last executing test programs:

2m15.660225309s ago: executing program 0 (id=444):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_stats})

2m15.610131624s ago: executing program 0 (id=445):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000100001002abd700e0200000000000000", @ANYBLOB="0000000040000000240012800c0001006d6163766c616e001400028008000100100000000800030001000000140035006d6163766c616e30"], 0x58}}, 0x8000)

2m15.549253375s ago: executing program 0 (id=447):
r0 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000280)="6f04", 0x2)
io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0)

2m15.499137178s ago: executing program 0 (id=449):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)={[{@fmask={'fmask', 0x3d, 0xbc61}}, {@umask={'umask', 0x3d, 0x3ff}}, {@discard}, {@discard}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@umask={'umask', 0x3d, 0x1}}, {@dmask={'dmask', 0x3d, 0x5}}, {@umask}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x5, 0x151c, &(0x7f00000006c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)

2m15.398860621s ago: executing program 0 (id=451):
r0 = socket$netlink(0x10, 0x3, 0x15)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000005c0)=@get={0x1, 0x0, 0x3d})

2m15.110140533s ago: executing program 0 (id=455):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

2m15.012894531s ago: executing program 32 (id=455):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

53.104032023s ago: executing program 3 (id=1342):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x80000)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x3})

53.012068691s ago: executing program 3 (id=1344):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x2c}, 0x1ff}], 0x2, 0x20022, 0x0)
recvfrom$unix(r2, &(0x7f00000008c0)=""/239, 0xf9, 0x42, 0x0, 0x4b)

52.67501114s ago: executing program 3 (id=1346):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4)
sendmmsg$inet6(r0, &(0x7f00000036c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="aa", 0x1}], 0x1}}], 0x1, 0x8040)

52.624766732s ago: executing program 3 (id=1347):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800))
ptrace$poke(0x21, r0, 0x0, 0x0)

52.482965117s ago: executing program 3 (id=1348):
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
ptrace(0x10, r0)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004)
ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8})
ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8})
ptrace(0x11, r0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0)
map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1)

52.018114574s ago: executing program 3 (id=1350):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0)

51.82870213s ago: executing program 33 (id=1350):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0)

4.937730725s ago: executing program 4 (id=1933):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x4, 0x3}, &(0x7f0000000000)=0x90)

4.827159016s ago: executing program 4 (id=1936):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000100), 0x1001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r2}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)

4.745684175s ago: executing program 4 (id=1938):
r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M")
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x81, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
fcntl$getownex(r1, 0x10, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r3=>r0, {0x7}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2e4d38b89064e7ba}, 0x890)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000810}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

2.577157025s ago: executing program 2 (id=1955):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x4, &(0x7f0000006400)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES64=0x0], 0xfd, 0x5abd, &(0x7f0000006440)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x5, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x24, 0x1)

2.339297404s ago: executing program 4 (id=1960):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
modify_ldt$write(0x1, &(0x7f0000000040), 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.089496105s ago: executing program 1 (id=1962):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

1.999593327s ago: executing program 1 (id=1963):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0)

1.999305403s ago: executing program 1 (id=1964):
r0 = socket$inet6(0xa, 0x3, 0x8)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
read(r0, &(0x7f00000000c0)=""/201, 0xc9)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0xe}}], 0x1, 0x0)

1.58023013s ago: executing program 2 (id=1965):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
lsm_get_self_attr(0x69, 0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
r1 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r2, 0x5606, 0x111f)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0)
writev(r6, &(0x7f0000000040)=[{&(0x7f00000003c0)="ff071d6ce89d96666b", 0x9}, {0x0, 0x3f}], 0x2)
fsmount(r0, 0x1, 0x70)
write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12)

1.480129704s ago: executing program 1 (id=1966):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x2, 0xe, 0x19, 0xfff}, 0x8, 0x802, 0x4, 0x0, 0xfffffffe, 0x4, 0x0})

1.127969118s ago: executing program 4 (id=1967):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)

1.127551026s ago: executing program 1 (id=1968):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x6}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

993.535225ms ago: executing program 1 (id=1969):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="120000000a0000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x0, 0x40000})
socket$nl_generic(0x10, 0x3, 0x10)
mount(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
lseek(r4, 0xfffffffffffffffc, 0x1)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000001440), 0x0}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)

913.957508ms ago: executing program 4 (id=1970):
syz_mount_image$ocfs2(&(0x7f00000002c0), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f0000000500)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cc85bf8e749e04e", @ANYRES16, @ANYRESOCT, @ANYRES16], 0x11, 0x445c, &(0x7f0000004a80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x4002, 0x0, 0x21, 0x0, 0x0)
rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000400)='./file0\x00')

429.539896ms ago: executing program 2 (id=1971):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

220.36542ms ago: executing program 2 (id=1972):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x301c40a, &(0x7f00000005c0)={[{@utf8}, {@utf8no}, {@shortname_winnt}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@rodir}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlate}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@shortname_mixed}, {@shortname_lower}, {@fat=@errors_continue}, {@uni_xlate}]}, 0x6, 0x2d5, &(0x7f0000000240)="$eJzs3T+LHGUcB/Df7O3tTrTYLaxEcEALq5BLa7OHJCBeZdhCLfQwCcjtIiRw4B+cTWUl2FhY+AoEwRdi4zsQbAU7IwRGZnYmM5vbXPbk9sTc59PcM8883+f5zdxwO1fccx+9Mj+6ncXdB1/+FmmaRG8Sk3iYxDh60VgUS/nycPJtAAD/Zw+LIv6sP9/PkksiIt1eWQDAFm32+d9vmz9fSFkAwBbdeu/9d/YPDm68m2Vp3Jx/fTwtf7Mvvy7P79+NT2IWd+JajOJRRPWisBvV20LZvFkURd7PSuN4fZ4fT8vk/MNf6vn3/4io8nsxinHV9fhto8q/fXBjL1vq5POyjhfq9Sdl/nqM4qXH4ZX89TX5mA7ijdc69V+NUfz6cXwas7hdFdHmv9rLsreK7/764oOyvDKf5MfTYTWuVex0j65czLcHAAAAAAAAAAAAAAAAAAAAAIDn1NV675xhVPv3lF31/js7j8qD3cga49X9eZb5pJmouz9QURR5ET80++tcy7KsqAe2+X683O9uLAgAAAAAAAAAAAAAAAAAAACX1/3PPj86nM3u3DuXRrMbQD8i/r4V8W/nmXR6Xo3TBw/rNQ9ns17dXB3T7/bETjMmiTi1jPIizum2PKtx5UTNdePHnzaaJ4lY1D3psxfdXb/WeTaap+voMFl/D4fR9KT1Q/L9IKIdM4inLbFY7Rk8rYwizvL4DdaeGm0W/6a+2nKeF6uevDm1OJmK5InCkqQz5s3fl3PVPcmTVzGo7uq6MiJtGm18dUy60fMc6TJ+8mdFYrcOAAAAAAAAAAAAAAAAAADYqvavf9ecfHBqtFcMt1YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyo9v//n6GR1+ENBg/i3v3/+BIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4BP4JAAD//47KXt4=")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, 0x0, 0x0, 0x0, 0x0)

128.737851ms ago: executing program 2 (id=1973):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x14}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80)

0s ago: executing program 2 (id=1974):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}})
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

