424] (syz.0.896,8424,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  162.313520][ T8424] (syz.0.896,8424,1):ocfs2_mount_volume:1758 ERROR: status = -22
[  162.319585][ T8424] (syz.0.896,8424,1):ocfs2_fill_super:1177 ERROR: status = -22
[  162.416708][ T8426] loop3: detected capacity change from 0 to 40427
[  162.422398][ T8426] F2FS-fs: heap/no_heap options were deprecated
[  162.429664][ T8426] F2FS-fs (loop3): build fault injection rate: 3
[  162.443590][ T8426] F2FS-fs (loop3): build fault injection type: 0x77fd1
[  162.455096][ T8426] F2FS-fs (loop3): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x2e45/0x6ff0
[  162.678606][ T8443] loop3: detected capacity change from 0 to 128
[  162.706578][ T8443] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  162.717838][ T8443] ext4 filesystem being mounted at /292/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  162.766730][ T6067] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  162.887694][ T8447] loop0: detected capacity change from 0 to 32768
[  162.895089][ T8447] 
[  162.895089][ T8447]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  162.895089][ T8447] 
[  162.926142][ T8447] read_mapping_page failed!
[  162.927930][ T8447] ERROR: (device loop0): txCommit: 
[  162.927930][ T8447] 
[  162.946076][ T8447] ERROR: (device loop0): remounting filesystem as read-only
[  162.971043][ T5828] non-latin1 character 0x3ff found in JFS file name
[  162.975985][ T5828] mount with iocharset=utf8 to access
[  163.167195][ T8457] loop3: detected capacity change from 0 to 32768
[  163.177406][ T8457] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  163.184323][ T8457] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  163.219476][ T8457] syz.3.912 (8457) used greatest stack depth: 19880 bytes left
[  163.253099][ T6067] ocfs2: Unmounting device (7,3) on (node local)
[  163.317049][ T5854] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.437284][ T5854] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.548709][ T5854] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.712184][ T5854] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.737251][ T8464] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.916'.
[  163.761464][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  163.769173][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  163.777898][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  163.784616][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  163.795529][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  163.847716][ T8468] netlink: 'syz.3.917': attribute type 3 has an invalid length.
[  163.850781][ T8468] netlink: 'syz.3.917': attribute type 16 has an invalid length.
[  163.865743][ T8468] netlink: 132 bytes leftover after parsing attributes in process `syz.3.917'.
[  164.023547][ T5854] bridge_slave_1: left allmulticast mode
[  164.026273][ T5854] bridge_slave_1: left promiscuous mode
[  164.028808][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.040524][ T5854] bridge_slave_0: left allmulticast mode
[  164.052745][ T5854] bridge_slave_0: left promiscuous mode
[  164.055535][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.522022][ T7024] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  164.635961][ T5854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.642826][ T5854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.647292][ T5854] bond0 (unregistering): Released all slaves
[  164.671831][ T7024] usb 4-1: Using ep0 maxpacket: 32
[  164.676876][ T7024] usb 4-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00
[  164.680624][ T7024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.688677][ T7024] usb 4-1: config 0 descriptor??
