last executing test programs:

5m26.350060329s ago: executing program 1 (id=471):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)

5m25.611226232s ago: executing program 1 (id=475):
r0 = socket(0x2a, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xbf7b81b349ce6487, 0x0, 0x2}}, 0x10)

5m25.611048953s ago: executing program 1 (id=476):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x4, 0x4}, 0x80, 0x0}}], 0x1, 0x4000000)

5m25.540407658s ago: executing program 1 (id=478):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

5m25.433920724s ago: executing program 1 (id=482):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r2, 0x0, 0x6, 0x2, &(0x7f0000001600)="ef4c", 0x4})

5m25.137050773s ago: executing program 1 (id=489):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884)

5m25.029396197s ago: executing program 32 (id=489):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884)

4m20.422390835s ago: executing program 0 (id=1283):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r1=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r1, 0xfc}, 0x8)

4m19.522483829s ago: executing program 0 (id=1286):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

4m19.522119152s ago: executing program 0 (id=1287):
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x101c02, 0x26)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0xa, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x6071, 0x0, 0x811, {[@generic={0x8, 0xa, "09df168a00000000"}]}}}}}}}, 0x0)

4m18.591775899s ago: executing program 0 (id=1289):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)

4m18.591490156s ago: executing program 0 (id=1290):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)

4m18.5304952s ago: executing program 0 (id=1292):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000700000000000000fdffffff7f0000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x73, &(0x7f00000001c0)=""/115, 0x0, 0xe}, 0x94)

4m3.519987391s ago: executing program 33 (id=1292):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000700000000000000fdffffff7f0000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x73, &(0x7f00000001c0)=""/115, 0x0, 0xe}, 0x94)

1m25.640860784s ago: executing program 3 (id=3521):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @private=0xa018100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)
r4 = dup(r0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x7d, &(0x7f0000000100)={0x0, 0xffff}, 0x8)

1m25.64032866s ago: executing program 3 (id=3523):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200000000"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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")

1m25.431602743s ago: executing program 3 (id=3525):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dfdbfa, {0x0, 0x0, 0xe0, 0x0, 0x9181, 0x1041}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xfff7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x88840}, 0x20040040)

1m25.379578734s ago: executing program 3 (id=3526):
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000180)='./file0\x00')
mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

1m25.306495511s ago: executing program 3 (id=3527):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2\xdf', &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb0<m\x8ePDhx\x04\xd8\x17\xbcP\x8bl\xd5\x00\x00\x00\x00\x00\x00\xa3E\x9a_\x9b\x98#\xb2\x03\x18!V\x1b\xcbk\xf8\xd6JE4,\xdf\x96\x80j#\xf9\xd8\x13,\x89\x10\x90:l/\xb9T\x9a', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000500)=""/223, 0xdf}], 0x1)
tkill(r3, 0xb)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='hsr0\x00'})

1m25.081064378s ago: executing program 3 (id=3528):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

1m24.938954775s ago: executing program 34 (id=3528):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

27.605103395s ago: executing program 2 (id=4330):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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")
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x0, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@commit}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

27.602195298s ago: executing program 2 (id=4331):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240002801400018008000100e000000108000200ac1414270c00028005000100000000000800074000000007240001801400018008000100e000000108000200ac1414000c00028005000100000000002c000e800c000280ee00010021000000140001800800010000000000080002"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040)

27.530627118s ago: executing program 2 (id=4332):
r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
io_setup(0x9, &(0x7f0000000b80)=<r1=>0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}])
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x918)

27.43074314s ago: executing program 2 (id=4333):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x538, &(0x7f00000003c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})

27.381807487s ago: executing program 2 (id=4336):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@delqdisc={0x24, 0x25, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x1}, {0xfff5, 0xfff1}, {0xfff3, 0x8}}}, 0x24}}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)

27.181998723s ago: executing program 2 (id=4342):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@check_relaxed}, {@gid}, {@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@gid}, {@map_acorn}, {@nojoliet}, {}, {@block={'block', 0x3d, 0x400}}, {@gid}, {@unhide}, {@map_off}]}, 0x1, 0xa00, &(0x7f00000003c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)

27.003133621s ago: executing program 35 (id=4342):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@check_relaxed}, {@gid}, {@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@gid}, {@map_acorn}, {@nojoliet}, {}, {@block={'block', 0x3d, 0x400}}, {@gid}, {@unhide}, {@map_off}]}, 0x1, 0xa00, &(0x7f00000003c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)

3.265609487s ago: executing program 5 (id=4613):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1)

3.126350959s ago: executing program 5 (id=4615):
socket$kcm(0x10, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000140)})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0)
r1 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r1, 0x0, 0x0)
shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', <r2=>0x0})
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000100)=0x6, &(0x7f0000000180)=0x2)
bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, r2, 0x3e}, 0x10)
ioprio_get$uid(0x3, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18)
syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x40000)
socket$nl_xfrm(0x10, 0x3, 0x6)

1.796850009s ago: executing program 6 (id=4626):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00028005000380"], 0x24}}, 0x0)

1.66674528s ago: executing program 6 (id=4627):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x3, 0x2, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x3}}}})

1.608935123s ago: executing program 6 (id=4629):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)

1.540279359s ago: executing program 6 (id=4630):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0xc0, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xd3}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44}, 0x4000002)

1.450255725s ago: executing program 6 (id=4631):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000280))

1.376558345s ago: executing program 6 (id=4633):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)={0x0, 0x0, 0x9, {0x9, 0x0, "2a53fb8991f8e0"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)

1.268368091s ago: executing program 4 (id=4634):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x12, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040)