_slave_1: entered promiscuous mode
[  105.675001][ T6011] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  105.756424][ T6837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.788578][ T6837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.825599][ T6011] usb 2-1: Using ep0 maxpacket: 16
[  105.832182][ T6011] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  105.838700][ T6011] usb 2-1: config 0 has no interface number 0
[  105.848064][ T6011] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  105.851830][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.865393][ T6011] usb 2-1: Product: syz
[  105.870044][ T6011] usb 2-1: Manufacturer: syz
[  105.878485][ T6011] usb 2-1: SerialNumber: syz
[  105.900002][ T6011] usb 2-1: config 0 descriptor??
[  105.922967][ T6011] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  105.945049][ T6837] team0: Port device team_slave_0 added
[  105.949684][ T6837] team0: Port device team_slave_1 added
[  106.029877][ T6837] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.034249][ T6837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.046272][ T6837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.069767][ T6837] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.072530][ T6837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.103675][ T6837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.208320][ T6837] hsr_slave_0: entered promiscuous mode
[  106.212812][ T6837] hsr_slave_1: entered promiscuous mode
[  106.215873][ T6837] debugfs: 'hsr0' already exists in 'hsr'
[  106.217925][ T6837] Cannot create hsr debugfs directory
[  106.362804][ T6011] gspca_spca1528: reg_w err -71
[  106.385655][ T6011] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[  106.407884][ T6011] usb 2-1: USB disconnect, device number 8
[  106.809102][ T6837] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  106.818233][ T6837] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  106.837665][ T6837] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  106.847725][ T5238] Bluetooth: hci2: command tx timeout
[  106.868297][ T6837] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  107.010059][ T6837] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.025736][ T6837] 8021q: adding VLAN 0 to HW filter on device team0
[  107.058503][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.061939][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.077306][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.080102][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.159854][ T6837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  107.258980][ T6943] loop1: detected capacity change from 0 to 1024
[  107.371187][ T6837] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.395922][ T6943] EXT4-fs: Ignoring removed orlov option
[  107.439705][ T6943] EXT4-fs (loop1): invalid inodes per group: 0
[  107.439705][ T6943] 
[  107.888304][ T6837] veth0_vlan: entered promiscuous mode
[  107.898037][ T6837] veth1_vlan: entered promiscuous mode
[  107.932332][ T6837] veth0_macvtap: entered promiscuous mode
[  107.945928][ T6837] veth1_macvtap: entered promiscuous mode
[  107.966096][ T6837] batman_adv: batadv0: Interface activated: batadv_slave_0
[  107.977082][ T6837] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.992615][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.999000][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.002434][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.009468][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.112052][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.115378][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.140794][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.144161][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.621802][ T6979] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  108.657932][ T6979] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  108.885356][ T5238] Bluetooth: hci2: command tx timeout
[  110.025020][  T792] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  110.297449][  T792] usb 4-1: Using ep0 maxpacket: 16
[  110.311771][  T792] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.316496][  T792] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  110.320890][  T792] usb 4-1: config 1 has no interface number 1
[  110.324275][  T792] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  110.335769][  T792] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  110.342922][  T792] usb 4-1: config 1 interface 2 has no altsetting 0
[  110.357612][  T792] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  110.361856][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.367093][  T792] usb 4-1: Product: syz
[  110.368989][  T792] usb 4-1: Manufacturer: syz
[  110.370967][  T792] usb 4-1: SerialNumber: syz
[  110.606761][  T792] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  110.624710][  T792] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  110.633067][  T792] usb 4-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes
[  110.638269][  T792] usb 4-1: selecting invalid altsetting 0
[  110.769669][  T792] usb 4-1: USB disconnect, device number 2
[  110.965009][ T5238] Bluetooth: hci2: command tx timeout
[  111.661028][ T7036] erspan0: entered promiscuous mode
[  113.084135][ T7053] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  114.093052][ T7083] syz_tun: entered allmulticast mode
[  114.104229][ T7082] syz_tun: left allmulticast mode
[  114.170756][ T7085] loop1: detected capacity change from 0 to 512
[  114.174283][ T7085] EXT4-fs: Ignoring removed nomblk_io_submit option
[  114.181524][ T7085] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  114.189700][ T7085] EXT4-fs (loop1): orphan cleanup on readonly fs
[  114.194453][ T7085] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  114.198247][ T7085] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  114.209188][ T7085] EXT4-fs (loop1): 1 truncate cleaned up
[  114.229862][ T7085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  114.237169][ T7085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.620965][ T7107] input: syz0 as /devices/virtual/input/input9
[  114.668924][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.546'.
[  114.678077][ T7109] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.546'.
[  114.734992][ T6011] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  114.886647][ T6011] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.889422][ T7121] syz.2.552 uses obsolete (PF_INET,SOCK_PACKET)
[  114.890636][ T6011] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  114.899814][ T6011] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  114.904248][ T6011] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  114.912690][ T6011] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  114.917542][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.920605][ T6011] usb 2-1: Product: syz
[  114.922376][ T6011] usb 2-1: Manufacturer: syz
[  114.924204][ T6011] usb 2-1: SerialNumber: syz
[  114.931307][ T6011] usb 2-1: config 0 descriptor??
[  114.944279][ T6011] xbox_remote_probe: Unexpected endpoint_in
[  115.008154][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  115.157731][    T9] usb 4-1: too many configurations: 151, using maximum allowed: 8
[  115.171015][ T6011] usb 2-1: USB disconnect, device number 9
[  115.203532][    T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  115.208296][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  115.211344][    T9] usb 4-1: Product: syz
[  115.213397][    T9] usb 4-1: Manufacturer: syz
[  115.217029][    T9] usb 4-1: SerialNumber: syz
[  115.226958][    T9] usb 4-1: config 0 descriptor??
[  115.433850][ T6031] usb 4-1: USB disconnect, device number 3
[  115.966532][ T7144] loop1: detected capacity change from 0 to 1024
[  115.993386][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'.
[  115.998520][ T7146] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  116.011435][ T7144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.890364][ T5987] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.945319][  T792] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  117.098425][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.102872][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.118416][  T792] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  117.125030][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.147394][  T792] usb 4-1: config 0 descriptor??
[  117.587938][  T792] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0
[  117.594114][  T792] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0
[  117.597956][  T792] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0
[  117.601148][  T792] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0
[  117.608069][  T792] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0
[  117.611177][  T792] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0
[  117.616521][  T792] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0
[  117.631108][  T792] hid-thrustmaster 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0
[  117.645147][  T792] hid-thrustmaster 0003:044F:B65D.0003: Wrong number of endpoints?
[  117.791155][    C1] hid-thrustmaster 0003:044F:B65D.0003: Unknown wheel's model id 0x0, unable to proceed further with wheel init
[  117.993564][    T9] usb 4-1: USB disconnect, device number 4
[  118.410047][ T7210] netlink: 'syz.2.585': attribute type 5 has an invalid length.
[  119.595170][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  119.749264][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.753055][    T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  119.759108][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.767356][    T9] usb 4-1: config 0 descriptor??
[  120.190166][    T9] lenovo 0003:17EF:6047.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0
[  120.381096][    T9] lenovo 0003:17EF:6047.0004: Failed to switch F7/9/11 mode: -71
[  120.391342][    T9] lenovo 0003:17EF:6047.0004: Failed to switch middle button: -71
[  120.398635][    T9] lenovo 0003:17EF:6047.0004: Fn-lock setting failed: -71
[  120.406820][    T9] lenovo 0003:17EF:6047.0004: Sensitivity setting failed: -71
[  120.417951][    T9] usb 4-1: USB disconnect, device number 5
[  120.963875][ T7305] input: syz1 as /devices/virtual/input/input10
[  121.010008][ T7308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.097599][ T7312] netlink: 'syz.3.623': attribute type 1 has an invalid length.
[  121.320891][ T7331] loop1: detected capacity change from 0 to 1024
[  121.353521][ T7331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.369154][ T7331] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.401431][ T5987] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.774172][ T7355] loop1: detected capacity change from 0 to 32768
[  121.851146][ T7355] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=lz4,wide_macs,no_splitbrain_check,recovery_pass_last=accounting_read,nojournal_transaction_names,read_only,version_upgrade=incompatible,no_data_io
[  121.851163][ T7355]   allowing incompatible features above 0.0: (unknown version)
[  121.851168][ T7355]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  121.869456][ T7355] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  121.874224][ T7355] bcachefs (loop1): invalid bkey in superblock btree=lru level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 131072 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0
[  121.874256][ T7355]   size != 0, deleting
[  121.882799][ T7355] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  121.885662][ T7355] bcachefs (loop1): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 0.0: (unknown version)
[  121.885662][ T7355] 
[  121.893278][ T7355] syz.1.642: attempt to access beyond end of device
[  121.893278][ T7355] loop1: rw=6145, sector=18446744073709551615, nr_sectors = 10 limit=32768
[  121.899694][ T7355] bcachefs (loop1): superblock write error: I/O
[  121.902027][ T7355] bcachefs (loop1): bch2_write_super(): fatal error : Unable to write superblock to sufficient devices (from bch2_fs_recovery)
[  121.907531][ T7355] bcachefs (loop1): fatal error - emergency read only
[  121.927053][ T7355] bcachefs (loop1): bch2_write_super(): fatal error  loop1: Superblock modified by another process (seq 43 expected 42)
[  121.932995][ T7355] bcachefs (loop1): btree node read error at btree alloc level 0/0
[  121.933032][ T7355]   u64s 11 type btree_ptr_v2 283673999966207:U64_MAX:U32_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  121.933045][ T7355]   loop1 node offset 0/24 bset u64s 0: incorrect max key SPOS_MAX
[  121.933053][ T7355]   loop1 btree validate error
[  121.933061][ T7355]   flagging btree alloc lost data
[  121.933068][ T7355]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  121.933077][ T7355]   running recovery pass check_allocations (8), currently at recovery_pass_empty (0)
[  121.933084][ T7355]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[  121.933088][ T7355]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[  121.933096][ T7355]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[  121.933104][ T7355]   ret btree_node_read_err_bad_node
[  121.966797][ T7355] bcachefs (loop1): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[  121.976533][ T7355] bcachefs (loop1): check_topology...
[  121.978706][ T7355] bcachefs (loop1): bch2_write_super(): fatal error  loop1: Superblock modified by another process (seq 43 expected 42)
[  121.985618][ T7355]  done
[  121.986660][ T7355] bcachefs (loop1): accounting_read...
[  121.988676][ T7355] bcachefs (loop1): bch2_write_super(): fatal error  loop1: Superblock modified by another process (seq 43 expected 42)
[  121.995047][ T7355]  done
[  121.996151][ T7355] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[  121.999932][ T7355] bcachefs (loop1): bch2_write_super(): fatal error  loop1: Superblock modified by another process (seq 43 expected 42)
[  122.004725][ T7355] bcachefs (loop1): done starting filesystem
[  122.068975][ T5987] bcachefs (loop1): shutting down
[  122.095760][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  122.101790][ T5987] bcachefs (loop1): shutdown complete
[  122.190080][ T7368] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  122.195039][ T7368] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  122.259364][    T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  122.262815][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.266422][    T9] usb 4-1: Product: syz
[  122.267989][    T9] usb 4-1: Manufacturer: syz
[  122.269763][    T9] usb 4-1: SerialNumber: syz
[  122.282257][    T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  122.330542][ T6011] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  122.771930][ T6052] usb 4-1: USB disconnect, device number 6
[  123.591571][ T6011] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  123.594553][ T6011] ath9k_htc: Failed to initialize the device
[  123.599792][ T6052] usb 4-1: ath9k_htc: USB layer deinitialized
[  123.642856][ T7393] loop3: detected capacity change from 0 to 512
[  123.654446][ T7393] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  123.680814][ T7393] EXT4-fs (loop3): 1 truncate cleaned up
[  123.684355][ T7393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.700356][ T7393] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.660: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  123.728645][ T7393] EXT4-fs (loop3): Remounting filesystem read-only
[  123.732647][ T7393] EXT4-fs warning (device loop3): ext4_rename_delete:3731: inode #2: comm syz.3.660: Deleting old file: nlink 5, error=-117
[  123.780987][ T6837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.021124][ T7410] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.666'.
[  124.767382][ T7433] netlink: 'syz.1.676': attribute type 1 has an invalid length.
[  124.770321][ T7433] netlink: 228 bytes leftover after parsing attributes in process `syz.1.676'.
[  125.066289][ T7445] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  125.290416][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.688'.
[  126.005272][ T6011] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  126.179384][ T6011] usb 4-1: too many configurations: 37, using maximum allowed: 8
[  126.466984][ T5238] Bluetooth: hci2: adv larger than maximum supported
[  126.467025][ T5238] Bluetooth: hci2: Malformed LE Event: 0x0d
[  126.475120][ T6011] usb 4-1: string descriptor 0 read error: -71
[  126.481552][ T6011] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  126.486351][ T6011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.491440][ T6011] usb 4-1: can't set config #1, error -71
