last executing test programs:

48.795139666s ago: executing program 2 (id=220):
syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @address_request={0x11, 0x0, 0x0, 0x50}}}}}, 0x0)

48.531799502s ago: executing program 2 (id=221):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="20000000929c29b9180a02000020000000000000000000009500000000bb0000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/184}, 0x69)

48.423657703s ago: executing program 2 (id=222):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x5a1}, 0x9c)

48.273153983s ago: executing program 2 (id=223):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd0, 0x0, 0x0)

48.124808768s ago: executing program 2 (id=225):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

47.209799799s ago: executing program 2 (id=238):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5c, r1, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local={0xfe, 0xfc}}]}, 0x5c}}, 0x0)

32.152170213s ago: executing program 32 (id=238):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5c, r1, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local={0xfe, 0xfc}}]}, 0x5c}}, 0x0)

2.443153546s ago: executing program 1 (id=640):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
shutdown(r0, 0x1)

2.172025867s ago: executing program 1 (id=642):
syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000200)='./file0\x00', 0x2, &(0x7f0000000400)=ANY=[], 0x1, 0x1f8, &(0x7f0000000900)="$eJzslU1rE08cxz+zmSRN/zn0/D8VLLYXbbMF8ejNvgBfgCFda3HjQzegCQWjl148iG+i4KvwIOjdg4jgpR4U9FARhIqszM5vxgkJxMp6EPYL4ff8lNn5zfXsTtYEfhzv91iigKLNW6XQwKqyupOGpV+E5oIP2sod0T8V+l5oNhy9emTZ0Y1umiZ72XAOoxTM80lzLCPlmXTSM4o5z7mpXz6c1ChmOkfAb81TCvMtz/Mp06BmR5qOejyhac7ykVj+sLEGU6bF8mdfPsV3Yye1zNf25CfxsezG6vztcwev+d6ef0xvntjjnOlTk/BWeFOi6RMsnRmWnTA6VVSGrK/s8oOIz4Xw+ni/Z5irssWMbtv+3JUofIzwPPD5X8PYLEdyn0fDJSOsAuuD/u31bDg6t9vv7iQ7yc043ryw8eI/uaL5fdhNkw0VtGFWCG4vAeaetgJ7HXj3yz4mgApaM1gE1RC9C3HLee1MENiCKIgNc9i8z3z9puhq9LnCWRaAu2O1DDH231rBZNNcM6NtoaiJ0NFBn3BCxEJhON+7lW4foFAu7BDtc3SOqHshxgqmULJ50Y9/IHRF6JbQQ6FHQt3b5d4kXWT4JNLaGBrc6w4Ge8XjZTmvi70uXvKVI6nqXkPlOmlSoUKFChUqVKjwj+BnAAAA//85ykLy")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x8)

2.013269715s ago: executing program 1 (id=643):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0xa08813, &(0x7f0000000380)={[{@discard_sync}, {@notreelog}, {@compress_force}, {@compress}, {@flushoncommit}, {@rescue={'rescue', 0x3d, 'imetacsums'}}, {@user_subvol_rm}, {@nodiscard}]}, 0xfb, 0x5142, &(0x7f0000005140)="$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")

892.144779ms ago: executing program 1 (id=647):
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2)

837.577018ms ago: executing program 3 (id=648):
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$inet(0x2, 0x3, 0x30)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)

735.884439ms ago: executing program 1 (id=650):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900})
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8})
ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"})

735.642394ms ago: executing program 3 (id=651):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000005c0)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@uni_xlate}, {@utf8no}, {@rodir}, {@uni_xlate}]}, 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2)

734.1532ms ago: executing program 0 (id=652):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000a030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28)

733.72295ms ago: executing program 1 (id=653):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x82002)
ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x120c060, 0x0)
recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x2, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @empty}]}, &(0x7f0000000380)=0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20)

650.064919ms ago: executing program 0 (id=654):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x36b, &(0x7f0000000a00)="$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")
rename(&(0x7f0000001840)='./file1\x00', &(0x7f0000001880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)

529.085184ms ago: executing program 3 (id=655):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
lseek(r0, 0x200000002, 0x0)

361.820203ms ago: executing program 0 (id=656):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0)
ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0)

130.61762ms ago: executing program 3 (id=657):
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0)
r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0xf}, &(0x7f0000002000)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x7fffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0)

130.377681ms ago: executing program 0 (id=658):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)={0x50, r1, 0x201, 0xfffffffc, 0x25dfdbfd, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x50}, 0x8, 0x3000000000002}, 0x0)

72.941313ms ago: executing program 3 (id=659):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000240))

72.622002ms ago: executing program 0 (id=660):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0x7, 0x200000000000000, &(0x7f0000000400)="6b724b2bb14db9"})

408.2µs ago: executing program 3 (id=661):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000000c0)={0x10000, 0x1, &(0x7f0000000100)=[0x7174], 0x0, 0x0, 0x0})