1.266756972s ago: executing program 5 (id=4635):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./bus\x00', 0x10, &(0x7f0000001a80)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYRES16=0x0, @ANYRESDEC, @ANYBLOB="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"], 0x3, 0x1f9, &(0x7f00000001c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x42800, 0x186)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1.266547309s ago: executing program 4 (id=4636):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x1903, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xb, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x0, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="bdc443"], 0x0, 0x0, 0x0}, 0x0)

1.198749133s ago: executing program 5 (id=4637):
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000000)="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", 0xfc)

1.198450195s ago: executing program 5 (id=4638):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0, @ANYRESDEC=r1], 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)

689.537313ms ago: executing program 4 (id=4639):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, 0x0, 0xdeadbeef, 0x8, 0x204})

610.246006ms ago: executing program 4 (id=4640):
futex(0xfffffffffffffffc, 0x100, 0x10002, 0x0, 0x0, 0x20)

610.006915ms ago: executing program 4 (id=4641):
syz_open_dev$tty1(0xc, 0x4, 0x1)
pipe2(&(0x7f0000001cc0), 0x800)
socket$kcm(0x2, 0xa, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x400001, 0x0, 0x3, 0x1, 0x310, 0xfff}, 0x20)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

55.480602ms ago: executing program 5 (id=4642):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800700, &(0x7f00000000c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@sysvgroups}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")

0s ago: executing program 4 (id=4643):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000580)={[{@jqfmt_vfsold}, {@test_dummy_encryption_v1}, {@grpjquota}, {@prjquota}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@nouid32}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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")

kernel console output (not intermixed with test programs):