[  126.494393][ T6011] usb 4-1: USB disconnect, device number 7
[  126.762610][ T7505] loop1: detected capacity change from 0 to 40427
[  126.833298][ T7505] F2FS-fs (loop1): invalid crc value
[  126.917118][ T7505] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  126.930008][ T7505] F2FS-fs (loop1): Start checkpoint disabled!
[  126.942421][ T7505] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  127.352080][ T7527] loop1: detected capacity change from 0 to 4096
[  127.386066][ T7530] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  127.430529][ T5987] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[  127.440869][ T5987] Remounting filesystem read-only
[  127.442922][ T5987] NILFS error (device loop1): nilfs_readdir: bad page in #2
[  127.455969][ T5987] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=8192, inode=0, rec_len=0, name_len=0
[  127.462242][ T5987] NILFS error (device loop1): nilfs_readdir: bad page in #2
[  127.509159][   T33] audit: type=1326 audit(1757676268.411:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.1.722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22be18eba9 code=0x7ffc0000
[  127.524982][   T33] audit: type=1326 audit(1757676268.411:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.1.722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22be18eba9 code=0x7ffc0000
[  127.542488][   T33] audit: type=1326 audit(1757676268.411:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.1.722" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22be18d510 code=0x7ffc0000
[  127.552218][   T33] audit: type=1326 audit(1757676268.411:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.1.722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22be18eba9 code=0x7ffc0000
[  127.561101][   T33] audit: type=1326 audit(1757676268.411:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.1.722" exe="/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f22be18eba9 code=0x7ffc0000
[  127.574041][   T33] audit: type=1326 audit(1757676268.411:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.1.722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22be18eba9 code=0x7ffc0000
[  127.583052][   T33] audit: type=1326 audit(1757676268.411:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.1.722" exe="/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f22be18eba9 code=0x7ffc0000
[  127.597369][   T33] audit: type=1326 audit(1757676268.411:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.1.722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22be18eba9 code=0x7ffc0000
[  127.688018][ T7542] loop3: detected capacity change from 0 to 256
[  127.790074][ T7546] RDS: rds_bind could not find a transport for ::ffff:0.0.0.224, load rds_tcp or rds_rdma?
[  127.826903][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  128.191520][ T7556] overlayfs: failed to resolve './file0': -2
[  128.452092][   T10] usb 2-1: Using ep0 maxpacket: 8
[  128.466840][   T10] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  128.470430][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.474931][   T10] usb 2-1: Product: syz
[  128.476580][   T10] usb 2-1: Manufacturer: syz
[  128.478412][   T10] usb 2-1: SerialNumber: syz
[  128.485408][   T10] usb 2-1: config 0 descriptor??
[  128.642366][ T7569] fuse: Bad value for 'fd'
[  128.693791][ T7536] loop1: detected capacity change from 0 to 256
[  128.997020][ T7578] block nbd1: not configured, cannot reconfigure
[  129.135234][   T54] Bluetooth: hci2: command tx timeout
[  129.282511][ T7581] netlink: 'syz.3.742': attribute type 11 has an invalid length.
[  129.288468][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.742'.
[  129.688814][ T7593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.746'.
[  130.374240][ T7599] vlan2: entered promiscuous mode
[  130.377264][ T7599] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  130.489414][ T7601] netlink: 'syz.2.750': attribute type 12 has an invalid length.
[  130.492444][ T7601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.750'.
[  130.622308][   T10] usb 2-1: USB disconnect, device number 10
[  131.767980][ T7616] Process accounting resumed
[  132.033118][ T7624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.759'.
[  132.043719][ T7624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.759'.
[  132.060493][ T7624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.759'.
[  132.069059][ T7624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.759'.
[  132.076719][ T7624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.759'.
[  132.089610][ T7624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.759'.
[  132.319389][  T792] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  132.465077][  T792] usb 4-1: Using ep0 maxpacket: 16
[  132.467676][ T7643] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.767'.
[  132.470574][  T792] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  132.477789][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.480418][  T792] usb 4-1: Product: syz
[  132.481720][  T792] usb 4-1: Manufacturer: syz
[  132.483343][  T792] usb 4-1: SerialNumber: syz
[  132.505754][  T792] usb 4-1: config 0 descriptor??
[  132.511059][  T792] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  132.516879][  T792] usb 4-1: Detected FT-X
[  132.534533][ T7646] pim6reg: entered allmulticast mode
[  132.538731][ T7646] pim6reg: left allmulticast mode
[  132.631874][ T7650] netlink: 'syz.1.771': attribute type 21 has an invalid length.
[  132.649988][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.652471][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.720820][  T792] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  132.747342][ T7656] netlink: 'syz.1.774': attribute type 12 has an invalid length.
[  132.766190][ T7656] netlink: 'syz.1.774': attribute type 12 has an invalid length.
[  132.769321][ T5992] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  132.773319][ T5992] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  132.781900][ T5992] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  132.785689][ T5992] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  133.269503][  T792] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  133.291611][ T7684] loop1: detected capacity change from 0 to 1024
[  133.295974][ T7684] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  133.306295][ T7684] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  133.638864][ T7684] EXT4-fs (loop1): orphan cleanup on readonly fs
[  133.672822][  T792] usb 4-1: USB disconnect, device number 8
[  133.692287][ T7684] Quota error (device loop1): v2_read_file_info: Can't read info structure
[  133.697372][ T7684] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  133.704422][ T7684] EXT4-fs (loop1): Cannot turn on quotas: error -5
[  133.723719][ T7684] EXT4-fs (loop1): 1 truncate cleaned up
[  133.731208][  T792] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  133.734785][ T7684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  133.739145][  T792] ftdi_sio 4-1:0.0: device disconnected
[  133.787244][ T5987] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.120534][ T7693] fuse: Bad value for 'fd'
[  134.576202][ T6031] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  134.738137][ T6031] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.745031][ T6031] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.748749][ T6031] usb 4-1: config 0 interface 0 has no altsetting 0
[  134.750827][ T6031] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  134.753780][ T6031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.766068][ T6031] usb 4-1: config 0 descriptor??
[  134.875087][   T33] audit: type=1326 audit(1757676275.771:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.1.799" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22be18eba9 code=0x7ffc0000
[  134.893439][   T33] audit: type=1326 audit(1757676275.781:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.1.799" exe="/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f22be18eba9 code=0x7ffc0000
[  134.924156][   T33] audit: type=1326 audit(1757676275.781:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.1.799" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22be18eba9 code=0x7ffc0000
[  134.938886][   T33] audit: type=1326 audit(1757676275.781:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.1.799" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22be18eba9 code=0x7ffc0000
[  134.956313][ T7716] evm: overlay not supported
[  135.373797][ T6031] usb 4-1: string descriptor 0 read error: -22
[  135.581431][ T6031] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0005/input/input11
[  135.650828][ T6031] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[  135.779138][ T6031] usb 4-1: USB disconnect, device number 9
[  137.214587][ T7729] loop3: detected capacity change from 0 to 32768
[  137.236896][ T7729] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  137.289522][ T6031] IPVS: starting estimator thread 0...
[  137.326991][ T7729] XFS (loop3): Ending clean mount
[  137.359642][ T7729] XFS (loop3): Quotacheck needed: Please wait.
[  137.408827][ T7745] IPVS: using max 37 ests per chain, 88800 per kthread
[  137.458897][ T7729] XFS (loop3): Quotacheck: Done.
[  137.538534][ T6837] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  137.812005][ T7747] netlink: 'syz.3.809': attribute type 10 has an invalid length.
[  137.814712][ T7747] __nla_validate_parse: 4 callbacks suppressed
[  137.814724][ T7747] netlink: 40 bytes leftover after parsing attributes in process `syz.3.809'.
[  137.841421][ T7747] team0: Port device geneve0 added
[  137.994781][ T7753] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  138.818931][ T6052] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  138.976738][ T6052] usb 4-1: Using ep0 maxpacket: 16
[  138.992243][ T6052] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.002579][ T6052] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59
[  139.009293][ T6052] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.025291][ T6052] usb 4-1: Product: syz
[  139.027179][ T6052] usb 4-1: Manufacturer: syz
[  139.029054][ T6052] usb 4-1: SerialNumber: syz
[  139.056452][ T6052] usb 4-1: config 0 descriptor??
[  139.104046][ T6052] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22
[  139.108471][ T6052] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -22)
[  139.169603][ T7766] loop1: detected capacity change from 0 to 2048
[  139.177117][ T6052] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22
[  139.237883][ T7766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.259133][ T7766] EXT4-fs (loop1): shut down requested (2)
[  139.298301][ T5987] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.307095][ T6052] usb 4-1: USB disconnect, device number 10
[  139.333945][ T7775] netlink: 'syz.2.820': attribute type 1 has an invalid length.
[  139.401034][ T7779] netlink: 11 bytes leftover after parsing attributes in process `syz.2.821'.
[  139.610370][ T7793] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.726223][ T5314] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[  139.888568][ T5314] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  139.891642][ T5314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.899724][ T5314] usb 2-1: config 0 descriptor??
[  139.981667][ T7813] netlink: 392 bytes leftover after parsing attributes in process `syz.2.838'.
[  140.085431][ T6052] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  140.246457][ T6052] usb 4-1: Using ep0 maxpacket: 32
[  140.260724][ T6052] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  140.265235][ T6052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.272224][ T6052] usb 4-1: config 0 descriptor??
[  140.284704][ T6052] gspca_main: sunplus-2.14.0 probing 041e:400b
[  141.385491][ T5314] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  141.389037][ T5314] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  141.399170][ T5314] asix 2-1:0.0: probe with driver asix failed with error -71
[  141.408337][ T5314] usb 2-1: USB disconnect, device number 11
[  141.802369][ T6052] gspca_sunplus: reg_w_riv err -71
[  141.806974][ T6052] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  141.811502][ T6052] usb 4-1: USB disconnect, device number 11
[  142.175577][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  142.344982][    T9] usb 2-1: Using ep0 maxpacket: 32
[  142.350117][    T9] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.354004][    T9] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  142.361640][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  142.368868][    T9] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  142.374673][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.389887][    T9] usb 2-1: config 0 descriptor??
[  142.463884][ T7847] nbd: must specify an index to disconnect
[  142.869871][    T9] betop 0003:20BC:5500.0006: hidraw0: USB HID v8.00 Device [HID 20bc:5500] on usb-dummy_hcd.1-1/input0
[  142.873930][    T9] betop 0003:20BC:5500.0006: no inputs found
[  143.044598][    T9] usb 2-1: USB disconnect, device number 12
[  143.685074][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  143.844589][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.855603][    T9] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  143.859298][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.878478][ T7870] netlink: 104 bytes leftover after parsing attributes in process `syz.2.864'.
[  143.893425][    T9] usb 4-1: config 0 descriptor??
[  143.933278][ T7874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.866'.
[  144.284041][ T7872] loop1: detected capacity change from 0 to 32768
[  144.302203][ T7872] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  144.306315][ T7872] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  144.321564][    T9] holtek 0003:1241:5015.0007: unbalanced collection at end of report description
[  144.334793][    T9] holtek 0003:1241:5015.0007: parse failed
[  144.341967][    T9] holtek 0003:1241:5015.0007: probe with driver holtek failed with error -22
[  144.358925][ T7872] XFS (loop1): Ending clean mount
[  144.396860][ T5987] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  144.529506][  T792] usb 4-1: USB disconnect, device number 12
[  145.098937][ T7901] loop3: detected capacity change from 0 to 2048
[  145.103668][ T7901] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  145.111235][ T7901] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.326063][ T7915] netlink: 'syz.3.882': attribute type 2 has an invalid length.
[  146.390011][ T7963] loop1: detected capacity change from 0 to 1024
[  146.482734][   T27] hfsplus: b-tree write err: -5, ino 4
[  146.725190][ T6011] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  147.184971][ T6011] usb 4-1: Using ep0 maxpacket: 32
[  147.189013][ T6011] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  147.193486][ T6011] usb 4-1: config 0 has no interface number 0
[  147.196732][ T6011] usb 4-1: config 0 interface 12 has no altsetting 0
[  147.201937][ T6011] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  147.205202][ T6011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.208028][ T6011] usb 4-1: Product: syz
[  147.209748][ T6011] usb 4-1: Manufacturer: syz
[  147.211642][ T6011] usb 4-1: SerialNumber: syz
[  147.217292][ T6011] usb 4-1: config 0 descriptor??
[  148.205164][  T792] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  148.357715][  T792] usb 2-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56
[  148.361423][  T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.406408][  T792] usb 2-1: config 0 descriptor??
[  148.411296][  T792] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053
[  148.610781][ T6011] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  148.613869][ T6011] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  148.617076][ T6011] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  148.620106][ T6011] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  148.621980][  T792] gspca_zc3xx: reg_w_i err -71
[  148.626198][  T792] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  148.633223][  T792] usb 2-1: USB disconnect, device number 13
[  148.638593][ T6011] usb 4-1: USB disconnect, device number 13
[  149.283111][ T8002] Invalid ELF header magic: != ELF
[  149.788691][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.921'.
[  149.818760][ T8012] bridge1: port 1(veth3) entered blocking state
[  149.820958][ T8012] bridge1: port 1(veth3) entered disabled state
[  149.823083][ T8012] veth3: entered allmulticast mode
[  149.826844][ T8012] veth3: entered promiscuous mode