0s ago: executing program 0 (id=662):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = epoll_create1(0x80000)
r2 = socket$unix(0x1, 0x1, 0x0)
close(r2)
socket$tipc(0x1e, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa0028000})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:41782' (ED25519) to the list of known hosts.
syzkaller login: [   56.295865][ T5833] cgroup: Unknown subsys name 'net'
[   56.390256][ T5833] cgroup: Unknown subsys name 'cpuset'
[   56.396220][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.235027][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.901480][ T5917] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.153729][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.162609][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.166980][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.171353][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.174912][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.425571][ T5938] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   71.076834][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.078920][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   73.563962][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.569439][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   73.572398][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.576144][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   73.584328][ T5973] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   73.588796][ T5973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   73.592237][ T5973] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.616319][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.623767][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.627563][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.679467][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.683593][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.687096][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.691758][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.696394][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.064529][ T5974] chnl_net:caif_netlink_parms(): no params data found
[   74.078142][ T5970] chnl_net:caif_netlink_parms(): no params data found
[   74.136419][ T5966] chnl_net:caif_netlink_parms(): no params data found
[   74.213105][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.216172][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.218400][ T5974] bridge_slave_0: entered allmulticast mode
[   74.221291][ T5974] bridge_slave_0: entered promiscuous mode
[   74.246720][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.249589][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.252422][ T5974] bridge_slave_1: entered allmulticast mode
[   74.257197][ T5974] bridge_slave_1: entered promiscuous mode
[   74.314427][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.316620][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.318885][ T5970] bridge_slave_0: entered allmulticast mode
[   74.322282][ T5970] bridge_slave_0: entered promiscuous mode
[   74.352524][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.355809][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.358939][ T5970] bridge_slave_1: entered allmulticast mode
[   74.363625][ T5970] bridge_slave_1: entered promiscuous mode
[   74.379851][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.382262][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.385950][ T5966] bridge_slave_0: entered allmulticast mode
[   74.390035][ T5966] bridge_slave_0: entered promiscuous mode
[   74.397952][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.418244][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.420872][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.423835][ T5966] bridge_slave_1: entered allmulticast mode
[   74.426678][ T5966] bridge_slave_1: entered promiscuous mode
[   74.431861][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.452277][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.474114][ T5974] team0: Port device team_slave_0 added
[   74.500133][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.506270][ T5974] team0: Port device team_slave_1 added
[   74.527226][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.551483][ T5970] team0: Port device team_slave_0 added
[   74.556566][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.577744][ T5970] team0: Port device team_slave_1 added
[   74.608553][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.611381][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.623253][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.652504][ T5966] team0: Port device team_slave_0 added
[   74.657738][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.660500][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.670199][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.684562][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.687342][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.697513][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.703513][ T5966] team0: Port device team_slave_1 added
[   74.706423][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.709102][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.719337][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.815430][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.818312][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.829279][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.840504][ T5970] hsr_slave_0: entered promiscuous mode
[   74.843706][ T5970] hsr_slave_1: entered promiscuous mode
[   74.849481][ T5974] hsr_slave_0: entered promiscuous mode
[   74.851860][ T5974] hsr_slave_1: entered promiscuous mode
[   74.856025][ T5974] debugfs: 'hsr0' already exists in 'hsr'
[   74.858385][ T5974] Cannot create hsr debugfs directory
[   74.861355][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.864146][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.874025][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.991886][ T5966] hsr_slave_0: entered promiscuous mode
[   74.997294][ T5966] hsr_slave_1: entered promiscuous mode
[   75.000282][ T5966] debugfs: 'hsr0' already exists in 'hsr'
[   75.002538][ T5966] Cannot create hsr debugfs directory
[   75.278533][ T5974] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.289359][ T5974] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.299692][ T5974] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.312041][ T5974] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.365994][ T5970] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.373792][ T5970] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.387284][ T5970] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.406377][ T5970] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.447396][ T5966] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.467581][ T5966] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.481202][ T5966] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   75.491946][ T5966] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.599415][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.626679][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.632177][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.636019][ T5939] Bluetooth: hci1: command tx timeout
[   75.667216][ T5974] 8021q: adding VLAN 0 to HW filter on device team0
[   75.676272][ T5966] 8021q: adding VLAN 0 to HW filter on device team0
[   75.682504][ T5970] 8021q: adding VLAN 0 to HW filter on device team0
[   75.699909][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.703099][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.708279][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.710981][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.715482][ T5939] Bluetooth: hci0: command tx timeout
[   75.717745][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.720511][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.724062][ T5939] Bluetooth: hci2: command tx timeout
[   75.739166][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.742083][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.747416][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.750239][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.774075][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.776965][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.009382][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.068570][ T5974] veth0_vlan: entered promiscuous mode
[   76.087864][ T5974] veth1_vlan: entered promiscuous mode
[   76.142388][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.161432][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.173293][ T5974] veth0_macvtap: entered promiscuous mode
[   76.182348][ T5974] veth1_macvtap: entered promiscuous mode
[   76.218490][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.228307][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.251154][ T5979] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.257057][ T5979] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.261183][ T5979] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.286934][ T5970] veth0_vlan: entered promiscuous mode
[   76.298576][ T5979] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.314166][ T5966] veth0_vlan: entered promiscuous mode
[   76.319858][ T5970] veth1_vlan: entered promiscuous mode
[   76.337117][ T5966] veth1_vlan: entered promiscuous mode
[   76.392605][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.401810][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.436212][ T5970] veth0_macvtap: entered promiscuous mode
[   76.454386][ T5966] veth0_macvtap: entered promiscuous mode
[   76.458604][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.459484][ T5970] veth1_macvtap: entered promiscuous mode
[   76.464215][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.468084][ T5966] veth1_macvtap: entered promiscuous mode
[   76.489910][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.526584][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.529901][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.541428][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.555835][ T5979] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.558716][ T5979] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.561261][ T5979] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.577845][ T5979] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.580803][ T5979] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.605964][ T5979] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.609058][ T5979] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.653619][ T5979] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.684929][ T6034] loop2: detected capacity change from 0 to 128
[   76.738350][ T6034] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   76.745963][ T6034] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   76.762258][ T6034] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 7 (only 1 groups)