42
[  270.095883][T12150] syz_tun: tun_net_xmit 42
[  270.098157][T12150] syz_tun: tun_net_xmit 42
[  270.099635][T12150] syz_tun: tun_net_xmit 42
[  270.101792][T12150] syz_tun: tun_net_xmit 42
[  270.103845][T12150] syz_tun: tun_net_xmit 42
[  270.105662][T12150] syz_tun: tun_net_xmit 42
[  270.108813][T12150] syz_tun: tun_net_xmit 42
[  270.110573][T12150] syz_tun: tun_net_xmit 42
[  270.112420][T12150] syz_tun: tun_net_xmit 42
[  270.114057][T12150] syz_tun: tun_net_xmit 42
[  270.115708][T12150] syz_tun: tun_net_xmit 42
[  270.117837][T12150] syz_tun: tun_net_xmit 42
[  270.119272][T12150] syz_tun: tun_net_xmit 42
[  270.120744][T12150] syz_tun: tun_net_xmit 42
[  270.122264][T12150] syz_tun: tun_net_xmit 42
[  270.123897][T12150] syz_tun: tun_net_xmit 42
[  270.125688][T12150] syz_tun: tun_net_xmit 42
[  270.128782][T12150] syz_tun: tun_net_xmit 42
[  270.130580][T12150] syz_tun: tun_net_xmit 42
[  270.132504][T12150] syz_tun: tun_net_xmit 42
[  270.134110][T12150] syz_tun: tun_net_xmit 42
[  270.135860][T12150] syz_tun: tun_net_xmit 42
[  270.138248][T12150] syz_tun: tun_net_xmit 42
[  270.139739][T12150] syz_tun: tun_net_xmit 42
[  270.141186][T12150] syz_tun: tun_net_xmit 42
[  270.143251][T12150] syz_tun: tun_net_xmit 42
[  270.144897][T12150] syz_tun: tun_net_xmit 42
[  270.147085][T12150] syz_tun: tun_net_xmit 42
[  270.148618][T12150] syz_tun: tun_net_xmit 42
[  270.150250][T12150] syz_tun: tun_net_xmit 42
[  270.152284][T12150] syz_tun: tun_net_xmit 42
[  270.153970][T12150] syz_tun: tun_net_xmit 42
[  270.155902][T12150] syz_tun: tun_net_xmit 42
[  270.158588][T12150] syz_tun: tun_net_xmit 42
[  270.160071][T12150] syz_tun: tun_net_xmit 42
[  270.161544][T12150] syz_tun: tun_net_xmit 42
[  270.163156][T12150] syz_tun: tun_net_xmit 42
[  270.165037][T12150] syz_tun: tun_net_xmit 42
[  270.167115][T12150] syz_tun: tun_net_xmit 42
[  270.168693][T12150] syz_tun: tun_net_xmit 42
[  270.170155][T12150] syz_tun: tun_net_xmit 42
[  270.171624][T12150] syz_tun: tun_net_xmit 42
[  270.173109][T12150] syz_tun: tun_net_xmit 42
[  270.174583][T12150] syz_tun: tun_net_xmit 42
[  270.176045][T12150] syz_tun: tun_net_xmit 42
[  270.185338][T12150] syz_tun: tun_net_xmit 42
[  270.188585][T12150] syz_tun: tun_net_xmit 42
[  270.190054][T12150] syz_tun: tun_net_xmit 42
[  270.191569][T12150] syz_tun: tun_net_xmit 42
[  270.193149][T12150] syz_tun: tun_net_xmit 42
[  270.194623][T12150] syz_tun: tun_net_xmit 42
[  270.196810][T12150] syz_tun: tun_net_xmit 42
[  270.198320][T12150] syz_tun: tun_net_xmit 42
[  270.199920][T12150] syz_tun: tun_net_xmit 42
[  270.201683][T12150] syz_tun: tun_net_xmit 42
[  270.203408][T12150] syz_tun: tun_net_xmit 42
[  270.204883][T12150] syz_tun: tun_net_xmit 42
[  270.207147][T12150] syz_tun: tun_net_xmit 42
[  270.208698][T12150] syz_tun: tun_net_xmit 42
[  270.210255][T12150] syz_tun: tun_net_xmit 42
[  270.211874][T12150] syz_tun: tun_net_xmit 42
[  270.213433][T12150] syz_tun: tun_net_xmit 42
[  270.215000][T12150] syz_tun: tun_net_xmit 42
[  270.217991][T12150] syz_tun: tun_net_xmit 42
[  270.224559][T12150] syz_tun: tun_net_xmit 42
[  270.227016][T12150] syz_tun: tun_net_xmit 42
[  270.229195][T12150] syz_tun: tun_net_xmit 42
[  270.231236][T12150] syz_tun: tun_net_xmit 42
[  270.233270][T12150] syz_tun: tun_net_xmit 42
[  270.235589][T12150] syz_tun: tun_net_xmit 42
[  270.237480][T12150] syz_tun: tun_net_xmit 42
[  270.239024][T12150] syz_tun: tun_net_xmit 42
[  270.240814][T12150] syz_tun: tun_net_xmit 42
[  270.242555][T12150] syz_tun: tun_net_xmit 42
[  270.245317][T12150] syz_tun: tun_net_xmit 42
[  270.248020][T12150] syz_tun: tun_net_xmit 42
[  270.250258][T12150] syz_tun: tun_net_xmit 42
[  270.252002][T12150] syz_tun: tun_net_xmit 42
[  270.253696][T12150] syz_tun: tun_net_xmit 42
[  270.255412][T12150] syz_tun: tun_net_xmit 42
[  270.257275][T12150] syz_tun: tun_net_xmit 42
[  270.259057][T12150] syz_tun: tun_net_xmit 42
[  270.260881][T12150] syz_tun: tun_net_xmit 42
[  270.262469][T12150] syz_tun: tun_net_xmit 42
[  270.264264][T12150] syz_tun: tun_net_xmit 42
[  270.266046][T12150] syz_tun: tun_net_xmit 42
[  270.269860][T12150] syz_tun: tun_net_xmit 42
[  270.271428][T12150] syz_tun: tun_net_xmit 42
[  270.273024][T12150] syz_tun: tun_net_xmit 42
[  270.274543][T12150] syz_tun: tun_net_xmit 42
[  270.276068][T12150] syz_tun: tun_net_xmit 42
[  270.278409][T12150] syz_tun: tun_net_xmit 42
[  270.280530][T12150] syz_tun: tun_net_xmit 42
[  270.282575][T12150] syz_tun: tun_net_xmit 42
[  270.284555][T12150] syz_tun: tun_net_xmit 42
[  270.292681][T12150] syz_tun: tun_net_xmit 42
[  270.294698][T12150] syz_tun: tun_net_xmit 42
[  270.300116][T12150] syz_tun: tun_net_xmit 42
[  270.302718][T12150] syz_tun: tun_net_xmit 42
[  270.305090][T12150] syz_tun: tun_net_xmit 42
[  270.308734][T12150] syz_tun: tun_net_xmit 42
[  270.311354][T12150] syz_tun: tun_net_xmit 42
[  270.313666][T12150] syz_tun: tun_net_xmit 42
[  270.315753][T12150] syz_tun: tun_net_xmit 42
[  270.318063][T12150] syz_tun: tun_net_xmit 42
[  270.320641][T12150] syz_tun: tun_net_xmit 42
[  270.322636][T12150] syz_tun: tun_net_xmit 42
[  270.324704][T12150] syz_tun: tun_net_xmit 42
[  270.327237][T12150] syz_tun: tun_net_xmit 42
[  270.329385][T12150] syz_tun: tun_net_xmit 42
[  270.331525][T12150] syz_tun: tun_net_xmit 42
[  270.333591][T12150] syz_tun: tun_net_xmit 42
[  270.335649][T12150] syz_tun: tun_net_xmit 42
[  270.339299][T12150] syz_tun: tun_net_xmit 42
[  270.341383][T12150] syz_tun: tun_net_xmit 42
[  270.343388][T12150] syz_tun: tun_net_xmit 42
[  270.345300][T12150] syz_tun: tun_net_xmit 42
[  270.348432][T12150] syz_tun: tun_net_xmit 42
[  270.350743][T12150] syz_tun: tun_net_xmit 42
[  270.352980][T12150] syz_tun: tun_net_xmit 42
[  270.355134][T12150] syz_tun: tun_net_xmit 42
[  270.357714][T12150] syz_tun: tun_net_xmit 42
[  270.361173][T12150] syz_tun: tun_net_xmit 42
[  270.363282][T12150] syz_tun: tun_net_xmit 42
[  270.371206][T12150] syz_tun: tun_net_xmit 42
[  270.375513][T12150] syz_tun: tun_net_xmit 42
[  270.381353][T12150] syz_tun: tun_net_xmit 42
[  270.385669][T12150] syz_tun: tun_net_xmit 42
[  270.392770][T12150] syz_tun: tun_net_xmit 42
[  270.395879][T12150] syz_tun: tun_net_xmit 42
[  270.401568][T12150] syz_tun: tun_net_xmit 42
[  270.403910][T12150] syz_tun: tun_net_xmit 42
[  270.406068][T12150] syz_tun: tun_net_xmit 42
[  270.411889][T12150] syz_tun: tun_net_xmit 42
[  270.413951][T12150] syz_tun: tun_net_xmit 42
[  270.415933][T12150] syz_tun: tun_net_xmit 42
[  270.418586][T12150] syz_tun: tun_net_xmit 42
[  270.420605][T12150] syz_tun: tun_net_xmit 42
[  270.422671][T12150] syz_tun: tun_net_xmit 42
[  270.424660][T12150] syz_tun: tun_net_xmit 42