[  164.777166][ T5854] bond1 (unregistering): Released all slaves
[  164.849664][ T5854] tipc: Disabling bearer <udp:syz0>
[  164.867416][ T5854] tipc: Left network mode
[  165.035155][ T8465] chnl_net:caif_netlink_parms(): no params data found
[  165.185088][ T8465] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.201741][ T8465] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.214104][ T8465] bridge_slave_0: entered allmulticast mode
[  165.223614][ T8465] bridge_slave_0: entered promiscuous mode
[  165.230864][ T8465] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.247584][ T8465] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.252260][ T8465] bridge_slave_1: entered allmulticast mode
[  165.266696][ T8465] bridge_slave_1: entered promiscuous mode
[  165.334852][  T789] usb 4-1: USB disconnect, device number 9
[  165.341268][ T5854] hsr_slave_0: left promiscuous mode
[  165.357654][ T5854] hsr_slave_1: left promiscuous mode
[  165.360517][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.363920][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0
[  165.367835][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.370804][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1
[  165.387822][ T5854] veth1_macvtap: left promiscuous mode
[  165.389989][ T5854] veth0_macvtap: left promiscuous mode
[  165.393112][ T5854] veth1_vlan: left promiscuous mode
[  165.395306][ T5854] veth0_vlan: left promiscuous mode
[  165.854568][ T5213] Bluetooth: hci1: command tx timeout
[  165.913736][ T5854] team0 (unregistering): Port device team_slave_1 removed
[  165.968059][ T5854] team0 (unregistering): Port device team_slave_0 removed
[  166.261125][ T8498] loop3: detected capacity change from 0 to 32768
[  166.269475][ T8498] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.922 (8498)
[  166.285549][ T8498] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  166.289884][ T8498] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  166.380563][ T8498] BTRFS info (device loop3): rebuilding free space tree
[  166.392985][ T8498] BTRFS info (device loop3): disabling free space tree
[  166.395968][ T8498] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  166.400289][ T8498] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  166.422509][ T8498] BTRFS info (device loop3): enabling ssd optimizations
[  166.425548][ T8498] BTRFS info (device loop3): force clearing of disk cache
[  166.428547][ T8498] BTRFS info (device loop3): enabling auto defrag
[  166.431372][ T8498] BTRFS info (device loop3): doing ref verification
[  166.499479][   T33] audit: type=1800 audit(1759241268.313:14): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.922" name="file1" dev="loop3" ino=260 res=0 errno=0
[  166.707542][ T8465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.724346][ T8465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.751013][ T8465] team0: Port device team_slave_0 added
[  166.759746][ T8465] team0: Port device team_slave_1 added
[  166.828287][ T8465] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.831061][ T8465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.870612][ T8465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.884014][ T8465] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.887153][ T8465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.908596][ T8465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.066140][ T8465] hsr_slave_0: entered promiscuous mode
[  167.073632][ T8465] hsr_slave_1: entered promiscuous mode
[  167.090727][ T8465] debugfs: 'hsr0' already exists in 'hsr'
[  167.105386][ T8465] Cannot create hsr debugfs directory
[  167.158487][ T6067] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  167.480079][ T8465] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  167.487168][ T8465] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  167.493353][ T8465] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  167.513243][ T8465] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  167.623778][ T8465] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.663227][ T8465] 8021q: adding VLAN 0 to HW filter on device team0
[  167.683985][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.687019][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.699568][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.702727][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.735041][ T8533] loop3: detected capacity change from 0 to 32768
[  167.793947][ T8533]  loop3: p9 p11 p16
[  167.925952][ T5213] Bluetooth: hci1: command tx timeout
[  167.971117][ T8465] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.123042][ T8465] veth0_vlan: entered promiscuous mode
[  168.135445][ T8465] veth1_vlan: entered promiscuous mode
[  168.154639][ T8465] veth0_macvtap: entered promiscuous mode
[  168.159243][ T8465] veth1_macvtap: entered promiscuous mode
[  168.188838][ T8465] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.197614][ T8465] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.206819][ T5716] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.211593][ T5854] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.215154][ T5854] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.219411][ T5854] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.308328][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.310915][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.342975][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.346659][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.413561][ T8574] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.932'.
[  168.458085][ T8578] netlink: 'syz.5.933': attribute type 1 has an invalid length.
[  168.461403][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.933'.
[  168.560232][ T8583] loop5: detected capacity change from 0 to 4096
[  168.681914][   T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  168.718559][    T9] IPVS: starting estimator thread 0...
[  168.720963][ T8590] IPVS: sh: SCTP 127.0.0.1:0 - no destination available
[  168.799847][ T8595] netlink: 44 bytes leftover after parsing attributes in process `syz.5.941'.
[  168.814792][ T8591] IPVS: using max 83 ests per chain, 199200 per kthread
[  168.835082][   T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  168.838846][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.846757][   T24] usb 4-1: config 0 descriptor??