[   76.780440][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.784630][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.810112][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.820419][ T5974] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   76.823181][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.885098][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.888023][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.903959][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.913933][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.039512][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.82'.
[   77.532365][ T6080] loop2: detected capacity change from 0 to 8
[   77.583993][ T6080] SQUASHFS error: xz decompression failed, data probably corrupt
[   77.593357][ T6080] SQUASHFS error: Failed to read block 0x108: -5
[   77.611645][ T6080] SQUASHFS error: Unable to read metadata cache entry [106]
[   77.619318][ T6080] SQUASHFS error: Unable to read inode 0x11f
[   77.723426][ T5939] Bluetooth: hci1: command tx timeout
[   77.762123][ T6092] unknown channel width for channel at 909000KHz?
[   77.793071][ T5939] Bluetooth: hci2: command tx timeout
[   77.795318][ T5939] Bluetooth: hci0: command tx timeout
[   78.123828][ T6121] loop0: detected capacity change from 0 to 2048
[   78.143565][ T6121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   78.164485][ T5966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[   78.343871][ T2324] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   78.860048][ T6136] autofs4:pid:6136:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
[   78.865022][ T2324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   78.868972][ T2324] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[   78.881615][ T2324] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[   78.885305][ T2324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.906007][ T2324] usb 3-1: config 0 descriptor??
[   79.116393][ T2324] Bluetooth: Can't get state to change to load ram patch err
[   79.120569][ T2324] Bluetooth: Loading patch file failed
[   79.127965][ T2324] ath3k 3-1:0.0: probe with driver ath3k failed with error -71
[   79.141619][ T2324] usb 3-1: USB disconnect, device number 2
[   79.716548][ T6155] macvlan2: entered allmulticast mode
[   79.718870][ T6155] veth1_vlan: entered allmulticast mode
[   79.805053][   T55] Bluetooth: hci1: command tx timeout
[   79.882908][   T55] Bluetooth: hci0: command tx timeout
[   79.885144][   T55] Bluetooth: hci2: command tx timeout
[   80.242829][   T95] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   80.398204][   T95] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[   80.400735][   T95] usb 3-1: config 0 has no interface number 0
[   80.405227][   T95] usb 3-1: too many endpoints for config 0 interface 85 altsetting 0: 157, using maximum allowed: 30
[   80.408659][   T95] usb 3-1: config 0 interface 85 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 157
[   80.413242][   T95] usb 3-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=f1.f8
[   80.416201][   T95] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.423310][   T95] usb 3-1: config 0 descriptor??
[   80.435417][   T95] hub 3-1:0.85: bad descriptor, ignoring hub
[   80.437542][   T95] hub 3-1:0.85: probe with driver hub failed with error -5
[   80.440322][   T95] f81232 3-1:0.85: f81232 converter detected
[   80.449764][   T95] usb 3-1: f81232 converter now attached to ttyUSB0
[   80.635121][ T6185] IPv6: Can't replace route, no match found
[   80.670252][ T6187] loop0: detected capacity change from 0 to 128
[   80.680491][ T6187] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   80.687277][ T6187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   80.745941][ T2324] usb 3-1: USB disconnect, device number 3
[   80.763208][ T2324] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0
[   80.770159][ T2324] f81232 3-1:0.85: device disconnected
[   80.967712][   T95] kernel write not supported for file /snd/seq (pid: 95 comm: kworker/1:2)
[   80.979890][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.150'.
[   80.986096][ T6201] netlink: 'syz.1.150': attribute type 1 has an invalid length.
[   80.993859][ T6201] netlink: 32 bytes leftover after parsing attributes in process `syz.1.150'.
[   81.188961][ T6207] netlink: 'syz.2.154': attribute type 83 has an invalid length.
[   81.242853][   T95] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   81.282941][ T2324] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   81.331827][   T10] cfg80211: failed to load regulatory.db
[   81.402971][   T95] usb 1-1: Using ep0 maxpacket: 16
[   81.407423][   T95] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   81.415213][   T95] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[   81.419113][   T95] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.422518][   T95] usb 1-1: Product: syz
[   81.424847][   T95] usb 1-1: Manufacturer: syz
[   81.426782][   T95] usb 1-1: SerialNumber: syz
[   81.431790][   T95] usb 1-1: config 0 descriptor??
[   81.439332][   T95] pegasus_notetaker 1-1:0.0: Invalid number of endpoints
[   81.442336][   T95] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22
[   81.452814][ T2324] usb 2-1: Using ep0 maxpacket: 8
[   81.459906][ T2324] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[   81.463436][ T2324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.466411][ T2324] usb 2-1: Product: syz
[   81.468116][ T2324] usb 2-1: Manufacturer: syz
[   81.469864][ T2324] usb 2-1: SerialNumber: syz
[   81.475951][ T2324] usb 2-1: config 0 descriptor??
[   81.481135][ T2324] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244)
[   81.513263][  T794] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   81.645566][   T95] usb 1-1: USB disconnect, device number 2
[   81.678432][  T794] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[   81.685262][  T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.688090][  T794] usb 3-1: Product: syz
[   81.689678][  T794] usb 3-1: Manufacturer: syz
[   81.691497][  T794] usb 3-1: SerialNumber: syz
[   81.697925][  T794] usb 3-1: config 0 descriptor??
[   81.703130][  T794] gspca_main: sunplus-2.14.0 probing 04fc:504a
[   81.872811][ T5939] Bluetooth: hci1: command tx timeout
[   81.963493][ T5939] Bluetooth: hci2: command tx timeout
[   81.963736][   T55] Bluetooth: hci0: command tx timeout
[   82.106804][ T2324] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[   82.110005][ T2324] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[   82.114352][ T2324] usb 2-1: USB disconnect, device number 2
[   82.221727][ T6214] capability: warning: `syz.0.157' uses 32-bit capabilities (legacy support in use)
[   82.313454][  T794] gspca_sunplus: reg_r err -71
[   82.315123][  T794] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[   82.319359][  T794] usb 3-1: USB disconnect, device number 4
[   82.678276][ T6221] loop1: detected capacity change from 0 to 16
[   82.691754][ T6221] erofs (device loop1): mounted with root inode @ nid 36.
[   82.771515][ T6224] capability: warning: `syz.1.161' uses deprecated v2 capabilities in a way that may be insecure
[   82.947765][ T6227] loop1: detected capacity change from 0 to 128
[   82.999585][ T6227] FAT-fs (loop1): Directory bread(block 32) failed
[   83.002022][ T6227] FAT-fs (loop1): Directory bread(block 33) failed
[   83.020759][ T6227] FAT-fs (loop1): Directory bread(block 34) failed
[   83.032098][ T6227] FAT-fs (loop1): Directory bread(block 35) failed
[   83.035832][ T6227] FAT-fs (loop1): Directory bread(block 36) failed
[   83.037987][ T6227] FAT-fs (loop1): Directory bread(block 37) failed
[   83.040398][ T6227] FAT-fs (loop1): Directory bread(block 38) failed
[   83.042637][ T6227] FAT-fs (loop1): Directory bread(block 39) failed
[   83.045096][ T6227] FAT-fs (loop1): Directory bread(block 40) failed
[   83.049027][ T6227] FAT-fs (loop1): Directory bread(block 41) failed
[   83.267845][ T6227] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[   83.271513][ T6227] FAT-fs (loop1): Filesystem has been set read-only
[   83.320188][ T6217] block nbd0: shutting down sockets
[   83.329671][ T6227] syz.1.162: attempt to access beyond end of device
[   83.329671][ T6227] loop1: rw=2049, sector=4184, nr_sectors = 24 limit=128
[   83.350958][ T6227] syz.1.162: attempt to access beyond end of device
[   83.350958][ T6227] loop1: rw=2049, sector=4216, nr_sectors = 4 limit=128
[   83.365078][ T6227] Buffer I/O error on dev loop1, logical block 1054, lost async page write
[   83.370025][ T6227] syz.1.162: attempt to access beyond end of device
[   83.370025][ T6227] loop1: rw=2049, sector=4224, nr_sectors = 4 limit=128
[   83.375948][ T6227] Buffer I/O error on dev loop1, logical block 1056, lost async page write
[   83.380292][ T6227] syz.1.162: attempt to access beyond end of device
[   83.380292][ T6227] loop1: rw=2049, sector=4228, nr_sectors = 4 limit=128
[   83.562782][   T95] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   83.722872][   T95] usb 3-1: Using ep0 maxpacket: 16
[   83.743962][   T95] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.748285][   T95] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.752010][   T95] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   83.760560][   T95] usb 3-1: config 0 interface 0 has no altsetting 0
[   83.764019][   T95] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   83.767544][   T95] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.808838][   T95] usb 3-1: config 0 descriptor??
[   84.264263][   T95] hid (null): unknown global tag 0xe
[   84.266716][   T95] hid (null): usage index exceeded
[   84.268960][   T95] hid (null): unknown global tag 0xe
[   84.271840][   T95] hid (null): unknown global tag 0xd
[   84.274575][   T95] hid (null): nested delimiters
[   84.484206][   T95] usb 3-1: USB disconnect, device number 5
[   85.259372][ T6282] loop2: detected capacity change from 0 to 764
[   85.965108][   T95] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   86.122832][   T95] usb 2-1: Using ep0 maxpacket: 32
[   86.128646][   T95] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[   86.135130][   T95] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   86.143544][   T95] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[   86.148632][   T95] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[   86.152203][   T95] usb 2-1: Product: syz
[   86.155023][   T95] usb 2-1: Manufacturer: syz
[   86.158462][   T95] usb 2-1: SerialNumber: syz
[   86.167923][   T95] usb 2-1: config 0 descriptor??
[   86.190720][   T95] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   86.389420][   T13] usb 2-1: Failed to submit usb control message: -71
[   86.393492][   T95] usb 2-1: USB disconnect, device number 3
[   86.401698][   T13] usb 2-1: unable to send the bmi data to the device: -71
[   86.410401][   T13] usb 2-1: unable to get target info from device
[   86.413541][   T13] usb 2-1: could not get target info (-71)
[   86.416124][   T13] usb 2-1: could not probe fw (-71)
[   86.470442][ T6323] gre1: entered promiscuous mode
[   86.602621][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'.
[   86.666107][ T6337] loop2: detected capacity change from 0 to 128