[  270.427372][T12150] syz_tun: tun_net_xmit 42
[  270.429484][T12150] syz_tun: tun_net_xmit 42
[  270.431620][T12150] syz_tun: tun_net_xmit 42
[  270.433746][T12150] syz_tun: tun_net_xmit 42
[  270.435863][T12150] syz_tun: tun_net_xmit 42
[  270.438292][T12150] syz_tun: tun_net_xmit 42
[  270.440507][T12150] syz_tun: tun_net_xmit 42
[  270.442662][T12150] syz_tun: tun_net_xmit 42
[  270.444842][T12150] syz_tun: tun_net_xmit 42
[  270.447008][T12150] syz_tun: tun_net_xmit 42
[  270.449555][T12150] syz_tun: tun_net_xmit 42
[  270.451699][T12150] syz_tun: tun_net_xmit 42
[  270.453781][T12150] syz_tun: tun_net_xmit 42
[  270.455861][T12150] syz_tun: tun_net_xmit 42
[  270.472653][T12150] syz_tun: tun_net_xmit 42
[  270.474433][T12150] syz_tun: tun_net_xmit 42
[  270.476465][T12150] syz_tun: tun_net_xmit 42
[  270.478066][T12150] syz_tun: tun_net_xmit 42
[  270.479717][T12150] syz_tun: tun_net_xmit 42
[  270.481539][T12150] syz_tun: tun_net_xmit 42
[  270.483101][T12150] syz_tun: tun_net_xmit 42
[  270.484571][T12150] syz_tun: tun_net_xmit 42
[  270.486479][T12150] syz_tun: tun_net_xmit 42
[  270.488273][T12150] syz_tun: tun_net_xmit 42
[  270.489893][T12150] syz_tun: tun_net_xmit 42
[  270.491642][T12150] syz_tun: tun_net_xmit 42
[  270.493792][T12150] syz_tun: tun_net_xmit 42
[  270.496035][T12150] syz_tun: tun_net_xmit 42
[  270.498435][T12150] syz_tun: tun_net_xmit 42
[  270.500289][T12150] syz_tun: tun_net_xmit 42
[  270.502105][T12150] syz_tun: tun_net_xmit 42
[  270.504014][T12150] syz_tun: tun_net_xmit 42
[  270.505889][T12150] syz_tun: tun_net_xmit 42
[  270.508913][T12150] syz_tun: tun_net_xmit 42
[  270.510727][T12150] syz_tun: tun_net_xmit 42
[  270.512425][T12150] syz_tun: tun_net_xmit 42
[  270.514225][T12150] syz_tun: tun_net_xmit 42
[  270.516011][T12150] syz_tun: tun_net_xmit 42
[  270.518411][T12150] syz_tun: tun_net_xmit 42
[  270.520500][T12150] syz_tun: tun_net_xmit 42
[  270.522235][T12150] syz_tun: tun_net_xmit 42
[  270.523850][T12150] syz_tun: tun_net_xmit 42
[  270.525336][T12150] syz_tun: tun_net_xmit 42
[  270.527471][T12150] syz_tun: tun_net_xmit 42
[  270.528957][T12150] syz_tun: tun_net_xmit 42
[  270.530928][T12150] syz_tun: tun_net_xmit 42
[  270.532852][T12150] syz_tun: tun_net_xmit 42
[  270.534645][T12150] syz_tun: tun_net_xmit 42
[  270.536161][T12150] syz_tun: tun_net_xmit 42
[  270.537944][T12150] syz_tun: tun_net_xmit 42
[  270.539701][T12150] syz_tun: tun_net_xmit 42
[  270.551005][T12150] syz_tun: tun_net_xmit 42
[  270.559778][T12150] syz_tun: tun_net_xmit 42
[  270.562034][T12150] syz_tun: tun_net_xmit 42
[  270.568056][T12150] syz_tun: tun_net_xmit 42
[  270.571402][T12150] syz_tun: tun_net_xmit 42
[  270.574319][T12150] syz_tun: tun_net_xmit 42
[  270.576833][T12150] syz_tun: tun_net_xmit 42
[  270.580703][T12150] syz_tun: tun_net_xmit 42
[  270.584726][T12150] syz_tun: tun_net_xmit 42
[  270.589145][T12150] syz_tun: tun_net_xmit 42
[  270.593468][T12150] syz_tun: tun_net_xmit 42
[  270.596820][T12150] syz_tun: tun_net_xmit 42
[  270.598799][T12150] syz_tun: tun_net_xmit 42
[  270.600893][T12150] syz_tun: tun_net_xmit 42
[  270.605598][T12150] syz_tun: tun_net_xmit 42
[  270.607833][T12150] syz_tun: tun_net_xmit 42
[  270.609910][T12150] syz_tun: tun_net_xmit 42
[  270.611986][T12150] syz_tun: tun_net_xmit 42
[  270.614075][T12150] syz_tun: tun_net_xmit 42
[  270.616153][T12150] syz_tun: tun_net_xmit 42
[  270.618994][T12150] syz_tun: tun_net_xmit 42
[  270.623420][T12150] syz_tun: tun_net_xmit 42
[  270.628069][T12150] syz_tun: tun_net_xmit 42
[  270.632396][T12150] syz_tun: tun_net_xmit 42
[  270.634925][T12150] syz_tun: tun_net_xmit 42
[  270.637152][T12150] syz_tun: tun_net_xmit 42
[  270.639258][T12150] syz_tun: tun_net_xmit 42
[  270.641383][T12150] syz_tun: tun_net_xmit 42
[  270.643538][T12150] syz_tun: tun_net_xmit 42
[  270.645667][T12150] syz_tun: tun_net_xmit 42
[  270.651043][T12150] syz_tun: tun_net_xmit 42
[  270.653757][T12150] syz_tun: tun_net_xmit 42
[  270.655832][T12150] syz_tun: tun_net_xmit 42
[  270.658083][T12150] syz_tun: tun_net_xmit 42
[  270.660245][T12150] syz_tun: tun_net_xmit 42
[  270.662406][T12150] syz_tun: tun_net_xmit 42
[  270.664514][T12150] syz_tun: tun_net_xmit 42
[  270.667368][T12150] syz_tun: tun_net_xmit 42
[  270.669387][T12150] syz_tun: tun_net_xmit 42
[  270.671493][T12150] syz_tun: tun_net_xmit 42
[  270.673844][T12150] syz_tun: tun_net_xmit 42
[  270.675915][T12150] syz_tun: tun_net_xmit 42
[  270.678191][T12150] syz_tun: tun_net_xmit 42
[  270.680261][T12150] syz_tun: tun_net_xmit 42
[  270.682057][T12150] syz_tun: tun_net_xmit 42
[  270.683727][T12150] syz_tun: tun_net_xmit 42
[  270.688964][T12150] syz_tun: tun_net_xmit 42
[  270.690565][T12150] syz_tun: tun_net_xmit 42
[  270.692111][T12150] syz_tun: tun_net_xmit 42
[  270.693693][T12150] syz_tun: tun_net_xmit 42
[  270.695190][T12150] syz_tun: tun_net_xmit 42
[  270.699182][T12150] syz_tun: tun_net_xmit 42
[  270.700795][T12150] syz_tun: tun_net_xmit 42
[  270.745026][T12238] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  271.008974][ T5815] Bluetooth: hci1: unexpected event for opcode 0x0c7c
[  271.282900][T12259] loop3: detected capacity change from 0 to 47
[  271.285730][T12259] minix: Unknown parameter '0xffffffffffffffff'
[  271.812019][T12294] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2527'.
[  271.865251][T12302] loop3: detected capacity change from 0 to 128
[  271.876147][T12302] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  271.891907][T12302] ext4 filesystem being mounted at /671/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  271.942595][T12302] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  272.001547][ T7149] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  272.073690][T12314] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2537'.
[  272.163364][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  272.347231][T12330] netlink: 'syz.2.2545': attribute type 1 has an invalid length.
[  272.416910][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  272.523202][T12350] netlink: 'syz.3.2555': attribute type 1 has an invalid length.
[  272.536629][T12350] netlink: 'syz.3.2555': attribute type 2 has an invalid length.
[  272.577085][   T35] audit: type=1326 audit(2000000165.337:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12345 comm="syz.2.2553" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  272.596592][   T35] audit: type=1326 audit(2000000165.337:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12345 comm="syz.2.2553" exe="/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  272.613086][   T35] audit: type=1326 audit(2000000165.337:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12345 comm="syz.2.2553" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  272.646896][T12358] binder: 12357:12358 ioctl c018620c 200000000100 returned -22