[  168.856085][   T24] cp210x 4-1:0.0: cp210x converter detected
[  169.315538][   T24] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  169.561959][   T24] usb 4-1: cp210x converter now attached to ttyUSB0
[  169.726384][   T47] usb 4-1: USB disconnect, device number 10
[  169.733748][   T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  169.770007][   T47] cp210x 4-1:0.0: device disconnected
[  169.971849][   T33] audit: type=1326 audit(1759241271.783:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.5.947" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a38ec29 code=0x7ffc0000
[  169.985296][   T33] audit: type=1326 audit(1759241271.783:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.5.947" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a38ec29 code=0x7ffc0000
[  169.996716][   T33] audit: type=1326 audit(1759241271.793:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.5.947" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2b8a38ec29 code=0x7ffc0000
[  170.009818][ T5213] Bluetooth: hci1: command tx timeout
[  170.017852][   T33] audit: type=1326 audit(1759241271.793:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.5.947" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a38ec29 code=0x7ffc0000
[  170.027833][   T33] audit: type=1326 audit(1759241271.793:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.5.947" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a38ec29 code=0x7ffc0000
[  170.035600][   T33] audit: type=1326 audit(1759241271.803:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.5.947" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2b8a38ec29 code=0x7ffc0000
[  170.044264][   T33] audit: type=1326 audit(1759241271.803:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.5.947" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a38ec29 code=0x7ffc0000
[  170.066985][   T33] audit: type=1326 audit(1759241271.803:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.5.947" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a38ec29 code=0x7ffc0000
[  170.075027][   T33] audit: type=1326 audit(1759241271.803:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8612 comm="syz.5.947" exe="/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2b8a38ec29 code=0x7ffc0000
[  170.630431][ T8623] loop3: detected capacity change from 0 to 32768
[  170.666445][ T8623] read_mapping_page failed!
[  170.668379][ T8623] ERROR: (device loop3): txCommit: 
[  170.668379][ T8623] 
[  170.690027][  T115] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[  170.693577][  T115] ------------[ cut here ]------------
[  170.695569][  T115] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  170.699482][  T115] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  170.703081][  T115] CPU: 1 UID: 0 PID: 115 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  170.707021][  T115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.711104][  T115] RIP: 0010:txUnlock+0xdaf/0xdf0
[  170.713143][  T115] Code: e5 fd 90 0f 0b e8 41 d2 7b fe 48 c7 c7 20 56 84 8b 48 c7 c6 19 52 84 8b ba a3 03 00 00 48 c7 c1 20 63 84 8b e8 e2 44 e5 fd 90 <0f> 0b e8 1a d2 7b fe 48 c7 c7 20 56 84 8b 48 c7 c6 19 52 84 8b ba
[  170.720679][  T115] RSP: 0018:ffffc9000243fbc8 EFLAGS: 00010246
[  170.723081][  T115] RAX: 0000000000000037 RBX: 0000000000001000 RCX: a45f6f465a787800
[  170.725990][  T115] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  170.729838][  T115] RBP: ffffc90001fa2090 R08: ffffc9000243f8e7 R09: 1ffff92000487f1c
[  170.733008][  T115] R10: dffffc0000000000 R11: fffff52000487f1d R12: dffffc0000000000
[  170.736004][  T115] R13: 1ffff110077501c7 R14: ffff88803ba80e38 R15: 0000000000000000
[  170.738958][  T115] FS:  0000000000000000(0000) GS:ffff8881a417e000(0000) knlGS:0000000000000000
[  170.742249][  T115] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  170.745313][  T115] CR2: 0000001b30223ffc CR3: 000000003e61a000 CR4: 00000000000006f0
[  170.749191][  T115] Call Trace:
[  170.750817][  T115]  <TASK>
[  170.751989][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.754031][  T115]  jfs_lazycommit+0x584/0xa90
[  170.755965][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  170.757710][  T115]  ? __pfx_default_wake_function+0x10/0x10
[  170.759584][  T115]  ? __kthread_parkme+0x7b/0x200
[  170.761176][  T115]  ? __kthread_parkme+0x1a1/0x200
[  170.762845][  T115]  kthread+0x711/0x8a0
[  170.764566][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  170.766731][  T115]  ? __pfx_kthread+0x10/0x10
[  170.768829][  T115]  ? _raw_spin_unlock_irq+0x23/0x50
[  170.770483][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.772660][  T115]  ? __pfx_kthread+0x10/0x10
[  170.774267][  T115]  ret_from_fork+0x439/0x7d0
[  170.775784][  T115]  ? __pfx_ret_from_fork+0x10/0x10
[  170.777562][  T115]  ? __switch_to_asm+0x39/0x70
[  170.779116][  T115]  ? __switch_to_asm+0x33/0x70
[  170.780980][  T115]  ? __pfx_kthread+0x10/0x10
[  170.782796][  T115]  ret_from_fork_asm+0x1a/0x30
[  170.784758][  T115]  </TASK>
[  170.785871][  T115] Modules linked in:
[  170.787512][    C1] vkms_vblank_simulate: vblank timer overrun
[  170.790467][  T115] ---[ end trace 0000000000000000 ]---
[  170.824445][  T115] RIP: 0010:txUnlock+0xdaf/0xdf0
[  170.827205][  T115] Code: e5 fd 90 0f 0b e8 41 d2 7b fe 48 c7 c7 20 56 84 8b 48 c7 c6 19 52 84 8b ba a3 03 00 00 48 c7 c1 20 63 84 8b e8 e2 44 e5 fd 90 <0f> 0b e8 1a d2 7b fe 48 c7 c7 20 56 84 8b 48 c7 c6 19 52 84 8b ba
[  170.852107][  T115] RSP: 0018:ffffc9000243fbc8 EFLAGS: 00010246
[  170.854483][  T115] RAX: 0000000000000037 RBX: 0000000000001000 RCX: a45f6f465a787800
[  170.857416][  T115] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  170.860325][  T115] RBP: ffffc90001fa2090 R08: ffffc9000243f8e7 R09: 1ffff92000487f1c
[  170.872145][  T115] R10: dffffc0000000000 R11: fffff52000487f1d R12: dffffc0000000000
[  170.875227][  T115] R13: 1ffff110077501c7 R14: ffff88803ba80e38 R15: 0000000000000000
[  170.878004][  T115] FS:  0000000000000000(0000) GS:ffff8881a417e000(0000) knlGS:0000000000000000
[  170.881154][  T115] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  170.901197][  T115] CR2: 0000001b30223ffc CR3: 000000010aca0000 CR4: 00000000000006f0
[  170.906760][  T115] Kernel panic - not syncing: Fatal exception
[  170.910116][  T115] Kernel Offset: disabled
[  170.912055][  T115] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:07:52  Registers:
info registers vcpu 0

CPU#0
RAX=ffffc9000323fc01 RBX=ffffc90003238000 RCX=0000000000000001 RDX=ffffc9000323eea8
RSI=dffffc0000000000 RDI=ffffc9000323ee68 RBP=1ffff92000647dcd RSP=ffffc9000323ed40
R8 =ffffc9000323fc18 R9 =0000000000000000 R10=ffffc9000323eeb8 R11=fffff52000647dd9
R12=1ffff92000647dce R13=1ffff92000647dcf R14=ffffc90003240000 R15=ffffc9000323ee68
RIP=ffffffff81724894 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555953d5500 ffffffff 00c00000
GS =0000 ffff8880b8d7e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff3f1edf58 CR3=000000010e9d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8166e8bb ffffffff8133159e
XMM02=ffffffff81732819 ffffffff8133159e XMM03=ffffffff8173260f ffffffff81732599
XMM04=ffffffff8167d4cd ffffffff8167d452 XMM05=ffffffff8167d40d ffffffff8166e8ef
XMM06=ffffffff8166e8ef ffffffff8166e8ef XMM07=ffffffff8166e8ef ffffffff8166e8ef
XMM08=0000000000000000 00007f2b8a412f0f XMM09=0000000000000000 00007f2b8a412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000243f310
R8 =ffff8880213a0237 R9 =1ffff11004274046 R10=dffffc0000000000 R11=ffffffff850b3ff0
R12=dffffc0000000000 R13=ffffffff995968f0 R14=ffffffff99889380 R15=0000000000000000
RIP=ffffffff850b406c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a417e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30223ffc CR3=000000003e61a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=0000000000000000 00007f2b8a412f0f XMM09=0000000000000000 00007f2b8a412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