[   86.671625][ T6337] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[   86.744711][ T6341] loop2: detected capacity change from 0 to 2048
[   86.748006][ T6341] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[   86.754902][ T6341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.762839][ T6015] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   86.763572][   T33] audit: type=1800 audit(1755139280.665:2): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.207" name="file1" dev="loop2" ino=1367 res=0 errno=0
[   86.789459][   T33] audit: type=1804 audit(1755139280.695:3): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.207" name="/newroot/37/file0/file1" dev="loop2" ino=1367 res=1 errno=0
[   86.900048][ T6347] loop2: detected capacity change from 0 to 512
[   86.915915][ T6347] EXT4-fs: Ignoring removed nomblk_io_submit option
[   86.943344][ T6015] usb 1-1: Using ep0 maxpacket: 32
[   86.945257][ T6347] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   86.949861][ T6347] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   86.954290][ T6015] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[   86.957049][ T6015] usb 1-1: config 0 has no interface number 0
[   86.965598][ T6015] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   86.968967][ T6015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.971592][ T6015] usb 1-1: Product: syz
[   86.973461][ T6015] usb 1-1: Manufacturer: syz
[   86.974876][ T6347] EXT4-fs (loop2): 1 truncate cleaned up
[   86.975269][ T6015] usb 1-1: SerialNumber: syz
[   86.982328][ T6347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.987334][ T6015] usb 1-1: config 0 descriptor??
[   86.991711][ T6015] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   86.998602][   T33] audit: type=1800 audit(1755139280.905:4): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.210" name="file1" dev="loop2" ino=15 res=0 errno=0
[   87.049256][ T5974] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.203377][ T6015] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   87.209539][ T6364] loop1: detected capacity change from 0 to 1024
[   87.227870][ T6015] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   87.239258][   T33] audit: type=1800 audit(1755139281.145:5): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.217" name="file1" dev="loop1" ino=20 res=0 errno=0
[   87.427783][ T6369] delete_channel: no stack
[   87.429515][ T6369] delete_channel: no stack
[   87.649818][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[   87.650186][   T10] usb 1-1: USB disconnect, device number 3
[   87.704844][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   87.766803][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   87.796915][   T10] quatech2 1-1:0.51: device disconnected
[   89.016068][ T6405] mmap: syz.1.233 (6405) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   89.102410][   T33] audit: type=1326 audit(1755139283.005:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.1.235" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fbf8ebe9 code=0x7ffc0000
[   89.110984][   T33] audit: type=1326 audit(1755139283.005:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.1.235" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fbf8ebe9 code=0x7ffc0000
[   89.121320][   T33] audit: type=1326 audit(1755139283.015:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.1.235" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f45fbf8ebe9 code=0x7ffc0000
[   89.132263][   T33] audit: type=1326 audit(1755139283.015:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fbf8ebe9 code=0x7ffc0000
[   89.144192][   T33] audit: type=1326 audit(1755139283.015:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f45fbf8ebe9 code=0x7ffc0000
[   89.152129][   T33] audit: type=1326 audit(1755139283.015:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fbf8ebe9 code=0x7ffc0000
[   89.185893][ T6411] bond_slave_0: entered promiscuous mode
[   89.188203][ T6411] bond_slave_1: entered promiscuous mode
[   89.190644][ T6411] macsec1: entered allmulticast mode
[   89.195719][ T6411] bond0: entered allmulticast mode
[   89.197821][ T6411] bond_slave_0: entered allmulticast mode
[   89.200622][ T6411] bond_slave_1: entered allmulticast mode
[   89.207019][ T6411] bond0: left allmulticast mode
[   89.209040][ T6411] bond_slave_0: left allmulticast mode
[   89.221847][ T6411] bond_slave_1: left allmulticast mode
[   89.224608][ T6411] bond_slave_0: left promiscuous mode
[   89.226826][ T6413] loop0: detected capacity change from 0 to 256
[   89.229430][ T6411] bond_slave_1: left promiscuous mode
[   89.265132][ T6413] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d)
[   89.552903][ T6002] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   89.706675][ T6002] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[   89.709996][ T6002] usb 1-1: config 0 has no interface number 0
[   89.712427][ T6002] usb 1-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2
[   89.716293][ T6002] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.720650][ T6002] usb 1-1: config 0 descriptor??
[   89.728232][ T6002] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.105/input/input5
[   89.862912][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   89.930925][ T5282] bcm5974 1-1:0.105: could not read from device
[   89.937459][ T5282] bcm5974 1-1:0.105: could not read from device
[   89.941622][ T6002] usb 1-1: USB disconnect, device number 4
[   89.944627][ T5282] bcm5974 1-1:0.105: could not read from device
[   89.960665][ T6210] udevd[6210]: Error opening device "/dev/input/event3": No such file or directory
[   89.964720][ T6210] udevd[6210]: Unable to EVIOCGABS device "/dev/input/event3"
[   89.968631][ T6210] udevd[6210]: Unable to EVIOCGABS device "/dev/input/event3"
[   89.971570][ T6210] udevd[6210]: Unable to EVIOCGABS device "/dev/input/event3"
[   89.974585][ T6210] udevd[6210]: Unable to EVIOCGABS device "/dev/input/event3"
[   90.012843][   T10] usb 2-1: Using ep0 maxpacket: 32
[   90.017224][   T10] usb 2-1: config 0 has an invalid interface number: 96 but max is 0
[   90.020570][   T10] usb 2-1: config 0 has no interface number 0
[   90.024144][   T10] usb 2-1: config 0 interface 96 has no altsetting 0
[   90.032331][   T10] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44
[   90.037449][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.040691][   T10] usb 2-1: Product: syz
[   90.042531][   T10] usb 2-1: Manufacturer: syz
[   90.047247][   T10] usb 2-1: SerialNumber: syz
[   90.053765][   T10] usb 2-1: config 0 descriptor??
[   90.058684][   T10] legousbtower 2-1:0.96: interrupt endpoints not found
[   90.266789][   T10] usb 2-1: USB disconnect, device number 4
[   91.542489][ T6440] loop0: detected capacity change from 0 to 4096
[   91.591988][ T6441] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   92.643838][   T33] audit: type=1326 audit(1755139286.555:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.254" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75de18ebe9 code=0x7fc00000
[   92.687413][ T6462] loop0: detected capacity change from 0 to 512
[   92.691717][ T6462] =======================================================
[   92.691717][ T6462] WARNING: The mand mount option has been deprecated and
[   92.691717][ T6462]          and is ignored by this kernel. Remove the mand
[   92.691717][ T6462]          option from the mount to silence this warning.
[   92.691717][ T6462] =======================================================
[   92.758302][ T6464] netlink: 156 bytes leftover after parsing attributes in process `syz.0.259'.
[   93.091902][ T6481] loop1: detected capacity change from 0 to 1024
[   93.114449][ T1090] hfsplus: b-tree write err: -5, ino 4
[   93.204292][ T6487] loop1: detected capacity change from 0 to 4096
[   93.228727][ T6487] EXT4-fs (loop1): Test dummy encryption mode enabled
[   93.232968][ T6487] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   93.236360][ T6487] System zones: 0-5
[   93.241436][ T6487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.269117][ T5970] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.302942][ T6002] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   93.465521][ T6002] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   93.469431][ T6002] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[   93.477965][ T6002] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   93.481754][ T6002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.485056][ T6002] usb 1-1: Product: syz
[   93.486862][ T6002] usb 1-1: Manufacturer: syz
[   93.488851][ T6002] usb 1-1: SerialNumber: syz
[   93.493999][ T6002] usb 1-1: config 0 descriptor??
[   93.726982][ T6002] usb 1-1: USB disconnect, device number 5
[   93.757850][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   94.384333][ T6501] loop1: detected capacity change from 0 to 4096
[   94.403304][ T6501] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   94.422399][ T6501] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   94.427309][ T6501] ntfs3(loop1): Failed to load $Extend (-22).
[   94.429276][ T6501] ntfs3(loop1): Failed to initialize $Extend.
[   95.235493][ T6537] loop0: detected capacity change from 0 to 256
[   95.238416][ T6537] exfat: Deprecated parameter 'namecase'
[   95.566220][ T6545] netlink: 'syz.1.292': attribute type 1 has an invalid length.
[   95.573148][ T6028] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   95.729846][ T6028] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[   95.733830][ T6028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.742010][ T6028] usb 1-1: config 0 descriptor??
[   95.754327][ T6028] gspca_main: cpia1-2.14.0 probing 0813:0001
[   96.184117][ T6028] cpia1 1-1:0.0: unexpected state after lo power cmd: 00
[   96.796807][ T6028] gspca_cpia1: usb_control_msg 05, error -71
[   96.805703][ T6028] cpia1 1-1:0.0: unexpected systemstate: 00
[   96.824628][ T6028] usb 1-1: USB disconnect, device number 6
[   97.269116][ T6556] loop1: detected capacity change from 0 to 8192
[   97.390103][ T6559] syz_tun: entered allmulticast mode
[   97.407451][ T6559] dvmrp1: entered allmulticast mode
[   97.437359][ T6557] syz_tun: left allmulticast mode
[   97.730042][ T6573] loop0: detected capacity change from 0 to 1024
[   99.054705][ T6589] loop1: detected capacity change from 0 to 4096
[   99.070567][ T6590] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.077986][ T6589] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[   99.083445][ T6589] Remounting filesystem read-only
[   99.340752][ T6028] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   99.555620][ T6028] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   99.556502][ T6028] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   99.557056][ T6028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.623307][ T6028] usb 1-1: config 0 descriptor??
[   99.858817][ T6585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.865167][ T6585] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.876583][ T6585] netlink: 'syz.0.308': attribute type 10 has an invalid length.