[  149.843713][ T8012] bridge1: port 2(veth0_to_bond) entered blocking state
[  149.848572][ T8012] bridge1: port 2(veth0_to_bond) entered disabled state
[  149.851549][ T8012] veth0_to_bond: entered allmulticast mode
[  149.854751][ T8012] veth0_to_bond: entered promiscuous mode
[  149.868673][ T8012] vlan2: entered allmulticast mode
[  149.870958][ T8012] bridge1: port 3(vlan2) entered blocking state
[  149.873376][ T8012] bridge1: port 3(vlan2) entered disabled state
[  149.877814][ T8012] vlan2: entered promiscuous mode
[  150.860255][ T8027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.927'.
[  150.992185][ T8034] warning: `syz.2.930' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  151.210916][ T8045] loop3: detected capacity change from 0 to 764
[  151.327551][ T8051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.938'.
[  151.374705][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'.
[  151.595026][    T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  151.760140][    T9] usb 4-1: Using ep0 maxpacket: 16
[  151.764783][    T9] usb 4-1: config index 0 descriptor too short (expected 102, got 36)
[  151.769380][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 238, changing to 7
[  151.773519][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 17990, setting to 1024
[  151.778075][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  151.781779][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  151.788688][    T9] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  151.792055][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.796034][    T9] usb 4-1: Product: syz
[  151.798548][    T9] usb 4-1: Manufacturer: syz
[  151.800308][    T9] usb 4-1: SerialNumber: syz
[  151.804545][    T9] usb 4-1: config 0 descriptor??
[  151.814505][    T9] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  152.029689][    T9] usb 4-1: USB disconnect, device number 14
[  152.893067][ T8086] loop1: detected capacity change from 0 to 32768
[  152.911347][ T8086] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  152.938960][ T8086] XFS (loop1): Ending clean mount
[  152.948067][ T8086] XFS (loop1): Quotacheck needed: Please wait.
[  152.981947][ T8086] XFS (loop1): Quotacheck: Done.
[  153.011373][ T5987] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  153.283290][ T8116] capability: warning: `syz.2.965' uses 32-bit capabilities (legacy support in use)
[  154.463361][ T8164] netlink: 'syz.1.989': attribute type 10 has an invalid length.
[  154.483281][ T8164] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  154.487990][ T8164] team0: Failed to send options change via netlink (err -105)
[  154.490592][ T8164] team0: Port device netdevsim0 added
[  155.138308][ T8178] loop3: detected capacity change from 0 to 32768
[  155.175948][ T8178] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  155.211817][ T8178] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  155.240897][ T8191] loop1: detected capacity change from 0 to 136
[  155.398870][ T6837] ocfs2: Unmounting device (7,3) on (node local)
[  155.682568][ T8204] pim6reg: entered allmulticast mode
[  155.807069][ T8212] loop1: detected capacity change from 0 to 512
[  155.860479][ T8212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.867550][ T8212] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  156.374477][ T5987] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.189801][ T8241] netlink: 'syz.1.1020': attribute type 21 has an invalid length.
[  158.193021][ T8241] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1020'.
[  158.227427][ T8243] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  158.540729][ T8250] netlink: 'syz.1.1022': attribute type 3 has an invalid length.
[  158.544287][ T8250] netlink: 'syz.1.1022': attribute type 1 has an invalid length.
[  158.547691][ T8250] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1022'.
[  158.831506][ T8257] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  159.177056][ T8279] loop3: detected capacity change from 0 to 1024
[  159.185506][ T8279] EXT4-fs: Ignoring removed nobh option
[  159.211125][ T8279] EXT4-fs: inline encryption not supported
[  159.258708][ T8279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.268368][ T8285] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  159.271461][ T8285] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.383958][ T6837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.530553][ T8300] loop3: detected capacity change from 0 to 256
[  159.550237][ T8300] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  159.560243][ T8300] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  159.922976][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1056'.
[  160.031907][ T8333] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  160.202111][ T8339] loop1: detected capacity change from 0 to 4096
[  160.217192][ T8339] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  160.232877][ T8339] ntfs3(loop1): $Secure::$SDH is corrupted.
[  160.245181][ T8339] ntfs3(loop1): Failed to initialize $Secure (-22).
[  160.388714][ T8349] loop1: detected capacity change from 0 to 2048
[  160.416086][ T8349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.825002][  T792] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  161.005349][  T792] usb 2-1: Using ep0 maxpacket: 16
[  161.009764][  T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.014511][  T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.020480][  T792] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  161.024032][  T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.040636][  T792] usb 2-1: config 0 descriptor??
[  161.149067][ T8375] loop3: detected capacity change from 0 to 256
[  161.181272][ T8375] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  161.273536][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1082'.
[  161.280699][ T8378] vlan0: entered allmulticast mode
[  161.289907][ T8378] veth0_vlan: entered allmulticast mode
[  161.456501][  T792] ntrig 0003:1B96:0008.0008: item fetching failed at offset 3/7
[  161.460787][  T792] ntrig 0003:1B96:0008.0008: parse failed
[  161.473529][  T792] ntrig 0003:1B96:0008.0008: probe with driver ntrig failed with error -22
[  161.557270][ T8390] sctp: [Deprecated]: syz.2.1087 (pid 8390) Use of struct sctp_assoc_value in delayed_ack socket option.
[  161.557270][ T8390] Use struct sctp_sack_info instead
[  161.602699][ T8392] sctp: [Deprecated]: syz.3.1088 (pid 8392) Use of int in maxseg socket option.
[  161.602699][ T8392] Use struct sctp_assoc_value instead
[  161.654461][ T6011] usb 2-1: USB disconnect, device number 14
[  161.673663][ T8396] openvswitch: netlink: Missing key (keys=40, expected=100)
[  162.542087][ T8425] loop3: detected capacity change from 0 to 1024
[  162.606513][ T8425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.611319][ T8425] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.639040][ T8437] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1105'.
[  163.611258][ T8443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1107'.
[  163.702888][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  163.719414][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  163.726881][  T792] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  164.018793][ T8445] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1108'.
[  164.023431][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1108'.
[  164.028075][ T8445] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1108'.
[  164.265924][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'.
[  164.270549][ T8451] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1110'.
[  164.276915][ T6837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.281943][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'.
[  164.617833][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'.
[  164.631235][ T8458] netlink: 'syz.1.1114': attribute type 14 has an invalid length.
[  164.634323][ T8458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1114'.
[  164.645881][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  164.649245][  T792] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  164.778730][ T8460] loop1: detected capacity change from 0 to 64
[  164.845041][   T33] audit: type=1800 audit(1757676305.741:28): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1115" name="file1" dev="loop1" ino=5 res=0 errno=0
[  165.361779][ T8472] loop1: detected capacity change from 0 to 128
[  165.379387][ T8472] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  165.449469][ T8472] FAT-fs (loop1): FAT read failed (blocknr 128)
[  165.653461][   T33] audit: type=1326 audit(1757676306.541:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.1123" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9395385b67 code=0x7ffc0000
[  165.673529][   T33] audit: type=1326 audit(1757676306.541:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.1123" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f939532ada9 code=0x7ffc0000
[  165.695288][   T33] audit: type=1326 audit(1757676306.541:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.1123" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9395385b67 code=0x7ffc0000
[  165.703968][   T33] audit: type=1326 audit(1757676306.541:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.1123" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f939532ada9 code=0x7ffc0000
[  165.725732][   T33] audit: type=1326 audit(1757676306.541:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.1123" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9395385b67 code=0x7ffc0000
[  165.734162][   T33] audit: type=1326 audit(1757676306.541:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.1123" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f939532ada9 code=0x7ffc0000
[  165.755436][   T33] audit: type=1326 audit(1757676306.541:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.1123" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9395385b67 code=0x7ffc0000
[  165.763625][   T33] audit: type=1326 audit(1757676306.541:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.1123" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f939532ada9 code=0x7ffc0000
[  165.786177][   T33] audit: type=1326 audit(1757676306.541:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.1123" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9395385b67 code=0x7ffc0000
[  165.972000][ T8490] program syz.3.1130 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  167.595233][ T8522] loop1: detected capacity change from 0 to 32768
[  167.924285][ T8545] vlan2: entered promiscuous mode
[  167.926695][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  167.931115][ T8545] macvlan1: entered promiscuous mode
[  168.059454][   T10] Process accounting resumed
[  168.068468][ T8547] loop1: detected capacity change from 0 to 512
[  168.077843][ T8547] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1154: invalid indirect mapped block 27 (level 1)
[  168.086091][ T8547] EXT4-fs (loop1): Remounting filesystem read-only
[  168.088536][ T8547] EXT4-fs (loop1): 1 truncate cleaned up
[  168.091739][ T8547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.101153][ T8547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.281210][ T8551] loop1: detected capacity change from 0 to 4096
[  168.294284][ T8551] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  168.383587][ T8551] ntfs3(loop1): ino=19, mi_enum_attr
[  168.402928][ T8551] ntfs3(loop1): failed to convert "c46c" to cp1250
[  168.409043][ T8551] ntfs3(loop1): ino=20, mi_enum_attr
[  169.038528][ T8575] loop1: detected capacity change from 0 to 32768
[  169.163909][ T8575] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  169.163931][ T8575]   allowing incompatible features above 0.0: (unknown version)
[  169.163941][ T8575]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  169.227719][ T8575] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  169.230843][ T8575] bcachefs (loop1): initializing new filesystem
[  169.247925][ T8596] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  169.258378][ T8575] bcachefs (loop1): going read-write
[  169.295316][ T8575] bcachefs (loop1): marking superblocks
[  169.343010][ T8603] loop3: detected capacity change from 0 to 8
[  169.347533][ T8575] bcachefs (loop1): initializing freespace
[  169.373665][ T8575] bcachefs (loop1): done initializing freespace
[  169.391045][ T8603] SQUASHFS error: xz decompression failed, data probably corrupt
[  169.395323][ T8575] bcachefs (loop1): reading snapshots table
[  169.399925][ T8575] bcachefs (loop1): reading snapshots done
[  169.405468][ T8603] SQUASHFS error: Failed to read block 0x108: -5
[  169.407882][ T8603] SQUASHFS error: Unable to read metadata cache entry [106]
[  169.416141][ T8603] SQUASHFS error: Unable to read inode 0x0
[  169.460473][ T8575] bcachefs (loop1): done starting filesystem
[  169.565377][ T8575] syz.1.1166 (8575) used greatest stack depth: 16760 bytes left
[  169.574567][ T8611] loop3: detected capacity change from 0 to 1024
[  169.575112][ T5987] bcachefs (loop1): shutting down
[  169.579979][ T5987] bcachefs (loop1): going read-only
[  169.582372][ T5987] bcachefs (loop1): finished waiting for writes to stop
[  169.590252][ T8611] EXT4-fs: Ignoring removed orlov option
[  169.614235][ T5987] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  169.619694][ T8611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.661454][ T8611] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  169.671310][ T5987] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  169.680175][ T5987] bcachefs (loop1): clean shutdown complete, journal seq 4
[  169.686552][ T5987] bcachefs (loop1): marking filesystem clean
[  169.695818][ T8615] Invalid ELF header magic: != ELF
[  169.733495][ T5987] bcachefs (loop1): shutdown complete
[  169.759380][ T6837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.577167][ T8643] loop3: detected capacity change from 0 to 512
[  171.582381][ T8643] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  171.601783][ T8643] EXT4-fs (loop3): 1 truncate cleaned up
[  171.615566][ T8643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.701046][ T6837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.797518][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1197'.
[  172.425610][ T8695] Falling back ldisc for ptm0.
[  172.560816][ T8705] loop1: detected capacity change from 0 to 1024
[  172.563427][ T8705] EXT4-fs: Ignoring removed mblk_io_submit option
[  172.598813][ T8705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.683974][ T8705] loop1: detected capacity change from 1024 to 127
[  172.692493][ T8713] syz.1.1221: attempt to access beyond end of device
[  172.692493][ T8713] loop1: rw=524288, sector=160, nr_sectors = 4 limit=127
[  172.709579][ T8713] syz.1.1221: attempt to access beyond end of device
[  172.709579][ T8713] loop1: rw=0, sector=160, nr_sectors = 4 limit=127
[  172.729625][   T33] kauditd_printk_skb: 10 callbacks suppressed
[  172.729638][   T33] audit: type=1800 audit(1757676313.631:48): pid=8713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1221" name="file0" dev="loop1" ino=13 res=0 errno=0
[  172.799960][ T5987] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.835639][ T8708] kmmpd-loop1: attempt to access beyond end of device
[  172.835639][ T8708] loop1: rw=14337, sector=128, nr_sectors = 2 limit=127
[  172.841449][ T8708] Buffer I/O error on dev loop1, logical block 64, lost sync page write
[  173.184720][ T8733] loop1: detected capacity change from 0 to 256
[  173.805343][  T792] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  173.956945][  T792] usb 2-1: config 160 has an invalid interface number: 200 but max is 0
[  173.960282][  T792] usb 2-1: config 160 has no interface number 0
[  173.965540][  T792] usb 2-1: config 160 interface 200 has no altsetting 0
[  173.977457][  T792] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  173.980718][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.984265][  T792] usb 2-1: Product: syz
[  173.994987][  T792] usb 2-1: Manufacturer: syz
[  173.996497][  T792] usb 2-1: SerialNumber: syz
[  174.130569][ T8772] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  174.145305][ T8772] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  174.209374][  T792] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  174.211464][  T792] usb 2-1: MIDIStreaming interface descriptor not found
[  174.238871][  T792] usb 2-1: USB disconnect, device number 15
[  174.297549][ T6368] udevd[6368]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  174.598100][ T8784] loop3: detected capacity change from 0 to 2048