[  272.773322][T12371] netlink: 'syz.2.2565': attribute type 27 has an invalid length.
[  272.777323][T12371] netlink: 'syz.2.2565': attribute type 1 has an invalid length.
[  272.781000][T12373] 9pnet_fd: Insufficient options for proto=fd
[  273.632435][T12390] openvswitch: netlink: nsh attribute has 65276 unknown bytes.
[  273.634802][T12390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.756454][ T5850] usb 4-1: new low-speed USB device number 24 using dummy_hcd
[  274.886420][ T5850] usb 4-1: device descriptor read/64, error -71
[  274.962336][T12430] futex_wake_op: syz.2.2591 tries to shift op by 36; fix this program
[  275.136416][ T5850] usb 4-1: new low-speed USB device number 25 using dummy_hcd
[  275.266745][ T5850] usb 4-1: device descriptor read/64, error -71
[  275.376637][ T5850] usb usb4-port1: attempt power cycle
[  275.627091][T12463] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2608'.
[  275.746528][ T5850] usb 4-1: new low-speed USB device number 26 using dummy_hcd
[  275.766902][ T5850] usb 4-1: device descriptor read/8, error -71
[  276.026569][ T5850] usb 4-1: new low-speed USB device number 27 using dummy_hcd
[  276.046946][ T5850] usb 4-1: device descriptor read/8, error -71
[  276.138784][ T5851] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  276.166718][ T5850] usb usb4-port1: unable to enumerate USB device
[  276.943117][T12515] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  276.948757][T12515] overlayfs: missing 'lowerdir'
[  277.133412][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  277.180099][T12523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2635'.
[  277.209777][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2636'.
[  277.214637][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2636'.
[  277.264635][T12531] ptrace attach of "/syz-executor exec"[9468] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               
[  277.544611][   T35] audit: type=1326 audit(2000000170.227:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.2.2642" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  277.728679][   T35] audit: type=1326 audit(2000000170.237:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.2.2642" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  277.735798][   T35] audit: type=1326 audit(2000000170.247:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.2.2642" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  277.756898][   T35] audit: type=1326 audit(2000000170.257:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.2.2642" exe="/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  277.758446][ T5851] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  277.767504][   T35] audit: type=1326 audit(2000000170.257:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.2.2642" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  277.787355][   T35] audit: type=1326 audit(2000000170.257:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.2.2642" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  277.928883][ T5851] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  277.933914][ T5851] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  277.941697][ T5851] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  277.945813][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  277.949852][ T5851] usb 4-1: SerialNumber: syz
[  278.103683][T12555] tipc: Started in network mode
[  278.105973][T12555] tipc: Node identity , cluster identity 64
[  278.109155][T12555] tipc: Failed to set node id, please configure manually
[  278.112432][T12555] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  278.172293][ T5851] usb 4-1: 0:2 : does not exist
[  278.194034][ T5851] usb 4-1: USB disconnect, device number 28
[  278.549055][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'.
[  278.552676][ T5815] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  278.773497][T12579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2658'.
[  278.869196][T12585] loop3: detected capacity change from 0 to 2048
[  278.887333][T12585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.898173][T12585] ext4 filesystem being mounted at /691/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  278.908980][T12585] fs-verity (loop3, inode 18): Unknown hash algorithm number: 0
[  278.924336][ T7149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.011313][T12590] loop3: detected capacity change from 0 to 4096
[  279.042718][T12592] overlayfs: conflicting options: nfs_export=on,index=off
[  279.270009][T12596] loop3: detected capacity change from 0 to 40427
[  279.277470][T12596] F2FS-fs (loop3): Invalid log blocks per segment (4278190089)
[  279.280022][T12596] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  279.284236][T12596] F2FS-fs (loop3): invalid crc value
[  279.331418][T12596] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  279.366607][T12596] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  279.370954][T12596] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  279.389401][T12596] F2FS-fs (loop3): Corrupted max_depth of 3: 255
[  279.394713][T12596] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  279.976553][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  280.282011][T12621] xt_TPROXY: Can be used only with -p tcp or -p udp
[  280.358515][T12624] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  280.578424][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2679'.
[  280.706396][T12645] raw_sendmsg: syz.3.2683 forgot to set AF_INET. Fix it!
[  280.771943][T12651] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2686'.
[  281.302420][T12663] overlayfs: failed to resolve './file0': -2
[  281.643295][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2707'.
[  282.141177][T12709] bridge0: port 3(syz_tun) entered blocking state
[  282.143666][T12709] bridge0: port 3(syz_tun) entered forwarding state
[  282.150839][T12709] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.156195][T12709] 8021q: adding VLAN 0 to HW filter on device team0
[  282.161703][T12709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  282.818125][T12725] loop3: detected capacity change from 0 to 8
[  282.825937][T12725] SQUASHFS error: Failed to read block 0x2d7: -5
[  282.829477][T12725] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  283.099266][T12738] loop3: detected capacity change from 0 to 256