[   99.882419][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.886426][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.899371][ T6585] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.902368][ T6585] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.906323][ T6585] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.909258][ T6585] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.915982][ T6585] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   99.926982][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'.
[   99.930882][ T6585] bridge_slave_1: left allmulticast mode
[   99.934353][ T6585] bridge_slave_1: left promiscuous mode
[   99.936873][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.946646][ T6585] bridge_slave_0: left allmulticast mode
[   99.948917][ T6585] bridge_slave_0: left promiscuous mode
[   99.951306][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.974104][ T6585] bond0: (slave bridge0): Releasing backup interface
[  100.075183][ T6002] usb 1-1: USB disconnect, device number 7
[  100.423562][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  100.597660][   T10] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  100.602921][   T10] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  100.606233][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  100.633024][   T10] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  100.637000][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.646906][   T10] usb 2-1: Product: syz
[  100.648850][   T10] usb 2-1: Manufacturer: syz
[  100.650773][   T10] usb 2-1: SerialNumber: syz
[  100.660062][   T10] usb 2-1: config 0 descriptor??
[  100.667724][   T10] usb-storage 2-1:0.0: USB Mass Storage device detected
[  100.680102][   T10] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  100.794428][ T6609] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  100.798883][ T6609] macsec1: entered allmulticast mode
[  100.802158][ T6609] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  100.807204][ T6609] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  100.809878][ T6609] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  100.876972][ T6002] usb 2-1: USB disconnect, device number 5
[  100.951234][ T6613] smb3: Unexpected value for 'rdma'
[  101.825797][ T6632] netlink: 'syz.1.327': attribute type 3 has an invalid length.
[  101.995469][ T6639] loop1: detected capacity change from 0 to 16
[  102.000811][ T6639] erofs (device loop1): rootino(nid 36) is not a directory(i_mode 66300)
[  102.221502][ T6645] loop0: detected capacity change from 0 to 4096
[  102.255730][ T6645] ntfs3(loop0): ino=18, mi_enum_attr
[  102.257481][ T6645] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  102.341482][ T6641] loop1: detected capacity change from 0 to 32768
[  102.363625][ T6641] 
[  102.363625][ T6641]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  102.363625][ T6641] 
[  102.380465][   T33] audit: type=1800 audit(1755139296.285:13): pid=6641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.331" name="file1" dev="loop1" ino=4 res=0 errno=0
[  102.380570][ T6641] 
[  102.380570][ T6641]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  102.380570][ T6641] 
[  102.400196][ T6641] 
[  102.400196][ T6641]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  102.400196][ T6641] 
[  102.405593][ T6641] 
[  102.405593][ T6641]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  102.405593][ T6641] 
[  102.409233][ T6641] 
[  102.409233][ T6641]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  102.409233][ T6641] 
[  102.412520][ T6641] 
[  102.412520][ T6641]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  102.412520][ T6641] 
[  102.432570][  T116] 
[  102.432570][  T116]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  102.432570][  T116] 
[  102.443334][ T1092] 
[  102.443334][ T1092]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  102.443334][ T1092] 
[  102.447208][ T1092] 
[  102.447208][ T1092]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  102.447208][ T1092] 
[  102.451325][  T116] 
[  102.451325][  T116]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  102.451325][  T116] 
[  102.459460][ T6641] 
[  102.459460][ T6641]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  102.459460][ T6641] 
[  102.546122][ T6641] 
[  102.546122][ T6641]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  102.546122][ T6641] 
[  102.566730][ T5970] 
[  102.566730][ T5970]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  102.566730][ T5970] 
[  102.570031][ T5970] 
[  102.570031][ T5970]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  102.570031][ T5970] 
[  102.977525][ T6661] loop1: detected capacity change from 0 to 64
[  102.985391][ T6661] MINIX-fs: mounting file system with errors, running fsck is recommended
[  103.764841][ T6674] loop0: detected capacity change from 0 to 1024
[  103.792044][   T26] hfsplus: b-tree write err: -5, ino 4
[  104.378655][ T6699] netlink: 'syz.0.356': attribute type 22 has an invalid length.
[  104.381658][ T6699] netlink: 168 bytes leftover after parsing attributes in process `syz.0.356'.
[  104.391170][ T6687] loop1: detected capacity change from 0 to 32768
[  104.416159][ T6687] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.351 (6687)
[  104.521420][ T6687] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  104.528219][ T6687] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  104.531537][ T6687] BTRFS info (device loop1): using free-space-tree
[  104.881611][ T6687] BTRFS info (device loop1): device stats zeroed by syz.1.351 (6687)
[  105.028055][ T5970] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  105.066263][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.245104][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  105.250726][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  105.256707][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  105.272998][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  105.292278][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  105.383936][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.507563][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.672426][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.792812][ T6015] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  105.956866][ T6015] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00
[  105.959823][ T6015] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.966596][ T6015] usb 2-1: config 0 descriptor??
[  106.110006][   T12] bridge_slave_1: left allmulticast mode
[  106.114942][   T12] bridge_slave_1: left promiscuous mode
[  106.118276][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.130066][   T12] bridge_slave_0: left allmulticast mode
[  106.132162][   T12] bridge_slave_0: left promiscuous mode
[  106.136229][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.325461][ T6736] netlink: 372 bytes leftover after parsing attributes in process `syz.0.363'.
[  106.399623][ T6015] chicony 0003:04F2:1236.0002: unknown main item tag 0x0
[  106.402421][ T6015] chicony 0003:04F2:1236.0002: unknown main item tag 0x0
[  106.414824][ T6015] chicony 0003:04F2:1236.0002: unknown main item tag 0x0
[  106.417152][ T6015] chicony 0003:04F2:1236.0002: unknown main item tag 0x0
[  106.419818][ T6015] chicony 0003:04F2:1236.0002: unknown main item tag 0x0
[  106.438148][ T6015] chicony 0003:04F2:1236.0002: hidraw0: USB HID v1.01 Device [HID 04f2:1236] on usb-dummy_hcd.1-1/input0
[  106.539875][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.545824][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.549333][   T12] bond0 (unregistering): Released all slaves
[  106.602839][   T10] usb 2-1: USB disconnect, device number 6
[  106.607599][ T6729] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  106.704464][ T6721] chnl_net:caif_netlink_parms(): no params data found
[  106.762311][ T6729] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 168, changing to 11
[  106.775836][ T6729] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  106.794817][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.797628][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.800531][ T6721] bridge_slave_0: entered allmulticast mode
[  106.805283][ T6721] bridge_slave_0: entered promiscuous mode
[  106.809633][ T6721] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.812478][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.816245][ T6721] bridge_slave_1: entered allmulticast mode
[  106.817427][ T6729] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  106.819920][ T6721] bridge_slave_1: entered promiscuous mode
[  106.833745][ T6729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.842582][ T6729] usb 1-1: Product: syz
[  106.846480][ T6729] usb 1-1: Manufacturer: syz
[  106.852917][ T6729] usb 1-1: SerialNumber: syz
[  106.863096][ T6739] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  106.928636][ T6721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.949318][ T6721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.037230][   T12] hsr_slave_0: left promiscuous mode
[  107.040036][   T12] hsr_slave_1: left promiscuous mode
[  107.043307][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.046433][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.058594][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.061755][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.084270][ T6729] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  107.094580][ T6729] usb 1-1: USB disconnect, device number 8
[  107.096369][   T12] veth1_vlan: left allmulticast mode
[  107.099262][   T12] veth1_macvtap: left promiscuous mode
[  107.101728][   T12] veth0_macvtap: left promiscuous mode
[  107.113209][   T12] veth1_vlan: left promiscuous mode
[  107.115508][   T12] veth0_vlan: left promiscuous mode
[  107.402822][   T55] Bluetooth: hci2: command tx timeout
[  107.490310][   T12] team0 (unregistering): Port device team_slave_1 removed
[  107.515115][   T12] team0 (unregistering): Port device team_slave_0 removed
[  107.631536][ T6759] loop0: detected capacity change from 0 to 256
[  107.662570][ T6759] FAT-fs (loop0): Directory bread(block 64) failed
[  107.664914][ T6759] FAT-fs (loop0): Directory bread(block 65) failed
[  107.667088][ T6759] FAT-fs (loop0): Directory bread(block 66) failed
[  107.669215][ T6759] FAT-fs (loop0): Directory bread(block 67) failed
[  107.671415][ T6759] FAT-fs (loop0): Directory bread(block 68) failed
[  107.675662][ T6759] FAT-fs (loop0): Directory bread(block 69) failed
[  107.678175][ T6759] FAT-fs (loop0): Directory bread(block 70) failed
[  107.680685][ T6759] FAT-fs (loop0): Directory bread(block 71) failed
[  107.683508][ T6759] FAT-fs (loop0): Directory bread(block 72) failed
[  107.686254][ T6759] FAT-fs (loop0): Directory bread(block 73) failed
[  107.714447][   T33] audit: type=1800 audit(1755139301.625:14): pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.367" name="file2" dev="loop0" ino=1048633 res=0 errno=0
[  107.791109][ T6761] loop0: detected capacity change from 0 to 512
[  107.799661][ T6761] EXT4-fs: Ignoring removed oldalloc option
[  107.807086][ T6761] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  107.825359][ T6761] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  107.836820][ T6761] EXT4-fs (loop0): 1 truncate cleaned up