[  174.607259][ T8784] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  174.644208][ T8788] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.671868][ T8784] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  174.677500][ T8784] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  174.692000][ T8784] Remounting filesystem read-only
[  174.694758][ T8784] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  174.698989][ T8784] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  174.702878][ T8784] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  174.708743][ T8784] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  174.714638][ T8784] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  174.720841][ T8784] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  174.731303][ T8784] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  174.736948][ T8784] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  174.741292][ T8784] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  174.752810][ T8784] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  174.763697][ T8784] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  174.770127][ T8784] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  174.779291][ T8784] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  174.783574][ T8784] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  174.794473][ T8784] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  174.801005][ T8784] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  174.807916][ T8784] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  174.812508][ T8784] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  174.824076][ T8784] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  174.829732][ T8784] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  174.834164][ T8784] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  174.840134][ T8784] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  174.846113][ T8796] loop1: detected capacity change from 0 to 4096
[  174.848444][ T8784] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  174.852624][ T8784] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  174.857425][ T8784] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  174.862044][ T8784] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  174.868665][ T8784] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  174.872801][ T8784] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  174.878239][ T8784] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  174.886024][ T8784] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  174.901528][   T33] audit: type=1800 audit(1757676315.801:49): pid=8784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1253" name="file2" dev="loop3" ino=16 res=0 errno=0
[  174.926910][ T8797] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.938855][ T8796] NILFS error (device loop1): nilfs_readdir: zero-length directory entry
[  174.942841][ T8796] Remounting filesystem read-only
[  174.958389][ T8799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1260'.
[  175.301635][ T8802] loop1: detected capacity change from 0 to 32768
[  175.311085][ T8802] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1262 (8802)
[  175.362159][ T8802] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.409084][ T8802] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  175.553723][ T8802] BTRFS info (device loop1): enabling ssd optimizations
[  175.565265][ T8802] BTRFS info (device loop1): disabling tree log
[  175.568818][ T8802] BTRFS info (device loop1): enabling free space tree
[  175.573492][ T8802] BTRFS info (device loop1): enabling auto defrag
[  175.580863][ T8834] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  175.581844][ T8802] BTRFS info (device loop1): max_inline set to 4096
[  175.603784][ T8834] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  175.965885][ T5987] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.402846][ T8851] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1275'.
[  176.457223][ T8854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1277'.
[  176.461174][ T8854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1277'.
[  176.572588][ T8863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1281'.
[  176.609414][ T8863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1281'.
[  176.805031][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  177.694363][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1290'.
[  177.700786][ T8886] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.773934][ T8886] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.035824][   T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  178.365045][   T10] usb 4-1: Using ep0 maxpacket: 16
[  178.369355][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  178.373658][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.383094][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  178.390525][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  178.394045][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  178.397706][   T10] usb 4-1: SerialNumber: syz
[  178.405232][   T10] hub 4-1:1.0: bad descriptor, ignoring hub
[  178.407849][   T10] hub 4-1:1.0: probe with driver hub failed with error -5
[  178.416549][   T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  178.494552][ T8907] loop1: detected capacity change from 0 to 164
[  178.557269][ T8909] loop1: detected capacity change from 0 to 1024
[  178.572745][ T8909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.578185][ T8909] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.596381][   T33] audit: type=1800 audit(1757676319.491:50): pid=8909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1301" name="file1" dev="loop1" ino=15 res=0 errno=0
[  178.623330][ T8909] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  178.644038][ T5987] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.735840][   T10] usb 4-1: USB disconnect, device number 15
[  178.784292][ T8916] loop1: detected capacity change from 0 to 8
[  180.511369][ T8941] syz.2.1314: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  180.518148][ T8941] CPU: 0 UID: 0 PID: 8941 Comm: syz.2.1314 Not tainted syzkaller #0 PREEMPT(full) 
[  180.518169][ T8941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  180.518178][ T8941] Call Trace:
[  180.518184][ T8941]  <TASK>
[  180.518191][ T8941]  dump_stack_lvl+0x189/0x250
[  180.518221][ T8941]  ? __pfx_dump_stack_lvl+0x10/0x10
[  180.518238][ T8941]  ? __pfx__printk+0x10/0x10
[  180.518258][ T8941]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  180.518275][ T8941]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  180.518293][ T8941]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  180.518329][ T8941]  warn_alloc+0x214/0x310
[  180.518353][ T8941]  ? stack_depot_save_flags+0x40/0x860
[  180.518373][ T8941]  ? __pfx_warn_alloc+0x10/0x10
[  180.518389][ T8941]  ? kasan_save_track+0x4f/0x80
[  180.518404][ T8941]  ? xskq_create+0x56/0x170
[  180.518414][ T8941]  ? xsk_init_queue+0xb0/0x110
[  180.518432][ T8941]  ? xsk_setsockopt+0x4dc/0x8d0
[  180.518447][ T8941]  ? do_sock_setsockopt+0x17c/0x1b0
[  180.518461][ T8941]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  180.518474][ T8941]  ? do_syscall_64+0xfa/0x3b0
[  180.518486][ T8941]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.518506][ T8941]  __vmalloc_node_range_noprof+0x125/0x12f0
[  180.518550][ T8941]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  180.518575][ T8941]  ? __kasan_kmalloc+0x93/0xb0
[  180.518595][ T8941]  vmalloc_user_noprof+0xad/0xf0
[  180.518614][ T8941]  ? xskq_create+0xbf/0x170
[  180.518627][ T8941]  xskq_create+0xbf/0x170
[  180.518643][ T8941]  xsk_init_queue+0xb0/0x110
[  180.518665][ T8941]  xsk_setsockopt+0x4dc/0x8d0
[  180.518688][ T8941]  ? __pfx_xsk_setsockopt+0x10/0x10
[  180.518708][ T8941]  ? __pfx_aa_sk_perm+0x10/0x10
[  180.518729][ T8941]  ? aa_sock_opt_perm+0xff/0x1b0
[  180.518742][ T8941]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  180.518755][ T8941]  ? __pfx_xsk_setsockopt+0x10/0x10
[  180.518774][ T8941]  do_sock_setsockopt+0x17c/0x1b0
[  180.518790][ T8941]  __x64_sys_setsockopt+0x13f/0x1b0
[  180.518810][ T8941]  do_syscall_64+0xfa/0x3b0
[  180.518824][ T8941]  ? lockdep_hardirqs_on+0x9c/0x150
[  180.518837][ T8941]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.518850][ T8941]  ? exc_page_fault+0x9f/0xf0
[  180.518864][ T8941]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.518877][ T8941] RIP: 0033:0x7f939538eba9
[  180.518890][ T8941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  180.518902][ T8941] RSP: 002b:00007f93961cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  180.518916][ T8941] RAX: ffffffffffffffda RBX: 00007f93955d5fa0 RCX: 00007f939538eba9
[  180.518926][ T8941] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  180.518934][ T8941] RBP: 00007f9395411e19 R08: 0000000000000052 R09: 0000000000000000
[  180.518943][ T8941] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.518989][ T8941] R13: 00007f93955d6038 R14: 00007f93955d5fa0 R15: 00007ffed2bfa938
[  180.519013][ T8941]  </TASK>
[  180.521387][ T8941] Mem-Info:
[  180.639302][ T8941] active_anon:9797 inactive_anon:0 isolated_anon:0
[  180.639302][ T8941]  active_file:11012 inactive_file:38325 isolated_file:0
[  180.639302][ T8941]  unevictable:1768 dirty:371 writeback:0
[  180.639302][ T8941]  slab_reclaimable:10244 slab_unreclaimable:54210
[  180.639302][ T8941]  mapped:22095 shmem:5379 pagetables:1211
[  180.639302][ T8941]  sec_pagetables:0 bounce:0
[  180.639302][ T8941]  kernel_misc_reclaimable:0
[  180.639302][ T8941]  free:287716 free_pcp:14682 free_cma:0
[  180.645288][ T5314] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  180.657158][ T8941] Node 0 active_anon:24624kB inactive_anon:0kB active_file:22416kB inactive_file:119324kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43760kB dirty:620kB writeback:0kB shmem:16296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4600kB pagetables:2352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  180.672101][ T8941] Node 1 active_anon:14540kB inactive_anon:0kB active_file:21632kB inactive_file:33972kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44592kB dirty:864kB writeback:0kB shmem:5216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7632kB pagetables:2452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  180.685557][ T8941] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  180.696984][ T8941] lowmem_reserve[]: 0 811 811 811 811
[  180.699142][ T8941] Node 0 DMA32 free:321392kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24624kB inactive_anon:0kB active_file:22416kB inactive_file:119320kB unevictable:3536kB writepending:620kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:27740kB local_pcp:13808kB free_cma:0kB
[  180.711743][ T8941] lowmem_reserve[]: 0 0 0 0 0
[  180.713619][ T8941] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  180.725643][ T8941] lowmem_reserve[]: 0 0 854 854 854
[  180.727777][ T8941] Node 1 Normal free:355560kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14504kB inactive_anon:0kB active_file:21632kB inactive_file:33972kB unevictable:3536kB writepending:888kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:30632kB local_pcp:20580kB free_cma:0kB
[  180.740372][ T8941] lowmem_reserve[]: 0 0 0 0 0
[  180.742311][ T8941] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  180.747487][ T8941] Node 0 DMA32: 334*4kB (ME) 295*8kB (ME) 187*16kB (UME) 567*32kB (UME) 163*64kB (UME) 17*128kB (UM) 3*256kB (UM) 3*512kB (UME) 3*1024kB (U) 8*2048kB (UME) 64*4096kB (UM) = 321344kB
[  180.754413][ T8941] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  180.760712][ T8941] Node 1 Normal: 312*4kB (ME) 819*8kB (UME) 411*16kB (UM) 142*32kB (ME) 86*64kB (UME) 81*128kB (UME) 15*256kB (UME) 13*512kB (UME) 3*1024kB (UM) 4*2048kB (UM) 73*4096kB (M) = 355560kB
[  180.768132][ T8941] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  180.771847][ T8941] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  180.775593][ T8941] 54697 total pagecache pages
[  180.778727][ T8941] 0 pages in swap cache
[  180.780492][ T8941] Free swap  = 124996kB
[  180.782184][ T8941] Total swap = 124996kB
[  180.783876][ T8941] 786301 pages RAM
[  180.785506][ T8941] 0 pages HighMem/MovableOnly
[  180.787364][ T8941] 241344 pages reserved
[  180.809869][ T8941] 0 pages cma reserved
[  180.836838][ T5314] usb 2-1: config 0 has an invalid interface number: 194 but max is 0
[  180.839958][ T5314] usb 2-1: config 0 has no interface number 0
[  180.842272][ T5314] usb 2-1: too many endpoints for config 0 interface 194 altsetting 233: 59, using maximum allowed: 30
[  180.857687][ T5314] usb 2-1: config 0 interface 194 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 59
[  180.873616][ T5314] usb 2-1: config 0 interface 194 has no altsetting 0
[  180.884386][ T5314] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  180.890707][ T5314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.893777][ T5314] usb 2-1: Product: syz
[  180.903818][ T5314] usb 2-1: Manufacturer: syz
[  180.912869][ T5314] usb 2-1: SerialNumber: syz
[  180.915590][ T8945] bridge0: entered promiscuous mode
[  180.918328][ T8945] macsec1: entered promiscuous mode
[  180.922613][ T8945] bridge0: port 3(macsec1) entered blocking state
[  180.925802][ T8945] bridge0: port 3(macsec1) entered disabled state
[  180.928981][ T8945] macsec1: entered allmulticast mode
[  180.930363][ T5314] usb 2-1: config 0 descriptor??
[  180.933523][ T8945] bridge0: entered allmulticast mode
[  180.940148][ T8945] macsec1: left allmulticast mode
[  180.942335][ T8945] bridge0: left allmulticast mode
[  180.948099][ T8945] bridge0: left promiscuous mode
[  181.189219][ T5314] peak_usb 2-1:0.194: probe with driver peak_usb failed with error 194
[  181.191249][ T8956] 9pnet_fd: p9_fd_create_tcp (8956): problem connecting socket to 127.0.0.1
[  181.212465][ T5314] usb 2-1: USB disconnect, device number 16
[  183.911733][ T8992] sctp: [Deprecated]: syz.1.1336 (pid 8992) Use of struct sctp_assoc_value in delayed_ack socket option.
[  183.911733][ T8992] Use struct sctp_sack_info instead
[  184.121796][ T8994] loop1: detected capacity change from 0 to 16
[  184.164370][ T8994] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  184.486730][ T9007] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1343'.
[  184.490513][ T9007] NCSI netlink: No device for ifindex 1024
[  184.838539][ T9016] loop3: detected capacity change from 0 to 2048
[  184.864338][ T9016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.942428][ T6837] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  185.187846][ T6837] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  185.205471][ T1089] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28
[  185.211783][ T1089] EXT4-fs (loop3): This should not happen!! Data will be lost
[  185.211783][ T1089] 
[  185.218383][ T1089] EXT4-fs (loop3): Total free blocks count 0
[  185.220507][ T1089] EXT4-fs (loop3): Free/Dirty block details
[  185.223045][ T1089] EXT4-fs (loop3): free_blocks=0
[  185.225142][ T1089] EXT4-fs (loop3): dirty_blocks=688
[  185.227130][ T1089] EXT4-fs (loop3): Block reservation details
[  185.229380][ T1089] EXT4-fs (loop3): i_reserved_data_blocks=43
[  185.252101][ T9021] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 680 with error 28
[  185.371949][ T6011] syz1: Port: 1 Link DOWN
[  185.537782][ T5992] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.728336][ T5992] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.803998][ T5992] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.904111][ T5314] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  185.913271][ T5992] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.977025][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  185.983003][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  185.987815][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  185.991666][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  185.996057][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  186.087157][ T5314] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.090942][ T5314] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  186.103505][ T5314] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  186.113593][ T5314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  186.124944][ T5314] usb 2-1: SerialNumber: syz
[  186.167755][ T5992] bridge_slave_1: left allmulticast mode
[  186.169715][ T5992] bridge_slave_1: left promiscuous mode
[  186.171523][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.188157][ T5992] bridge_slave_0: left allmulticast mode