[  283.125635][T12738] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  283.137552][T12738] exFAT-fs (loop3): valid_size(150994954) is greater than size(10)
[  283.167703][T12738] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff)
[  283.200837][   T35] audit: type=1326 audit(2000000175.957:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.4.2727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921938f7c9 code=0x7ffc0000
[  283.234145][   T35] audit: type=1326 audit(2000000175.957:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.4.2727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921938f7c9 code=0x7ffc0000
[  283.243625][   T35] audit: type=1326 audit(2000000175.967:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.4.2727" exe="/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f921938f7c9 code=0x7ffc0000
[  283.262385][   T35] audit: type=1326 audit(2000000175.967:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.4.2727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921938f7c9 code=0x7ffc0000
[  283.277459][   T35] audit: type=1326 audit(2000000175.967:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.4.2727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921938f7c9 code=0x7ffc0000
[  283.534825][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2736'.
[  284.747765][T12802] IPv6: Can't replace route, no match found
[  285.256574][T12810] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2753'.
[  285.872313][T12818] loop3: detected capacity change from 0 to 32768
[  285.875795][T12818] (syz.3.2759,12818,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  285.880834][T12818] (syz.3.2759,12818,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  285.890108][T12818] JBD2: Ignoring recovery information on journal
[  285.912921][T12818] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  285.968424][ T7149] ocfs2: Unmounting device (7,3) on (node local)
[  286.673642][T12875] bond_slave_0: entered promiscuous mode
[  286.676426][T12875] bond_slave_1: entered promiscuous mode
[  286.680200][T12875] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  286.684978][T12875] bond_slave_0: left promiscuous mode
[  286.687387][T12875] bond_slave_1: left promiscuous mode
[  287.061678][T12893] pimreg: tun_chr_ioctl cmd 2147767506
[  287.165219][T12896] loop3: detected capacity change from 0 to 256
[  287.205981][T12896] FAT-fs (loop3): Directory bread(block 64) failed
[  287.209660][T12896] FAT-fs (loop3): Directory bread(block 65) failed
[  287.212512][T12896] FAT-fs (loop3): Directory bread(block 66) failed
[  287.215346][T12896] FAT-fs (loop3): Directory bread(block 67) failed
[  287.218223][T12896] FAT-fs (loop3): Directory bread(block 68) failed
[  287.220893][T12896] FAT-fs (loop3): Directory bread(block 69) failed
[  287.223846][T12896] FAT-fs (loop3): Directory bread(block 70) failed
[  287.229111][T12896] FAT-fs (loop3): Directory bread(block 71) failed
[  287.232144][T12896] FAT-fs (loop3): Directory bread(block 72) failed
[  287.234960][T12896] FAT-fs (loop3): Directory bread(block 73) failed
[  287.253215][T12896] syz.3.2792: attempt to access beyond end of device
[  287.253215][T12896] loop3: rw=524288, sector=1160, nr_sectors = 4 limit=256
[  287.261607][T12896] syz.3.2792: attempt to access beyond end of device
[  287.261607][T12896] loop3: rw=0, sector=1160, nr_sectors = 4 limit=256
[  287.267964][   T35] audit: type=1800 audit(2000000180.027:97): pid=12896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2792" name="file0" dev="loop3" ino=1048664 res=0 errno=0
[  287.327845][T12898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2793'.
[  287.625051][T12905] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  288.529654][T12929] loop3: detected capacity change from 0 to 32768
[  288.555032][T12929] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  288.581866][T12929] XFS (loop3): Ending clean mount
[  288.628625][ T7149] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  288.905929][T12974] xt_HMARK: spi-set and port-set can't be combined
[  289.194127][T12988] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  289.915761][T13012] delete_channel: no stack
[  290.377498][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2834'.
[  290.383890][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2834'.
[  290.548462][T13034] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.630852][T13034] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.693007][T13034] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.797407][T13034] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.915674][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.927482][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.937188][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.944947][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.010541][ T5850] IPVS: starting estimator thread 0...
[  291.118345][T13045] IPVS: using max 38 ests per chain, 91200 per kthread
[  291.246849][T13055] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  293.703362][T13103] Cannot find del_set index 4 as target
[  294.064995][T13113] syz_tun: tun_net_xmit 42
[  294.086651][ T5850] kernel write not supported for file /snd/seq (pid: 5850 comm: kworker/1:3)
[  295.031875][T13148] loop3: detected capacity change from 0 to 512
[  295.035079][T13148] EXT4-fs: Ignoring removed bh option
[  295.042167][T13148] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  295.052990][T13148] EXT4-fs (loop3): 1 truncate cleaned up
[  295.058192][T13148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.082614][T13148] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2887: invalid indirect mapped block 4294967295 (level 1)
[  295.097630][    C0] syz_tun: tun_net_xmit 42
[  295.130308][ T7149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.174499][T13152] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2888'.
[  295.178762][T13152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2888'.
[  295.182425][T13152] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2888'.
[  295.323191][T13157] loop3: detected capacity change from 0 to 1024
[  295.514422][ T5815] Bluetooth: hci1: unexpected event for opcode 0x200b
[  296.136429][    C0] syz_tun: tun_net_xmit 42
[  296.436777][ T1091] hfsplus: b-tree write err: -5, ino 4
[  296.519006][T13180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.532867][T13180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.325515][T13224] IPVS: wlc: TCP [::]:0 - no destination available
[  299.043408][T13250] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2931'.
[  299.088671][T13253] loop3: detected capacity change from 0 to 1024