[  107.845581][ T6761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.845638][ T6721] team0: Port device team_slave_0 added
[  107.857174][ T6721] team0: Port device team_slave_1 added
[  107.918649][ T5966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.998379][ T6721] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.001146][ T6721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.028600][ T6721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.041736][ T6721] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.052547][ T6721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.086776][ T6721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.228258][ T6721] hsr_slave_0: entered promiscuous mode
[  108.240038][ T6721] hsr_slave_1: entered promiscuous mode
[  108.253654][ T6721] debugfs: 'hsr0' already exists in 'hsr'
[  108.255917][ T6721] Cannot create hsr debugfs directory
[  108.494063][ T6779] loop0: detected capacity change from 0 to 32768
[  108.565995][ T6779] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  108.612836][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  108.621161][ T6721] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  108.640333][ T6721] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  108.647442][ T5966] ocfs2: Unmounting device (7,0) on (node local)
[  108.652080][ T6721] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  108.690672][ T6721] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  108.773528][   T10] usb 2-1: Using ep0 maxpacket: 8
[  108.777801][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  108.782105][   T10] usb 2-1: config 1 has an invalid interface number: 65 but max is 0
[  108.787942][   T10] usb 2-1: config 1 has no interface number 0
[  108.790455][   T10] usb 2-1: too many endpoints for config 1 interface 65 altsetting 139: 128, using maximum allowed: 30
[  108.805635][   T10] usb 2-1: config 1 interface 65 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 128
[  108.810892][   T10] usb 2-1: config 1 interface 65 has no altsetting 0
[  108.839338][   T10] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd
[  108.851997][ T6721] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.855654][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.858134][   T10] usb 2-1: Product: syz
[  108.859495][   T10] usb 2-1: Manufacturer: syz
[  108.861361][   T10] usb 2-1: SerialNumber: syz
[  109.003102][ T6721] 8021q: adding VLAN 0 to HW filter on device team0
[  109.058904][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.062502][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.137464][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.140809][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.166732][   T10] kalmia 2-1:1.65 (unnamed net_device) (uninitialized): Error sending init packet. Status -22
[  109.171623][   T10] kalmia 2-1:1.65: probe with driver kalmia failed with error -22
[  109.192070][   T10] usb 2-1: USB disconnect, device number 7
[  109.483485][   T55] Bluetooth: hci2: command tx timeout
[  110.165804][ T6823] netlink: 'syz.1.377': attribute type 1 has an invalid length.
[  110.239601][ T6823] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.259625][ T6721] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.277101][ T6829] vlan2: entered allmulticast mode
[  110.279462][ T6829] macvtap0: entered allmulticast mode
[  110.281702][ T6829] veth0_macvtap: entered allmulticast mode
[  110.297234][ T6829] bond1: (slave vlan2): making interface the new active one
[  110.322122][ T6829] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  110.466602][ T6721] veth0_vlan: entered promiscuous mode
[  110.497803][ T6721] veth1_vlan: entered promiscuous mode
[  110.508641][ T6841] process 'syz.1.382' launched './file0' with NULL argv: empty string added
[  110.564237][ T6721] veth0_macvtap: entered promiscuous mode
[  110.569812][ T6721] veth1_macvtap: entered promiscuous mode
[  110.589725][ T6721] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.624156][ T6721] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.637641][ T6750] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.640718][ T6750] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.656139][ T6750] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.665515][ T6750] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.745713][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.748351][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.795122][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.797532][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.967768][ T6868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.391'.
[  111.463740][ T6871] loop3: detected capacity change from 0 to 40427
[  111.476693][ T6871] F2FS-fs (loop3): invalid crc value
[  111.526664][ T6871] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  111.531717][ T6871] F2FS-fs (loop3): Start checkpoint disabled!
[  111.542835][ T6871] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  111.554226][   T55] Bluetooth: hci2: command tx timeout
[  111.624689][ T6002] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  111.783800][ T6002] usb 1-1: Using ep0 maxpacket: 8
[  111.798432][ T6897] Bluetooth: MGMT ver 1.23
[  111.811961][ T6002] usb 1-1: unable to get BOS descriptor or descriptor too short
[  111.821214][ T6002] usb 1-1: config 7 has an invalid descriptor of length 255, skipping remainder of the config
[  111.831550][ T6002] usb 1-1: config 7 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  111.857151][ T6002] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  111.869660][ T6002] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  111.888443][ T6002] usb 1-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  111.896189][ T6903] loop3: detected capacity change from 0 to 512
[  111.910395][ T6903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.916452][ T6002] usb 1-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[  111.922219][ T6903] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.926701][ T6002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.929993][ T6002] usb 1-1: Product: syz
[  111.954393][ T6002] usb 1-1: Manufacturer: syz
[  111.956285][ T6002] usb 1-1: SerialNumber: syz
[  111.968296][ T6890] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  112.226200][ T6002] usb 1-1: USB disconnect, device number 9
[  112.347000][ T6903] EXT4-fs error (device loop3): ext4_get_inode_usage:884: inode #12: comm syz.3.403: corrupted xattr block 6: invalid header
[  112.406456][ T6721] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz-executor: corrupted inode contents
[  112.419562][ T6721] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz-executor: mark_inode_dirty error
[  112.431180][ T6721] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz-executor: corrupted inode contents
[  112.441578][ T6721] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz-executor: mark_inode_dirty error
[  112.456797][ T6721] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz-executor: corrupted inode contents
[  112.465860][ T6721] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz-executor: mark_inode_dirty error
[  112.481371][ T6721] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz-executor: corrupted inode contents
[  112.490876][ T6721] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz-executor: mark_inode_dirty error
[  112.496548][ T6721] EXT4-fs error (device loop3): ext4_evict_inode:265: comm syz-executor: couldn't truncate inode 13 (err -117)
[  112.505620][ T6721] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[  112.514938][ T6721] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[  112.532338][ T6721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.643018][   T55] Bluetooth: hci2: command tx timeout
[  113.852982][ T6028] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  113.978370][ T6971] loop0: detected capacity change from 0 to 32768
[  113.986473][ T6971] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.416 (6971)
[  114.003509][ T6028] usb 2-1: Using ep0 maxpacket: 16
[  114.018419][ T6028] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  114.033143][ T6028] usb 2-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  114.034979][ T6971] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  114.042313][ T6971] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  114.042311][ T6028] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  114.042332][ T6028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.050433][ T6971] BTRFS info (device loop0): using free-space-tree
[  114.070049][ T6028] usb 2-1: Product: syz
[  114.071821][ T6028] usb 2-1: Manufacturer: syz
[  114.076622][ T6028] usb 2-1: SerialNumber: syz
[  114.210213][   T33] audit: type=1800 audit(1755139308.115:15): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.416" name="file0" dev="loop0" ino=258 res=0 errno=0
[  114.240125][ T6971] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4)
[  114.316614][ T7005] loop3: detected capacity change from 0 to 1024
[  114.331773][ T7005] hfsplus: inconsistency in B*Tree (1,0,1,0,2)
[  114.335230][ T7005] hfsplus: xattr searching failed
[  114.336947][ T7005] syz.3.424: attempt to access beyond end of device
[  114.336947][ T7005] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  114.711031][ T6028] usb 2-1: USB disconnect, device number 8
[  114.797976][ T5966] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  116.081198][ T7038] loop1: detected capacity change from 0 to 2048
[  116.120281][ T7038] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  116.151823][ T7038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  116.244836][ T7046] loop3: detected capacity change from 0 to 256
[  116.255557][ T7046] FAT-fs (loop3): Directory bread(block 64) failed
[  116.258279][ T7046] FAT-fs (loop3): Directory bread(block 65) failed
[  116.260445][ T7046] FAT-fs (loop3): Directory bread(block 66) failed
[  116.263024][ T7046] FAT-fs (loop3): Directory bread(block 67) failed
[  116.265543][ T7046] FAT-fs (loop3): Directory bread(block 68) failed
[  116.273275][ T7046] FAT-fs (loop3): Directory bread(block 69) failed
[  116.276598][ T7046] FAT-fs (loop3): Directory bread(block 70) failed
[  116.279137][ T7046] FAT-fs (loop3): Directory bread(block 71) failed
[  116.281250][ T7046] FAT-fs (loop3): Directory bread(block 72) failed
[  116.283572][ T7046] FAT-fs (loop3): Directory bread(block 73) failed
[  116.286630][ T5970] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.379584][ T7054] nfs4: Unexpected value for 'acl'
[  116.479451][ T7060] loop1: detected capacity change from 0 to 1024
[  116.498813][ T7060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.522358][ T7060] EXT4-fs: Ignoring sb option on remount
[  116.524622][ T7060] EXT4-fs: Ignoring removed orlov option
[  116.528626][ T7060] EXT4-fs: Ignoring removed nomblk_io_submit option
[  116.530993][ T7060] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  116.534524][ T6015] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  116.539607][ T7060] EXT4-fs: Remounting fs w/o journal so ignoring data_err option