[  186.190025][ T5992] bridge_slave_0: left promiscuous mode
[  186.192084][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.348028][ T5314] cdc_ether 2-1:1.0: skipping garbage
[  186.350045][ T5314] usb 2-1: bad CDC descriptors
[  186.379990][ T5314] usb 2-1: USB disconnect, device number 17
[  186.430405][ T5992] team0: Port device geneve0 removed
[  186.601846][ T5992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.607961][ T5992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.612863][ T5992] bond0 (unregistering): Released all slaves
[  186.752215][ T9036] chnl_net:caif_netlink_parms(): no params data found
[  186.850830][ T9036] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.853868][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.864076][ T9036] bridge_slave_0: entered allmulticast mode
[  186.868755][ T9036] bridge_slave_0: entered promiscuous mode
[  186.875656][ T9036] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.878570][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.881720][ T9036] bridge_slave_1: entered allmulticast mode
[  186.886641][ T9036] bridge_slave_1: entered promiscuous mode
[  186.960172][ T9036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.970396][ T9036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.014681][ T9036] team0: Port device team_slave_0 added
[  187.025924][ T9036] team0: Port device team_slave_1 added
[  187.128302][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.135992][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.160127][ T9036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.178931][ T9036] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.181813][ T9036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.202752][ T9036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.345410][ T9036] hsr_slave_0: entered promiscuous mode
[  187.350295][ T9036] hsr_slave_1: entered promiscuous mode
[  187.367215][ T9036] debugfs: 'hsr0' already exists in 'hsr'
[  187.369439][ T9036] Cannot create hsr debugfs directory
[  187.894148][ T9036] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  187.914148][ T9036] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  187.933062][ T9036] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  187.944197][ T9036] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  188.063476][ T9097] loop1: detected capacity change from 0 to 256
[  188.081030][ T9097] FAT-fs (loop1): Directory bread(block 64) failed
[  188.083278][ T9097] FAT-fs (loop1): Directory bread(block 65) failed
[  188.085664][ T5238] Bluetooth: hci2: command tx timeout
[  188.097464][ T9097] FAT-fs (loop1): Directory bread(block 66) failed
[  188.099596][ T9097] FAT-fs (loop1): Directory bread(block 67) failed
[  188.123440][ T9097] FAT-fs (loop1): Directory bread(block 68) failed
[  188.129414][ T9097] FAT-fs (loop1): Directory bread(block 69) failed
[  188.131488][ T9097] FAT-fs (loop1): Directory bread(block 70) failed
[  188.141921][ T9097] FAT-fs (loop1): Directory bread(block 71) failed
[  188.144772][ T9097] FAT-fs (loop1): Directory bread(block 72) failed
[  188.151030][ T9097] FAT-fs (loop1): Directory bread(block 73) failed
[  188.352064][   T33] audit: type=1800 audit(1757676329.251:51): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1374" name="file1" dev="tmpfs" ino=2794 res=0 errno=0
[  188.380537][ T9036] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.396060][ T9036] 8021q: adding VLAN 0 to HW filter on device team0
[  188.460492][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.463326][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.483392][   T33] audit: type=1400 audit(1757676329.381:52): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=9110 comm="syz.2.1376"
[  188.510918][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.513721][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.534978][  T792] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  188.546059][ T5992] hsr_slave_0: left promiscuous mode
[  188.548412][ T5992] hsr_slave_1: left promiscuous mode
[  188.550486][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.552820][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.557188][ T5992] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.559767][ T5992] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.576557][ T5992] veth1_macvtap: left promiscuous mode
[  188.579024][ T5992] veth0_macvtap: left promiscuous mode
[  188.581173][ T5992] veth1_vlan: left promiscuous mode
[  188.583292][ T5992] veth0_vlan: left promiscuous mode
[  188.699921][  T792] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  188.703719][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.703909][ T5992] pim6reg (unregistering): left allmulticast mode
[  188.708779][  T792] usb 2-1: Product: syz
[  188.711455][  T792] usb 2-1: Manufacturer: syz
[  188.713278][  T792] usb 2-1: SerialNumber: syz
[  189.168000][  T792] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  189.179163][  T792] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  189.189000][  T792] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  189.195959][  T792] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  189.206509][  T792] usb 2-1: USB disconnect, device number 18
[  189.410059][ T9135] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  189.413408][ T5992] team0 (unregistering): Port device team_slave_1 removed
[  189.448017][ T5992] team0 (unregistering): Port device team_slave_0 removed
[  189.486895][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'.
[  189.529542][   T33] audit: type=1326 audit(1757676330.431:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.2.1390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939538eba9 code=0x7ffc0000
[  189.551967][   T33] audit: type=1326 audit(1757676330.441:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.2.1390" exe="/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f939538eba9 code=0x7ffc0000
[  189.567171][   T33] audit: type=1326 audit(1757676330.441:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.2.1390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939538eba9 code=0x7ffc0000
[  189.580623][   T33] audit: type=1326 audit(1757676330.441:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.2.1390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939538eba9 code=0x7ffc0000
[  189.603518][   T33] audit: type=1326 audit(1757676330.441:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.2.1390" exe="/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f939538eba9 code=0x7ffc0000
[  189.612056][   T33] audit: type=1326 audit(1757676330.471:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.2.1390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939538eba9 code=0x7ffc0000
[  190.102734][ T9153] syz_tun: entered allmulticast mode
[  190.116822][ T9151] syz_tun: left allmulticast mode
[  190.167831][ T5238] Bluetooth: hci2: command tx timeout
[  190.380538][ T9036] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.740923][ T9036] veth0_vlan: entered promiscuous mode
[  190.753325][ T9036] veth1_vlan: entered promiscuous mode
[  190.780345][ T9036] veth0_macvtap: entered promiscuous mode
[  190.786183][ T9036] veth1_macvtap: entered promiscuous mode
[  190.798645][ T9036] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.809966][ T9036] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.820613][ T5677] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.823897][ T5677] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.829439][ T5677] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.832785][ T5677] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.925119][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.927661][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.964815][ T3567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.968213][ T3567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.996347][ T9203] capability: warning: `syz.2.1408' uses deprecated v2 capabilities in a way that may be insecure
[  191.077499][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1409'.
[  191.160405][ T9211] loop4: detected capacity change from 0 to 4096
[  191.313905][ T9220] QAT: failed to copy from user cfg_data.
[  192.210484][ T9252] loop1: detected capacity change from 0 to 256
[  192.245614][ T5238] Bluetooth: hci2: command tx timeout
[  192.718807][ T9277] team0: entered promiscuous mode
[  192.720958][ T9277] team_slave_0: entered promiscuous mode
[  192.723393][ T9277] team_slave_1: entered promiscuous mode
[  192.731642][ T9276] team0: left promiscuous mode
[  192.733590][ T9276] team_slave_0: left promiscuous mode
[  192.736600][ T9276] team_slave_1: left promiscuous mode
[  193.221643][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'.
[  193.231174][ T9314] geneve2: entered promiscuous mode
[  193.232830][ T9314] geneve2: entered allmulticast mode
[  193.320523][ T9318] tipc: Started in network mode
[  193.322245][ T9318] tipc: Node identity , cluster identity 4711
[  193.324293][ T9318] tipc: Failed to obtain node identity
[  193.327710][ T9318] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  193.501282][ T9334] Invalid option length (0) for dns_resolver key
[  193.634279][ T9342] loop1: detected capacity change from 0 to 8192
[  193.649740][ T9342] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  193.797384][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'.
[  193.807127][ T9346] bridge1: entered promiscuous mode
[  193.920107][ T9350] bridge: RTM_NEWNEIGH with invalid ether address
[  194.078313][   T33] audit: type=1800 audit(1757676334.981:59): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1479" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  194.089580][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  194.089855][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.094790][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.152119][ T9364] mmap: syz.2.1481 (9364) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  194.325094][ T5238] Bluetooth: hci2: command tx timeout
[  194.424672][ T9380] syz_tun: entered promiscuous mode
[  194.428505][ T9380] vlan2: entered promiscuous mode
[  194.925422][ T9390] loop1: detected capacity change from 0 to 16
[  194.930251][ T9390] erofs (device loop1): mounted with root inode @ nid 36.
[  195.341520][ T9391] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36
[  195.344585][ T9391] erofs (device loop1): readahead error at folio 47 @ nid 36
[  195.347021][ T9391] erofs (device loop1): bogus lookback distance 1586 @ lcn 46 of nid 36
[  195.349518][ T9391] erofs (device loop1): readahead error at folio 46 @ nid 36
[  195.353362][ T9391] erofs (device loop1): readahead error at folio 45 @ nid 36
[  195.356737][ T9391] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[  195.359467][ T9391] erofs (device loop1): readahead error at folio 43 @ nid 36
[  195.361949][ T9391] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[  195.365289][ T9391] erofs (device loop1): readahead error at folio 42 @ nid 36
[  195.368107][ T9391] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36
[  195.371332][ T9391] erofs (device loop1): readahead error at folio 41 @ nid 36
[  195.374239][ T9391] erofs (device loop1): bogus lookback distance 774 @ lcn 40 of nid 36
[  195.377656][ T9391] erofs (device loop1): readahead error at folio 40 @ nid 36
[  195.380577][ T9391] erofs (device loop1): readahead error at folio 39 @ nid 36
[  195.383558][ T9391] erofs (device loop1): readahead error at folio 38 @ nid 36
[  195.386710][ T9391] erofs (device loop1): readahead error at folio 36 @ nid 36
[  195.389785][ T9391] erofs (device loop1): bogus lookback distance 1468 @ lcn 31 of nid 36
[  195.393122][ T9391] erofs (device loop1): readahead error at folio 31 @ nid 36
[  195.395819][ T9391] erofs (device loop1): readahead error at folio 25 @ nid 36
[  195.398119][ T9391] erofs (device loop1): readahead error at folio 24 @ nid 36
[  195.402218][ T9391] erofs (device loop1): readahead error at folio 19 @ nid 36
[  195.405779][ T9391] syz.1.1492: attempt to access beyond end of device
[  195.405779][ T9391] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16
[  195.417237][ T9391] syz.1.1492: attempt to access beyond end of device
[  195.417237][ T9391] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  195.425384][ T9391] syz.1.1492: attempt to access beyond end of device
[  195.425384][ T9391] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  195.430869][ T9391] syz.1.1492: attempt to access beyond end of device
[  195.430869][ T9391] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16
[  195.606768][ T9404] netlink: 'syz.2.1497': attribute type 15 has an invalid length.
[  196.612206][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1521'.
[  196.663926][ T9457] netlink: 'syz.4.1521': attribute type 2 has an invalid length.
[  197.018989][ T9455] loop1: detected capacity change from 0 to 40427
[  197.023528][ T9455] f2fs: Unexpected value for 'usrquota'
[  197.138849][ T9484] loop1: detected capacity change from 0 to 1024
[  197.168225][ T9484] hfsplus: b-tree write err: -5, ino 4
[  197.250504][ T9489] loop1: detected capacity change from 0 to 512
[  197.258184][ T9489] EXT4-fs (loop1): orphan cleanup on readonly fs
[  197.270051][ T9489] EXT4-fs warning (device loop1): ext4_xattr_inode_get:556: inode #11: comm syz.1.1535: EA inode hash validation failed
[  197.274576][ T9489] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  197.287848][ T9489] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #15: comm syz.1.1535: corrupted inode contents
[  197.325960][ T9489] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #15: comm syz.1.1535: mark_inode_dirty error
[  197.347186][ T9489] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #15: comm syz.1.1535: corrupted inode contents
[  197.380460][ T9489] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #15: comm syz.1.1535: mark_inode_dirty error
[  197.405262][ T9489] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #15: comm syz.1.1535: mark inode dirty (error -117)
[  197.413248][ T9499] loop4: detected capacity change from 0 to 2048
[  197.419084][ T9489] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117)
[  197.422888][ T9489] EXT4-fs (loop1): 1 orphan inode deleted
[  197.426353][ T9499] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  197.438027][ T9489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  197.476308][ T5987] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.526594][ T9505] loop4: detected capacity change from 0 to 128
[  197.811347][ T9525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1552'.
[  197.820419][ T9525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1552'.
[  197.825862][ T9525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1552'.
[  197.830416][ T9525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1552'.
[  197.945069][ T6052] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  198.088993][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'.
[  198.107608][ T6052] usb 5-1: unable to get BOS descriptor or descriptor too short
[  198.111412][ T6052] usb 5-1: not running at top speed; connect to a high speed hub
[  198.123084][ T6052] usb 5-1: config 106 has an invalid interface number: 8 but max is 0
[  198.135232][ T6052] usb 5-1: config 106 has no interface number 0
[  198.137837][ T6052] usb 5-1: config 106 interface 8 has no altsetting 0
[  198.144507][ T6052] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd
[  198.148906][ T6052] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.151474][ T6052] usb 5-1: Product: syz
[  198.153173][ T6052] usb 5-1: Manufacturer: syz
[  198.154792][ T6052] usb 5-1: SerialNumber: syz
[  198.301713][ T9548] overlayfs: failed to clone upperpath
[  198.368602][ T6052] kalmia 5-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22
[  198.380313][ T6052] kalmia 5-1:106.8: probe with driver kalmia failed with error -22
[  198.408988][ T6052] usb 5-1: USB disconnect, device number 2
[  199.356037][ T6031] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  199.526808][ T6031] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  199.531274][ T6031] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  199.536398][ T6031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.541774][ T6031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.554287][ T6031] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[  199.558810][ T6031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7
[  199.563125][ T6031] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024
[  199.570869][ T6031] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[  199.576958][ T6031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.582053][ T6031] usb 5-1: Product: syz