[  299.578859][ T5815] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  299.581710][ T5815] Bluetooth: hci1: Injecting HCI hardware error event
[  299.585591][   T57] Bluetooth: hci1: hardware error 0x00
[  299.742406][T13269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2940'.
[  299.982262][T13274] netlink: 'syz.3.2942': attribute type 2 has an invalid length.
[  300.301684][T13300] fuse: Invalid rootmode
[  300.643223][T13313] loop3: detected capacity change from 0 to 512
[  300.667700][T13313] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  300.692680][T13313] EXT4-fs (loop3): 1 truncate cleaned up
[  300.698497][T13313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.790745][ T5815] Bluetooth: hci1: Malformed LE Event: 0x1b
[  300.872731][ T7149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.657346][   T57] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  302.221477][   T35] audit: type=1326 audit(2000000009.060:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.2.2997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  302.253664][   T35] audit: type=1326 audit(2000000009.060:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.2.2997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  302.336118][   T35] audit: type=1326 audit(2000000009.170:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.2.2997" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  302.350957][   T35] audit: type=1326 audit(2000000009.180:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.2.2997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  302.368977][T13411] loop3: detected capacity change from 0 to 8
[  302.374808][   T35] audit: type=1326 audit(2000000009.180:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13400 comm="syz.2.2997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  302.472214][T13421] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3007'.
[  303.616181][T13454] netlink: 'syz.4.3022': attribute type 4 has an invalid length.
[  303.800527][T13475] loop3: detected capacity change from 0 to 128
[  303.816011][T13475] EXT4-fs (loop3): Test dummy encryption mode enabled
[  303.844625][T13475] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  303.849274][T13475] ext4 filesystem being mounted at /815/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  303.877206][ T7149] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  304.612922][   T35] audit: type=1804 audit(2000000011.450:103): pid=13474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3031" name="file0" dev="tmpfs" ino=5460 res=1 errno=0
[  305.913944][T13540] loop3: detected capacity change from 0 to 512
[  305.924538][T13540] EXT4-fs: Ignoring removed oldalloc option
[  305.954670][T13540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.963519][T13540] ext4 filesystem being mounted at /826/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  306.006997][T13540] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3060: bg 0: block 217: padding at end of block bitmap is not set
[  306.017916][T13540] EXT4-fs (loop3): Remounting filesystem read-only
[  306.054315][ T7149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.074454][ T1233] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  306.080027][ T1233] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  306.089563][T13546] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3062'.
[  306.097272][T13546] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3062'.
[  306.224154][T13552] loop3: detected capacity change from 0 to 1024
[  306.289364][ T4500] hfsplus: b-tree write err: -5, ino 4
[  306.726706][ T5852] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  306.896526][ T5852] usb 4-1: Using ep0 maxpacket: 16
[  306.900736][ T5852] usb 4-1: config index 0 descriptor too short (expected 32970, got 202)
[  306.904593][ T5852] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  306.909812][ T5852] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  306.919642][ T5852] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  306.923403][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.927486][ T5852] usb 4-1: Product: syz
[  306.929456][ T5852] usb 4-1: Manufacturer: syz
[  306.931369][ T5852] usb 4-1: SerialNumber: syz
[  307.185836][ T5852] usb 4-1: USB disconnect, device number 29
[  307.249008][T13241] udevd[13241]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  307.779378][T13649] 9p: Unknown Cache mode or invalid value m
[  308.327608][ T5850] syz_tun: tun_net_xmit 106
[  308.664133][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3092'.
[  308.898187][ T5850] syz_tun: tun_net_xmit 106
[  309.543115][T13695] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  310.073314][T13716] loop3: detected capacity change from 0 to 4096
[  310.086960][T13716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.135773][ T7149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.194174][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3111'.
[  310.207304][T13720] [: entered promiscuous mode
[  310.371537][T13728] loop3: detected capacity change from 0 to 128
[  310.391185][T13728] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  310.444031][T13638] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  310.492877][T13730] syz.3.3116 (13730): /proc/13729/oom_adj is deprecated, please use /proc/13729/oom_score_adj instead.
[  311.130579][T13774] Invalid ELF header magic: != ELF
[  311.336515][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  312.136147][T13815] overlayfs: missing 'lowerdir'
[  312.333718][T13821] loop3: detected capacity change from 0 to 512
[  312.342552][T13821] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  312.369745][T13821] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  312.381206][T13821] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3157: bg 0: block 248: padding at end of block bitmap is not set
[  312.390971][T13821] Quota error (device loop3): write_blk: dquota write failed
[  312.394343][T13821] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  312.399756][T13821] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3157: Failed to acquire dquot type 1
[  312.415481][T13821] EXT4-fs (loop3): 1 truncate cleaned up
[  312.420353][T13821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  312.434279][   T35] audit: type=1800 audit(2000000147.276:104): pid=13821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3157" name="file1" dev="loop3" ino=15 res=0 errno=0
[  312.445972][T13821] EXT4-fs (loop3): shut down requested (1)
[  312.475097][ T7149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  312.482017][   T27] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5