[  116.542028][ T7060] EXT4-fs: can't change dax mount option while remounting
[  116.560148][ T5970] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.638817][ T7070] ip6erspan0: entered promiscuous mode
[  116.682954][ T6015] usb 1-1: Using ep0 maxpacket: 8
[  116.687038][ T6015] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  116.691698][ T6015] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  116.700633][ T6015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11
[  116.718623][ T6015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024
[  116.725409][ T6015] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  116.737734][ T6015] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  116.741592][ T6015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.746614][ T6015] usb 1-1: Product: syz
[  116.748776][ T6015] usb 1-1: Manufacturer: syz
[  116.763791][ T6015] usb 1-1: SerialNumber: syz
[  116.771201][ T6015] usb 1-1: config 0 descriptor??
[  116.852777][ T6015] rc_core: IR keymap rc-imon-rsc not found
[  116.854727][ T6015] Registered IR keymap rc-empty
[  116.861706][ T6015] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  116.872376][ T6015] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6
[  116.920211][ T7091] loop3: detected capacity change from 0 to 256
[  116.924660][ T7091] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  116.928911][ T7091] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  116.947340][ T7091] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  117.007970][ T6729] usb 1-1: USB disconnect, device number 10
[  117.165365][ T6028] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  117.215169][ T7107] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  117.322795][ T6028] usb 2-1: Using ep0 maxpacket: 16
[  117.719696][ T6028] usb 2-1: config 0 has an invalid interface number: 195 but max is 0
[  117.722258][ T6028] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.848771][ T7120] loop0: detected capacity change from 0 to 8
[  118.292946][ T6028] usb 2-1: config 0 has no interface number 0
[  118.739449][ T6028] usb 2-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff
[  118.744137][ T6028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.755223][ T6028] usb 2-1: Product: syz
[  118.756670][ T6028] usb 2-1: Manufacturer: syz
[  118.758132][ T6028] usb 2-1: SerialNumber: syz
[  118.786004][ T6028] usb 2-1: config 0 descriptor??
[  118.799534][ T6028] rndis_host 2-1:0.195: More than one union descriptor, skipping ...
[  118.802994][ T6028] usb 2-1: bad CDC descriptors
[  118.805223][ T6028] cdc_acm 2-1:0.195: More than one union descriptor, skipping ...
[  118.998831][ T6028] usb 2-1: USB disconnect, device number 9
[  120.242377][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.487'.
[  120.248058][ T7146] loop1: detected capacity change from 0 to 40427
[  120.258279][ T7146] F2FS-fs: heap/no_heap options were deprecated
[  120.260482][ T7146] F2FS-fs: heap/no_heap options were deprecated
[  120.284430][ T7146] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  120.292882][ T7146] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  120.296345][ T7146] F2FS-fs (loop1): build fault injection rate: 1
[  120.298887][ T7146] F2FS-fs (loop1): build fault injection type: 0x1
[  120.301456][ T7146] F2FS-fs (loop1): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x2e45/0x6ff0
[  120.622326][ T7179] syz.1.494 uses obsolete (PF_INET,SOCK_PACKET)
[  120.643513][ T6002] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  120.802909][ T6002] usb 4-1: Using ep0 maxpacket: 32
[  120.806203][ T6002] usb 4-1: config 14 has an invalid interface number: 137 but max is 3
[  120.810223][ T6002] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  120.815195][ T6002] usb 4-1: config 14 has 2 interfaces, different from the descriptor's value: 4
[  120.818136][ T6002] usb 4-1: config 14 has no interface number 1
[  120.820046][ T6002] usb 4-1: config 14 interface 137 has no altsetting 0
[  120.825717][ T6002] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=2a.8a
[  120.828469][ T6002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.830923][ T6002] usb 4-1: Product: syz
[  120.832220][ T6002] usb 4-1: Manufacturer: syz
[  120.834258][ T6002] usb 4-1: SerialNumber: syz
[  121.061586][ T6002] ati_remote2 4-1:14.0: ati_remote2_probe(): interface 0 must have an endpoint
[  121.069172][ T6002] usb 4-1: USB disconnect, device number 2
[  121.217570][ T7198] loop0: detected capacity change from 0 to 256
[  121.222469][ T7198] exfat: Deprecated parameter 'namecase'
[  121.248105][ T7198] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  121.456612][ T7212] loop0: detected capacity change from 0 to 4096
[  121.459516][ T7212] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  121.477234][ T7212] ntfs3(loop0): Failed to load $Secure (-22).
[  121.479141][ T7212] ntfs3(loop0): Failed to initialize $Secure (-22).
[  121.566012][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  121.639529][   T33] audit: type=1326 audit(1755139315.545:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.3.511" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb94738ebe9 code=0x0
[  121.695792][ T7223] loop3: detected capacity change from 0 to 1764
[  121.705780][ T7223] iso9660: Corrupted directory entry in block 2 of inode 1920
[  121.733821][   T10] usb 2-1: Using ep0 maxpacket: 8
[  121.756833][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  121.766138][   T10] usb 2-1: config 8 has an invalid interface number: 118 but max is 0
[  121.774757][   T10] usb 2-1: config 8 has no interface number 0
[  121.777236][   T10] usb 2-1: config 8 interface 118 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 125
[  121.786664][   T10] usb 2-1: config 8 interface 118 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0
[  121.789897][   T10] usb 2-1: config 8 interface 118 has no altsetting 0
[  121.800829][   T10] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=9b.b7
[  121.804501][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.813007][   T10] usb 2-1: Product: syz
[  121.814814][   T10] usb 2-1: Manufacturer: syz
[  121.816316][   T10] usb 2-1: SerialNumber: syz
[  121.833090][ T7206] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  122.017284][ T7239] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  122.020260][ T7239] comedi comedi3: 8255: I/O port conflict (0x10000,4)
[  122.044711][ T7239] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  122.060013][ T7239] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  122.062465][   T10] pn533_usb 2-1:8.118: NFC: Could not find bulk-in or bulk-out endpoint
[  122.072436][ T7239] comedi comedi3: 8255: I/O port conflict (0x10,4)
[  122.079675][ T7239] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  122.082993][   T10] usb 2-1: USB disconnect, device number 10
[  122.095040][ T7239] comedi comedi3: 8255: I/O port conflict (0x400000a,4)
[  122.105436][ T7239] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4)
[  122.115848][ T7239] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  122.121575][ T7239] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  122.130076][ T7239] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  122.138732][ T7239] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  122.144587][ T7239] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  122.307099][ T7236] loop3: detected capacity change from 0 to 32768
[  122.314263][ T7250] warning: `syz.0.520' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  122.336342][ T7236] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  122.362543][ T7236] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  122.420614][ T6721] ocfs2: Unmounting device (7,3) on (node local)
[  122.560600][ T7262] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  123.070276][ T7283] loop3: detected capacity change from 0 to 4096
[  123.392053][   T40] ntfs3(loop3): ino=5, mi_enum_attr
[  123.649360][   T33] audit: type=1804 audit(1755139317.555:17): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.537" name="/newroot/64/file0" dev="tmpfs" ino=348 res=1 errno=0
[  124.034493][ T6015] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[  124.055969][ T7334] loop0: detected capacity change from 0 to 1024
[  124.271375][ T7345] loop3: detected capacity change from 0 to 32768
[  124.300748][ T6015] usb 2-1: unable to get BOS descriptor or descriptor too short
[  124.304364][ T6015] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.307575][ T6015] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  124.311588][ T6015] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.315376][ T6015] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  124.319055][ T6015] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.322338][ T6015] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  124.328512][ T6015] usb 2-1: string descriptor 0 read error: -22
[  124.330622][ T6015] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  124.333963][ T6015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.362835][ T7345] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  124.362847][ T7345]   allowing incompatible features above 0.0: (unknown version)
[  124.362852][ T7345]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  124.373848][ T7345] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  124.376276][ T7345] bcachefs (loop3): initializing new filesystem
[  124.385224][ T7345] bcachefs (loop3): going read-write
[  124.396155][ T7345] bcachefs (loop3): marking superblocks
[  124.406211][ T7345] bcachefs (loop3): initializing freespace
[  124.410688][ T7345] bcachefs (loop3): done initializing freespace
[  124.414741][ T7345] bcachefs (loop3): reading snapshots table
[  124.416604][ T7345] bcachefs (loop3): reading snapshots done
[  124.428890][ T6002] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  124.444538][ T7345] bcachefs (loop3): done starting filesystem
[  124.607999][   T10] usb 2-1: USB disconnect, device number 11
[  124.632997][ T6002] usb 1-1: Using ep0 maxpacket: 32
[  124.637243][ T6002] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  124.644466][ T6002] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[  124.647839][ T6002] usb 1-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3
[  124.651297][ T6002] usb 1-1: Manufacturer: syz
[  124.653074][ T6002] usb 1-1: SerialNumber: syz
[  124.665773][ T6002] usb 1-1: config 0 descriptor??
[  125.194045][ T7359] syz.3.546 (7359) used greatest stack depth: 19176 bytes left
[  125.197258][ T7345] syz.3.546 (7345) used greatest stack depth: 17448 bytes left
[  125.316645][ T6721] bcachefs (loop3): shutting down
[  125.318579][ T6721] bcachefs (loop3): going read-only
[  125.321792][ T6721] bcachefs (loop3): finished waiting for writes to stop
[  125.328787][ T6721] bcachefs (loop3): flushing journal and stopping allocators, journal seq 4
[  125.389727][ T6721] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 5
[  125.397167][ T6721] bcachefs (loop3): clean shutdown complete, journal seq 6
[  125.401989][ T6721] bcachefs (loop3): marking filesystem clean