[  199.586639][ T6031] usb 5-1: Manufacturer: syz
[  199.588971][ T6031] usb 5-1: SerialNumber: syz
[  199.602633][ T6031] usb 5-1: config 0 descriptor??
[  199.831905][ T6031] usb 5-1: ucan: probing device on interface #0
[  199.837703][ T6031] usb 5-1: ucan: invalid endpoint configuration
[  199.840378][ T6031] usb 5-1: ucan: probe failed; try to update the device firmware
[  199.861024][ T6031] usb 5-1: USB disconnect, device number 3
[  200.015729][ T9582] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1579'.
[  200.018740][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1579'.
[  200.022443][ T9582] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1579'.
[  200.379880][ T9602] could not allocate digest TFM handle sm3
[  200.566185][  T792] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  200.825662][  T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.837774][  T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.847160][  T792] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  200.862172][  T792] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  200.870314][  T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.877815][  T792] usb 2-1: config 0 descriptor??
[  201.034006][ T9627] netlink: 'syz.2.1594': attribute type 1 has an invalid length.
[  201.101193][ T9630] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1594'.
[  201.423895][  T792] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  203.294720][ T9687] loop4: detected capacity change from 0 to 128
[  203.331524][   T33] audit: type=1800 audit(1757676344.233:60): pid=9687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1612" name="bus" dev="loop4" ino=1048652 res=0 errno=0
[  203.804574][ T6052] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  203.949887][    T9] usb 2-1: USB disconnect, device number 19
[  203.978149][ T6052] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  203.989830][ T6052] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  204.006234][ T6052] usb 5-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00
[  204.016383][ T6052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.037120][ T6052] usb 5-1: config 0 descriptor??
[  204.039997][ T9697] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  204.509250][ T9697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.522260][ T9697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.678515][ T9717] loop1: detected capacity change from 0 to 512
[  204.682980][ T9717] EXT4-fs: Ignoring removed oldalloc option
[  204.717381][ T9717] EXT4-fs (loop1): 1 truncate cleaned up
[  204.727018][ T9717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.779652][ T5987] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.810189][ T6052] wacom 0003:056A:003F.000A: unbalanced collection at end of report description
[  204.814586][ T6052] wacom 0003:056A:003F.000A: parse failed
[  204.817008][ T6052] wacom 0003:056A:003F.000A: probe with driver wacom failed with error -22
[  204.894971][ T9721] IPVS: Scheduler module ip_vs_sip not found
[  205.010585][ T5314] usb 5-1: USB disconnect, device number 4
[  206.149796][ T9753] loop1: detected capacity change from 0 to 4096
[  206.156392][ T9753] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  206.184663][ T9761] overlayfs: failed to clone upperpath
[  206.277879][ T9751] loop4: detected capacity change from 0 to 32768
[  206.299445][ T9751] bcachefs (/dev/loop4): error validating superblock: Filesystem has incompatible feature bit 24, highest supported small_image (22)
[  206.323077][ T9751] bcachefs: bch2_fs_get_tree() error: invalid_sb_features
[  206.479278][ T9769] team0: No ports can be present during mode change
[  207.081463][ T9787] overlayfs: failed to resolve './file1': -2
[  207.783001][ T9814] loop4: detected capacity change from 0 to 8
[  207.820835][ T9818] __nla_validate_parse: 1 callbacks suppressed
[  207.820846][ T9818] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1669'.
[  207.825456][ T9818] netlink: 'syz.2.1669': attribute type 1 has an invalid length.
[  207.828742][ T9818] netlink: 'syz.2.1669': attribute type 2 has an invalid length.
[  207.836803][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1669'.
[  207.881898][    T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  208.041056][    T9] usb 2-1: Using ep0 maxpacket: 16
[  208.052171][    T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  208.056319][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.059260][    T9] usb 2-1: Product: syz
[  208.069662][    T9] usb 2-1: Manufacturer: syz
[  208.071292][    T9] usb 2-1: SerialNumber: syz
[  208.093203][    T9] usb 2-1: config 0 descriptor??
[  208.096955][    T9] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  208.911770][ T9839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1677'.
[  208.915825][    T9] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71
[  208.927988][    T9] usb 2-1: USB disconnect, device number 20
[  209.420711][ T9854] loop4: detected capacity change from 0 to 32768
[  209.427352][ T9854] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1683 (9854)
[  209.464957][ T9854] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  209.471056][ T9854] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  209.566390][ T9854] BTRFS info (device loop4): enabling ssd optimizations
[  209.574788][ T9854] BTRFS info (device loop4): enabling free space tree
[  209.668549][ T9036] BTRFS info (device loop4): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  209.886935][ T9864] loop1: detected capacity change from 0 to 32768
[  210.056138][ T9879] netlink: 'syz.1.1686': attribute type 11 has an invalid length.
[  210.937451][ T9888] loop4: detected capacity change from 0 to 512
[  210.949898][ T9888] EXT4-fs (loop4): fragment/cluster size (4096) != block size (1024)
[  211.368901][ T9890] loop4: detected capacity change from 0 to 32768
[  211.374540][ T9890] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (0 != 1)
[  211.374540][ T9890] downgrade (size 2912):
[  211.374540][ T9890] version:	0.0: (unknown version)
[  211.374540][ T9890] recovery passes:	
[  211.374540][ T9890] errors:	sb_clean_missing
[  211.374540][ T9890] version:	0.0: (unknown version)
[  211.374540][ T9890] recovery passes:	snapshots_read,set_may_go_rw,check_alloc_info,check_lrus,check_extents_to_backpointers,check_snapshot_trees,check_snapshots,fs_upgrade_for_subvolumes
[  211.374540][ T9890] errors:	clean_but_journal_not_empty
[  211.374540][ T9890] version:	0.0: (unknown version)
[  211.374540][ T9890] recovery passes:	fs_freespace_init
[  211.374540][ T9890] errors:	
[  211.374540][ T9890] version:	0.1: (unknown version)
[  211.374540][ T9890] recovery passes:	set_may_go_rw,fs_freespace_init,check_snapshot_trees
[  211.374540][ T9890] errors:	sb_clean_missing,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,dirty_but_no_journal_entries,(unknown error 768),sb_clean_missing,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_
[  211.374933][ T9890] bcachefs: bch2_fs_get_tree() error: invalid_sb_downgrade
[  211.712431][ T9904] loop4: detected capacity change from 0 to 128
[  211.735156][ T9904] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  211.747257][ T9904] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  212.051482][ T9036] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  212.168047][    T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  212.289012][ T9919] loop4: detected capacity change from 0 to 512
[  212.322396][ T9919] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1702: corrupted in-inode xattr: invalid ea_ino
[  212.329708][ T9919] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1702: couldn't read orphan inode 15 (err -117)
[  212.341349][    T9] usb 2-1: descriptor type invalid, skip
[  212.342632][ T9919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.345381][    T9] usb 2-1: config 0 has no interfaces?
[  212.353499][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=df.40
[  212.359472][    T9] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  212.362549][    T9] usb 2-1: Product: syz
[  212.365240][    T9] usb 2-1: SerialNumber: syz
[  212.391987][    T9] usb 2-1: config 0 descriptor??
[  212.497006][ T9036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.607815][   T10] usb 2-1: USB disconnect, device number 21
[  213.463753][ T9957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1718'.
[  213.735766][ T9968] netlink: 'syz.4.1723': attribute type 10 has an invalid length.
[  213.769028][ T9968] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  213.775995][ T9967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  213.847945][ T9972] tc_dump_action: action bad kind
[  214.474302][T10007] loop4: detected capacity change from 0 to 64
[  214.653362][T10016] loop1: detected capacity change from 0 to 1024
[  214.685948][T10014] loop4: detected capacity change from 0 to 2048
[  214.709471][T10016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.714336][T10016] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.737522][T10014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.742315][T10014] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.815050][ T5987] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.166714][T10025] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1747'.
[  215.211593][T10025] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  215.424927][T10014] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1744: bg 0: block 345: padding at end of block bitmap is not set
[  215.432178][T10014] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117
[  215.436227][T10014] EXT4-fs (loop4): This should not happen!! Data will be lost
[  215.436227][T10014] 
[  215.468261][T10014] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2031 with error 28
[  215.472494][T10014] EXT4-fs (loop4): This should not happen!! Data will be lost
[  215.472494][T10014] 
[  215.475642][T10014] EXT4-fs (loop4): Total free blocks count 0
[  215.477634][T10014] EXT4-fs (loop4): Free/Dirty block details
[  215.479735][T10014] EXT4-fs (loop4): free_blocks=0
[  215.481555][T10014] EXT4-fs (loop4): dirty_blocks=2032
[  215.483054][T10014] EXT4-fs (loop4): Block reservation details
[  215.949787][T10045] loop4: detected capacity change from 0 to 4096
[  215.954423][T10045] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  215.968691][T10045] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  215.977320][T10045] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  216.373045][T10043] loop1: detected capacity change from 0 to 32768
[  216.609549][T10043] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  216.609563][T10043]   allowing incompatible features above 0.0: (unknown version)
[  216.609568][T10043]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  216.629710][T10043] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  216.637435][T10043] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  216.652304][T10043] bcachefs (loop1): Version upgrade required:
[  216.652304][T10043] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  216.652304][T10043] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  216.652304][T10043]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  216.711712][T10043] bcachefs (loop1): dropping and reconstructing all alloc info
[  216.789678][T10043] bcachefs (loop1): accounting_read... done
[  216.806977][T10043] bcachefs (loop1): alloc_read... done
[  216.821064][T10043] bcachefs (loop1): snapshots_read... done
[  216.829835][T10043] bcachefs (loop1): check_allocations... done
[  216.925302][T10043] bcachefs (loop1): going read-write
[  216.966345][T10043] bcachefs (loop1): done starting filesystem
[  217.244622][T10043] bcachefs (loop1): inode 536870913 truncated to 0 but i_blocks 24 (ondisk 24)
[  217.255119][   T27] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  217.255196][   T27]   u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing
[  217.533791][   T27] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  217.533840][   T27]   u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing
[  217.580970][   T27] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  217.580987][   T27]   u64s 5 type deleted 0:33:0 len 0 ver 0, , continuing
[  217.597736][T10093] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0
[  218.033282][   T28] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  218.033298][   T28]   u64s 5 type deleted 0:40:0 len 0 ver 0, , continuing
[  218.253540][ T1089] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  218.253557][ T1089]   u64s 5 type deleted 0:45:0 len 0 ver 0, , continuing
[  218.282604][ T5987] bcachefs (loop1): shutting down
[  218.284870][ T5987] bcachefs (loop1): going read-only
[  218.287008][ T5987] bcachefs (loop1): finished waiting for writes to stop
[  218.296839][ T5987] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11
[  218.458926][T10105] lo speed is unknown, defaulting to 1000
[  218.461772][T10105] lo speed is unknown, defaulting to 1000
[  218.466386][T10105] lo speed is unknown, defaulting to 1000
[  218.480284][T10105] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  218.723846][T10105] lo speed is unknown, defaulting to 1000
[  218.735744][T10105] lo speed is unknown, defaulting to 1000
[  218.747052][T10105] lo speed is unknown, defaulting to 1000
[  219.142406][ T1089] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  219.142422][ T1089]   u64s 5 type deleted 0:43:0 len 0 ver 0, , continuing
[  219.240858][ T5987] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 12
[  219.250730][ T5987] bcachefs (loop1): unclean shutdown complete, journal seq 13
[  219.265367][ T5987] bcachefs (loop1): done going read-only, filesystem not clean
[  219.310762][ T5987] bcachefs (loop1): shutdown complete
[  219.504826][T10124] XFS (nullb0): Invalid superblock magic number
[  219.979531][T10156] loop4: detected capacity change from 0 to 1024
[  220.018080][   T28] hfsplus: b-tree write err: -5, ino 4
[  220.064499][T10159] loop4: detected capacity change from 0 to 512
[  220.068703][T10159] EXT4-fs: Ignoring removed i_version option
[  220.073646][T10159] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  220.096781][T10159] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  220.103211][T10159] EXT4-fs (loop4): 1 truncate cleaned up
[  220.107371][T10159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.140112][ T9036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.435041][T10173] loop4: detected capacity change from 0 to 4096
[  220.480428][T10174] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  220.726780][T10178] loop4: detected capacity change from 0 to 4096
[  220.763207][T10178] ntfs3(loop4): mft corrupted
[  220.771278][T10178] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  220.775846][T10178] ntfs3(loop4): ino=1a, mi_enum_attr
[  220.778212][T10178] ntfs3(loop4): ino=1a, mi_enum_attr
[  220.780178][T10178] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  222.438157][   T10] IPVS: starting estimator thread 0...
[  222.448216][T10220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1822'.
[  222.523532][T10218] IPVS: using max 47 ests per chain, 112800 per kthread
[  222.615177][T10228] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1827'.
[  222.749368][T10232] &+,
[  224.196512][T10288] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  224.487423][T10296] loop1: detected capacity change from 0 to 32768
[  224.580667][T10296] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  224.718403][T10296] (syz.1.1857,10296,0):ocfs2_dio_end_io:2401 ERROR: Direct IO failed, bytes = -28
[  225.942714][ T5987] ocfs2: Unmounting device (7,1) on (node local)
[  226.285936][T10311] loop1: detected capacity change from 0 to 512
[  226.343444][T10311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  226.362449][T10311] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.1858: Unimplemented hash flags: 0x0001
[  226.367616][T10311] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1858: Corrupt directory, running e2fsck is recommended
[  226.385538][T10311] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.1858: Unimplemented hash flags: 0x0001
[  226.389364][T10311] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1858: Corrupt directory, running e2fsck is recommended
[  226.427059][T10311] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.1858: Unimplemented hash flags: 0x0001
[  226.441843][T10311] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1858: Corrupt directory, running e2fsck is recommended
[  226.452528][T10311] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.1858: Unimplemented hash flags: 0x0001