[  125.473539][ T6721] bcachefs (loop3): shutdown complete
[  126.033802][ T6015] usb 1-1: USB disconnect, device number 11
[  126.188822][ T7376] loop1: detected capacity change from 0 to 2048
[  126.251068][ T7376] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.909072][ T7378] loop0: detected capacity change from 0 to 32768
[  127.083794][ T7378] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  127.083812][ T7378]   allowing incompatible features above 0.0: (unknown version)
[  127.083821][ T7378]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  127.098338][ T7378] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  127.101576][ T7378] bcachefs (loop0): initializing new filesystem
[  127.111421][ T7393] netlink: 200 bytes leftover after parsing attributes in process `syz.1.558'.
[  127.111875][ T7378] bcachefs (loop0): going read-write
[  127.139952][ T7378] bcachefs (loop0): marking superblocks
[  127.149833][ T7378] bcachefs (loop0): initializing freespace
[  127.155085][ T7378] bcachefs (loop0): done initializing freespace
[  127.159445][ T7378] bcachefs (loop0): reading snapshots table
[  127.161945][ T7378] bcachefs (loop0): reading snapshots done
[  127.191933][ T7378] bcachefs (loop0): done starting filesystem
[  127.331200][ T7403] loop3: detected capacity change from 0 to 4096
[  127.340218][ T7403] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  127.370420][ T7403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.419593][ T6721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.002176][ T5966] bcachefs (loop0): shutting down
[  128.017427][ T5966] bcachefs (loop0): going read-only
[  128.024692][ T5966] bcachefs (loop0): finished waiting for writes to stop
[  128.044944][ T7395] bch-copygc/loop (7395) used greatest stack depth: 17064 bytes left
[  128.047707][ T5966] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4
[  128.061384][   T33] audit: type=1326 audit(1755139321.965:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7398 comm="syz.1.559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fbf8ebe9 code=0x7fc00000
[  128.067455][ T5966] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 5
[  128.077139][ T5966] bcachefs (loop0): clean shutdown complete, journal seq 6
[  128.083796][ T5966] bcachefs (loop0): marking filesystem clean
[  128.118186][ T5966] bcachefs (loop0): shutdown complete
[  128.290407][ T7427] loop1: detected capacity change from 0 to 256
[  128.297292][ T7427] exfat: Deprecated parameter 'namecase'
[  128.309567][ T7427] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  128.342768][   T33] audit: type=1800 audit(1755139322.245:19): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.570" name="file1" dev="loop1" ino=1048644 res=0 errno=0
[  128.594933][ T7435] loop1: detected capacity change from 0 to 4096
[  128.613951][ T7435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.641249][ T5970] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.105802][ T6015] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  129.262941][ T6015] usb 2-1: Using ep0 maxpacket: 32
[  129.279191][ T6015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7
[  129.283901][ T6015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024
[  129.291076][ T6015] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  129.296901][ T6015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.300384][ T6015] usb 2-1: Product: syz
[  129.302243][ T6015] usb 2-1: Manufacturer: syz
[  129.304946][ T6015] usb 2-1: SerialNumber: syz
[  129.321122][ T6015] usb 2-1: config 0 descriptor??
[  129.342955][ T6015] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  129.559520][   T12] usb 2-1: Failed to submit usb control message: -71
[  129.562415][    T9] usb 2-1: USB disconnect, device number 12
[  129.565566][   T12] usb 2-1: unable to send the bmi data to the device: -71
[  129.568466][   T12] usb 2-1: unable to get target info from device
[  129.578143][   T12] usb 2-1: could not get target info (-71)
[  129.580386][   T12] usb 2-1: could not probe fw (-71)
[  130.527802][ T7477] loop1: detected capacity change from 0 to 164
[  130.575020][ T7471] loop0: detected capacity change from 0 to 32768
[  130.620996][ T7471] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  130.620996][ T7471] 
[  131.255214][ T6015] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  131.432898][ T6015] usb 2-1: Using ep0 maxpacket: 32
[  131.438390][ T6015] usb 2-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config
[  131.446152][ T6015] usb 2-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5
[  131.449776][ T6015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.454219][ T6015] usb 2-1: Product: syz
[  131.456007][ T6015] usb 2-1: Manufacturer: syz
[  131.458072][ T6015] usb 2-1: SerialNumber: syz
[  131.466999][ T6015] pwc: Askey VC010 type 1 USB webcam detected.
[  131.671871][ T6015] pwc: send_video_command error -71
[  131.675889][ T6015] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  131.679430][ T6015] Philips webcam 2-1:76.0: probe with driver Philips webcam failed with error -71
[  131.686041][ T6015] usb 2-1: USB disconnect, device number 13
[  132.515351][ T2236] wlan1: Trigger new scan to find an IBSS to join
[  132.518830][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.521470][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.631090][ T7515] netlink: 'syz.1.606': attribute type 1 has an invalid length.
[  132.697958][ T7519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.608'.
[  133.019908][ T7537] loop1: detected capacity change from 0 to 256
[  133.048623][ T7539] loop3: detected capacity change from 0 to 1024
[  133.060662][ T7539] EXT4-fs: inline encryption not supported
[  133.065418][ T7539] EXT4-fs: Ignoring removed i_version option
[  133.090447][ T7539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.161411][ T7539] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  133.216986][ T6721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.252093][ T7551] netlink: 132 bytes leftover after parsing attributes in process `syz.0.624'.
[  133.479916][ T7569] loop3: detected capacity change from 0 to 512
[  133.497271][ T7569] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  133.506175][ T7569] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  133.510172][ T7569] System zones: 0-2, 18-18, 34-35
[  133.513379][ T7569] EXT4-fs (loop3): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.555814][ T6721] EXT4-fs (loop3): unmounting filesystem 00000000-0700-0000-0000-000000000000.
[  133.591011][ T7572] loop0: detected capacity change from 0 to 8
[  133.622324][ T7572] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  133.628524][ T7574] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.631'.
[  135.557513][ T1092] wlan1: Trigger new scan to find an IBSS to join
[  135.720284][ T7618] loop3: detected capacity change from 0 to 256
[  135.750259][ T7622] Zero length message leads to an empty skb
[  135.785842][ T7624] loop0: detected capacity change from 0 to 512
[  135.789292][ T7624] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  136.394009][ T7637] binder: 7636:7637 ioctl c0306201 200000000240 returned -14
[  136.984005][ T5943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.066090][ T5943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.149906][ T5943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.194160][ T5943] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.290586][ T5943] bridge_slave_1: left allmulticast mode
[  137.292549][ T5943] bridge_slave_1: left promiscuous mode
[  137.296274][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.300980][ T5943] bridge_slave_0: left allmulticast mode
[  137.303087][ T5943] bridge_slave_0: left promiscuous mode
[  137.305135][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.635306][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.640198][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.645388][ T5943] bond0 (unregistering): Released all slaves
[  137.982134][ T5943] hsr_slave_0: left promiscuous mode
[  137.985132][ T5943] hsr_slave_1: left promiscuous mode
[  137.987897][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.990844][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.995178][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.998190][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.018276][ T5943] veth1_macvtap: left promiscuous mode
[  138.020647][ T5943] veth0_macvtap: left promiscuous mode
[  138.023615][ T5943] veth1_vlan: left promiscuous mode
[  138.025745][ T5943] veth0_vlan: left promiscuous mode
[  138.431777][ T5943] team0 (unregistering): Port device team_slave_1 removed
[  138.470449][ T5943] team0 (unregistering): Port device team_slave_0 removed
[  138.513016][   T27] wlan1: Trigger new scan to find an IBSS to join
[  139.241364][ T5943] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.309953][ T5943] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.377440][ T5943] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.449625][ T5943] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.455298][ T2236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.553195][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.766575][ T5943] dvmrp1 (unregistering): left allmulticast mode
[  139.894856][ T5943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.901115][ T5943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.906121][ T5943] bond0 (unregistering): Released all slaves
[  140.162119][ T5943] hsr_slave_0: left promiscuous mode
[  140.165046][ T5943] hsr_slave_1: left promiscuous mode
[  140.167771][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.170685][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.177419][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.180412][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.198578][ T5943] veth1_macvtap: left promiscuous mode
[  140.203535][ T5943] veth0_macvtap: left promiscuous mode
[  140.206007][ T5943] veth1_vlan: left promiscuous mode
[  140.208183][ T5943] veth0_vlan: left promiscuous mode
[  140.665991][ T5943] team0 (unregistering): Port device team_slave_1 removed
[  140.707036][ T5943] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
02:42:20  Registers:
info registers vcpu 0

CPU#0
RAX=46a94153144b0c00 RBX=ffffffff81968308 RCX=46a94153144b0c00 RDX=0000000000000001
RSI=ffffffff8d9b6de1 RDI=ffffffff8be33400 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f67dcdd7580 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000be126a1 0000000000000017 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0000000401000000 7eb2008f00010000
XMM06=0205003a16000000 0000000000000000 XMM07=000002ff8138e94b e81fcde000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=64aaab782d715d00 RBX=ffffffff81968308 RCX=64aaab782d715d00 RDX=0000000000000001
RSI=ffffffff8d9b6de1 RDI=ffffffff8be33400 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcc8f94058 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 000000002c6e616c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffffff ffffffff00000000 XMM09=0000000000000021 00000000306e616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