[  226.463017][T10311] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1858: Corrupt directory, running e2fsck is recommended
[  226.473654][T10311] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.1858: Unimplemented hash flags: 0x0001
[  226.492433][T10311] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1858: Corrupt directory, running e2fsck is recommended
[  226.499718][T10311] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.1858: path /485/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[  226.612748][ T5987] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.711186][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  226.812806][T10320] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  227.016470][T10335] netlink: 'syz.4.1872': attribute type 32 has an invalid length.
[  227.028752][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1872'.
[  227.033773][T10335] (unnamed net_device) (uninitialized): option coupled_control: invalid value (79)
[  227.106441][T10342] syz.4.1875 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  227.159392][T10346] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1878'.
[  227.260441][    T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  227.356787][T10360] netlink: 'syz.4.1885': attribute type 39 has an invalid length.
[  227.415793][    T9] usb 2-1: config 0 has no interfaces?
[  227.419511][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  227.422847][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.435234][    T9] usb 2-1: config 0 descriptor??
[  227.590786][T10367] loop4: detected capacity change from 0 to 128
[  227.618766][T10367] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  227.624897][T10367] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  227.658166][ T9036] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  227.777477][  T792] usb 2-1: USB disconnect, device number 22
[  227.887486][T10374] loop4: detected capacity change from 0 to 256
[  227.916924][T10374] FAT-fs (loop4): Directory bread(block 64) failed
[  227.919474][T10374] FAT-fs (loop4): Directory bread(block 65) failed
[  227.922484][T10374] FAT-fs (loop4): Directory bread(block 66) failed
[  227.925032][T10374] FAT-fs (loop4): Directory bread(block 67) failed
[  227.927757][T10374] FAT-fs (loop4): Directory bread(block 68) failed
[  227.931091][T10374] FAT-fs (loop4): Directory bread(block 69) failed
[  227.933885][T10374] FAT-fs (loop4): Directory bread(block 70) failed
[  227.936651][T10374] FAT-fs (loop4): Directory bread(block 71) failed
[  227.939456][T10374] FAT-fs (loop4): Directory bread(block 72) failed
[  227.942761][T10374] FAT-fs (loop4): Directory bread(block 73) failed
[  228.260047][ T5314] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  228.499804][ T5314] usb 5-1: Using ep0 maxpacket: 16
[  228.504135][ T5314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  228.783525][ T5314] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  228.787223][ T5314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.791800][ T5314] usb 5-1: Product: syz
[  228.793292][ T5314] usb 5-1: Manufacturer: syz
[  228.795166][ T5314] usb 5-1: SerialNumber: syz
[  228.798499][ T5314] usb 5-1: config 0 descriptor??
[  228.826318][ T5314] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  228.989663][   T95] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  229.014115][ T5992] usb 5-1: Failed to submit usb control message: -71
[  229.016550][ T5992] usb 5-1: unable to send the bmi data to the device: -71
[  229.031035][    T9] usb 5-1: USB disconnect, device number 5
[  229.035420][ T5992] usb 5-1: unable to get target info from device
[  229.037596][ T5992] usb 5-1: could not get target info (-71)
[  229.040848][ T5992] usb 5-1: could not probe fw (-71)
[  229.156611][   T95] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  229.160692][   T95] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.163695][   T95] usb 2-1: Product: syz
[  229.165579][   T95] usb 2-1: Manufacturer: syz
[  229.167362][   T95] usb 2-1: SerialNumber: syz
[  229.180145][   T95] usb 2-1: config 0 descriptor??
[  229.192154][   T95] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 023
[  229.797119][   T95] i2c i2c-2: failure reading functionality
[  229.808777][   T95] i2c i2c-2: connected i2c-tiny-usb device
[  229.823026][   T95] usb 2-1: USB disconnect, device number 23
[  230.081921][ T6031] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  230.234063][ T6031] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  230.237802][ T6031] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.241250][ T6031] usb 5-1: Product: syz
[  230.242878][ T6031] usb 5-1: Manufacturer: syz
[  230.244651][ T6031] usb 5-1: SerialNumber: syz
[  230.256412][ T6031] usb 5-1: config 0 descriptor??
[  230.262770][ T6031] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  230.467679][ T6031] gspca_sunplus: reg_r err -71
[  230.475373][ T6031] usb 5-1: USB disconnect, device number 6
[  231.303080][T10440] random: crng reseeded on system resumption
[  231.376370][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1918'.
[  231.815606][T10454] mkiss: ax0: crc mode is auto.
[  232.011530][T10465] loop1: detected capacity change from 0 to 2048
[  232.131537][T10473] loop4: detected capacity change from 0 to 1024
[  232.135066][T10473] EXT4-fs: Ignoring removed nobh option
[  232.137281][T10473] EXT4-fs: Ignoring removed bh option
[  232.207688][T10473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.448630][   T33] audit: type=1800 audit(1757676373.377:61): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1932" name="file1" dev="loop4" ino=15 res=0 errno=0
[  232.490997][ T9036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.533421][T10481] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.704383][T10492] loop4: detected capacity change from 0 to 128
[  232.732520][T10492] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  232.738879][T10492] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  232.882388][T10497] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1938'.
[  234.778494][T10528] loop1: detected capacity change from 0 to 2048
[  234.815222][T10533] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  234.830303][T10528] NILFS (loop1): failed to count free inodes: err=-34
[  234.832879][T10528] NILFS (loop1): failed to count free inodes: err=-34
[  235.130637][ T9036] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  235.182487][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1961'.
[  237.402759][T10577] loop4: detected capacity change from 0 to 32768
[  237.476024][T10577] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  237.522081][T10577] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  237.556737][ T5992] (kworker/u8:3,5992,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  237.580116][T10577] 
[  237.581159][T10577] ======================================================
[  237.583796][T10577] WARNING: possible circular locking dependency detected
[  237.586551][T10577] syzkaller #0 Not tainted
[  237.588436][T10577] ------------------------------------------------------
[  237.591933][T10577] syz.4.1970/10577 is trying to acquire lock:
[  237.594299][T10577] ffff888113a2ddf8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720
[  237.597685][T10577] 
[  237.597685][T10577] but task is already holding lock:
[  237.599956][T10577] ffff88812182a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  237.603105][T10577] 
[  237.603105][T10577] which lock already depends on the new lock.
[  237.603105][T10577] 
[  237.606438][T10577] 
[  237.606438][T10577] the existing dependency chain (in reverse order) is:
[  237.609419][T10577] 
[  237.609419][T10577] -> #2 (jbd2_handle){++++}-{0:0}:
[  237.612173][T10577]        lock_acquire+0x120/0x360
[  237.614017][T10577]        jbd2_log_wait_commit+0x17c/0x4a0
[  237.616103][T10577]        ocfs2_try_to_free_truncate_log+0x317/0x360
[  237.618081][T10577]        ocfs2_write_begin_nolock+0x3143/0x4340
[  237.620290][T10577]        ocfs2_write_begin+0x1bb/0x310
[  237.622197][T10577]        generic_perform_write+0x2c5/0x900
[  237.623994][T10577]        ocfs2_file_write_iter+0x157a/0x1d10
[  237.625835][T10577]        vfs_write+0x5c9/0xb30
[  237.627353][T10577]        ksys_write+0x145/0x250
[  237.628873][T10577]        do_syscall_64+0xfa/0x3b0
[  237.630447][T10577]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.632550][T10577] 
[  237.632550][T10577] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  237.635261][T10577]        lock_acquire+0x120/0x360
[  237.636833][T10577]        down_write+0x96/0x1f0
[  237.638324][T10577]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  237.640322][T10577]        ocfs2_truncate_file+0xda0/0x1420
[  237.642086][T10577]        ocfs2_setattr+0x1520/0x1b40
[  237.643665][T10577]        notify_change+0xb36/0xe40
[  237.645273][T10577]        do_truncate+0x1a4/0x220
[  237.646805][T10577]        path_openat+0x306c/0x3830
[  237.648579][T10577]        do_filp_open+0x1fa/0x410
[  237.650498][T10577]        do_sys_openat2+0x121/0x1c0
[  237.652152][T10577]        __x64_sys_openat+0x138/0x170
[  237.653672][T10577]        do_syscall_64+0xfa/0x3b0
[  237.655401][T10577]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.657273][T10577] 
[  237.657273][T10577] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  237.659813][T10577]        validate_chain+0xb9b/0x2140
[  237.661339][T10577]        __lock_acquire+0xab9/0xd20
[  237.662956][T10577]        lock_acquire+0x120/0x360
[  237.664494][T10577]        down_read+0x46/0x2e0
[  237.666230][T10577]        ocfs2_init_acl+0x2f9/0x720
[  237.667912][T10577]        ocfs2_mknod+0x1321/0x2050
[  237.669505][T10577]        ocfs2_mkdir+0x191/0x440
[  237.671297][T10577]        vfs_mkdir+0x306/0x510
[  237.673179][T10577]        do_mkdirat+0x247/0x590
[  237.674700][T10577]        __x64_sys_mkdirat+0x87/0xa0
[  237.676360][T10577]        do_syscall_64+0xfa/0x3b0
[  237.678162][T10577]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.680491][T10577] 
[  237.680491][T10577] other info that might help us debug this:
[  237.680491][T10577] 
[  237.683636][T10577] Chain exists of:
[  237.683636][T10577]   &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key --> jbd2_handle
[  237.683636][T10577] 
[  237.687927][T10577]  Possible unsafe locking scenario:
[  237.687927][T10577] 
[  237.690367][T10577]        CPU0                    CPU1
[  237.692482][T10577]        ----                    ----
[  237.694613][T10577]   rlock(jbd2_handle);
[  237.696260][T10577]                                lock(&ocfs2_file_ip_alloc_sem_key);
[  237.699231][T10577]                                lock(jbd2_handle);
[  237.701373][T10577]   rlock(&oi->ip_xattr_sem);
[  237.702806][T10577] 
[  237.702806][T10577]  *** DEADLOCK ***
[  237.702806][T10577] 
[  237.705283][T10577] 8 locks held by syz.4.1970/10577:
[  237.706895][T10577]  #0: ffff8880387ce428 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  237.709719][T10577]  #1: ffff888113a2e0c0 (&type->i_mutex_dir_key#17/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0
[  237.712968][T10577]  #2: ffff888035a109c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  237.717108][T10577]  #3: ffff888113a2c3c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  237.721314][T10577]  #4: ffff888113a2a6c0 (&ocfs2_sysfile_lock_key[GLOBAL_BITMAP_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  237.725492][T10577]  #5: ffff8880387ce618 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050
[  237.728291][T10577]  #6: ffff888106d430e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0
[  237.731539][T10577]  #7: ffff88812182a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  237.734497][T10577] 
[  237.734497][T10577] stack backtrace:
[  237.736325][T10577] CPU: 0 UID: 0 PID: 10577 Comm: syz.4.1970 Not tainted syzkaller #0 PREEMPT(full) 
[  237.736335][T10577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  237.736342][T10577] Call Trace:
[  237.736347][T10577]  <TASK>
[  237.736351][T10577]  dump_stack_lvl+0x189/0x250
[  237.736363][T10577]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.736374][T10577]  ? __pfx__printk+0x10/0x10
[  237.736384][T10577]  ? stack_trace_save+0x9c/0xe0
[  237.736395][T10577]  print_circular_bug+0x2ee/0x310
[  237.736405][T10577]  check_noncircular+0x134/0x160
[  237.736415][T10577]  validate_chain+0xb9b/0x2140
[  237.736422][T10577]  ? __pfx___mutex_trylock_common+0x10/0x10
[  237.736431][T10577]  ? rcu_is_watching+0x15/0xb0
[  237.736440][T10577]  __lock_acquire+0xab9/0xd20
[  237.736452][T10577]  ? ocfs2_init_acl+0x2f9/0x720
[  237.736460][T10577]  lock_acquire+0x120/0x360
[  237.736470][T10577]  ? ocfs2_init_acl+0x2f9/0x720
[  237.736479][T10577]  ? jbd2_write_access_granted+0x69/0x310
[  237.736490][T10577]  down_read+0x46/0x2e0
[  237.736499][T10577]  ? ocfs2_init_acl+0x2f9/0x720
[  237.736507][T10577]  ocfs2_init_acl+0x2f9/0x720
[  237.736517][T10577]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  237.736526][T10577]  ? dquot_alloc_inode+0x216/0xa50
[  237.736535][T10577]  ? __pfx_ocfs2_journal_dirty+0x10/0x10
[  237.736545][T10577]  ? ocfs2_block_signals+0x94/0xe0
[  237.736552][T10577]  ? __pfx_ocfs2_block_signals+0x10/0x10
[  237.736559][T10577]  ? ocfs2_metadata_cache_get_super+0x43/0x80
[  237.736566][T10577]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  237.736575][T10577]  ocfs2_mknod+0x1321/0x2050
[  237.736586][T10577]  ? __pfx_ocfs2_mknod+0x10/0x10
[  237.736593][T10577]  ? do_raw_spin_unlock+0x4d/0x240
[  237.736602][T10577]  ? ocfs2_inode_lock_full_nested+0xabe/0x1b40
[  237.736614][T10577]  ? __lock_acquire+0xab9/0xd20
[  237.736633][T10577]  ? __lock_acquire+0xab9/0xd20
[  237.736645][T10577]  ? do_raw_spin_lock+0x121/0x290
[  237.736655][T10577]  ? do_raw_spin_unlock+0x4d/0x240
[  237.736665][T10577]  ? put_pid+0xe9/0x130
[  237.736675][T10577]  ocfs2_mkdir+0x191/0x440
[  237.736682][T10577]  ? __pfx_from_kgid+0x10/0x10
[  237.736693][T10577]  ? apparmor_path_mkdir+0x1a7/0x220
[  237.736725][T10577]  ? __pfx_ocfs2_mkdir+0x10/0x10
[  237.736732][T10577]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  237.736741][T10577]  ? inode_permission+0x149/0x470
[  237.736748][T10577]  ? __pfx_ocfs2_permission+0x10/0x10
[  237.736755][T10577]  ? bpf_lsm_inode_mkdir+0x9/0x20
[  237.736764][T10577]  vfs_mkdir+0x306/0x510
[  237.736775][T10577]  do_mkdirat+0x247/0x590
[  237.736784][T10577]  ? __pfx_do_mkdirat+0x10/0x10
[  237.736793][T10577]  ? getname_flags+0x1e5/0x540
[  237.736800][T10577]  __x64_sys_mkdirat+0x87/0xa0
[  237.736810][T10577]  do_syscall_64+0xfa/0x3b0
[  237.736818][T10577]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.736824][T10577]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.736832][T10577]  ? exc_page_fault+0x9f/0xf0
[  237.736839][T10577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.736847][T10577] RIP: 0033:0x7fd83e18eba9
[  237.736855][T10577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.736862][T10577] RSP: 002b:00007fd83ef80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  237.736871][T10577] RAX: ffffffffffffffda RBX: 00007fd83e3d5fa0 RCX: 00007fd83e18eba9
[  237.736876][T10577] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: ffffffffffffff9c
[  237.736882][T10577] RBP: 00007fd83e211e19 R08: 0000000000000000 R09: 0000000000000000
[  237.736886][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.736891][T10577] R13: 00007fd83e3d6038 R14: 00007fd83e3d5fa0 R15: 00007fffe3b706a8
[  237.736900][T10577]  </TASK>
[  237.937586][ T9036] ocfs2: Unmounting device (7,4) on (node local)

VM DIAGNOSIS:
11:26:18  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000005521 RDI=0000000000005522 RBP=00000000000003f8 RSP=ffffc900075b6d10
R8 =ffff888107d38237 R9 =1ffff11020fa7046 R10=dffffc0000000000 R11=ffffffff854f6ec0
R12=dffffc0000000000 R13=ffffffff99b008d9 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f6f3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd83ef806c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31123ffc CR3=000000003c42c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=000000000000ff00 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=3e616587d4b97900 RBX=ffffffff819683f8 RCX=3e616587d4b97900 RDX=0000000000000001
RSI=ffffffff8be339e0 RDI=ffffffff819683f8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a030 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b7a23f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f93955d7dac CR3=0000000027652000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f22be212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