[  312.867169][ T5852] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[  313.022556][ T5852] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  313.027857][ T5852] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  313.033999][ T5852] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  313.038265][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.041405][ T5852] usb 4-1: Product: syz
[  313.046395][ T5852] usb 4-1: Manufacturer: syz
[  313.048888][ T5852] usb 4-1: SerialNumber: syz
[  313.465851][ T5852] usb 4-1: cannot find UAC_HEADER
[  313.503575][ T5852] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  313.513652][ T5852] usb 4-1: USB disconnect, device number 30
[  313.532590][T13241] udevd[13241]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  313.784370][T13880] Invalid ELF header magic: != ELF
[  313.899429][T13890] overlayfs: failed to clone upperpath
[  314.033536][T13902] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3196'.
[  314.463060][T13935] netlink: 'syz.3.3211': attribute type 3 has an invalid length.
[  314.467404][T13935] netlink: 'syz.3.3211': attribute type 1 has an invalid length.
[  314.499271][T13937] netlink: 'syz.3.3212': attribute type 1 has an invalid length.
[  314.501854][T13937] netlink: 'syz.3.3212': attribute type 2 has an invalid length.
[  314.505675][T13937] netlink: 'syz.3.3212': attribute type 1 has an invalid length.
[  314.508861][T13937] netlink: 'syz.3.3212': attribute type 2 has an invalid length.
[  314.542219][T13942] x_tables: ip6_tables: mh match: only valid for protocol 135
[  314.791648][T13958] loop3: detected capacity change from 0 to 1024
[  314.809853][T13958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.842066][ T7149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.913639][T13970] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  315.006940][T13981] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.3232'.
[  315.040334][T13984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3233'.
[  315.046984][T13984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3233'.
[  315.195037][T14000] "syz.4.3241" (14000) uses obsolete ecb(arc4) skcipher
[  315.314698][T14022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  316.608900][   T35] audit: type=1326 audit(2000000151.456:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.4.3273" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921938f7c9 code=0x7ffc0000
[  316.617774][   T35] audit: type=1326 audit(2000000151.456:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.4.3273" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921938f7c9 code=0x7ffc0000
[  316.625490][   T35] audit: type=1326 audit(2000000151.466:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.4.3273" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f921938f7c9 code=0x7ffc0000
[  316.635457][   T35] audit: type=1326 audit(2000000151.466:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.4.3273" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921938f7c9 code=0x7ffc0000
[  316.706450][ T5850] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[  316.869548][ T5850] usb 4-1: not running at top speed; connect to a high speed hub
[  316.874156][ T5850] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  316.878531][ T5850] usb 4-1: config 1 has no interface number 1
[  316.886746][ T5850] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  316.896680][ T5850] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  316.902797][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.905955][ T5850] usb 4-1: Product: syz
[  316.907985][ T5850] usb 4-1: Manufacturer: syz
[  316.910218][ T5850] usb 4-1: SerialNumber: syz
[  317.102205][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  317.127920][ T5850] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  317.136723][ T5850] usb 4-1: failed to enable PITCH for EP 0x82
[  317.156520][ T5850] usb 4-1: USB disconnect, device number 31
[  317.184746][T13287] udevd[13287]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  317.344791][   T35] audit: type=1326 audit(2000000152.186:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14096 comm="syz.2.3283" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  317.360969][   T35] audit: type=1326 audit(2000000152.186:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14096 comm="syz.2.3283" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  318.101827][T14117] loop3: detected capacity change from 0 to 4096
[  318.704481][T14156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3309'.
[  319.217707][T14198] xt_socket: unknown flags 0x24
[  321.348683][T14196] Set syz1 is full, maxelem 65536 reached
[  322.024525][T14268] loop3: detected capacity change from 0 to 32768
[  322.043385][T14268] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  322.062936][T14268] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  322.074019][   T13] (kworker/u8:1,13,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  322.109278][ T7149] ocfs2: Unmounting device (7,3) on (node local)
[  322.664847][ T5850] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  322.906541][ T5850] usb 4-1: Using ep0 maxpacket: 8
[  322.942892][ T5850] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  322.974396][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.977346][ T5850] usb 4-1: Product: syz
[  322.981693][ T5850] usb 4-1: Manufacturer: syz
[  322.983239][ T5850] usb 4-1: SerialNumber: syz
[  323.010182][ T5850] usb 4-1: config 0 descriptor??
[  323.210897][T14297] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3371'.
[  323.351904][ T5850] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  324.155862][ T5850] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  324.164865][ T5850] usb 4-1: USB disconnect, device number 32
[  324.799277][T14318] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3379'.
[  324.928045][T14324] loop3: detected capacity change from 0 to 1024
[  324.932724][T14324] EXT4-fs: Ignoring removed orlov option
[  324.959005][T14324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.995840][ T7149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.020474][T14329] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3383'.
[  325.654689][T14348] syz_tun: tun_net_xmit 42
[  325.911330][T14352] openvswitch: netlink: IP tunnel dst address not specified
[  326.696464][    C1] syz_tun: tun_net_xmit 42
[  326.852415][T14372] tipc: Started in network mode
[  326.854047][T14372] tipc: Node identity 4, cluster identity 64
[  326.855985][T14372] tipc: Node number set to 4
[  327.071204][T14374] IPVS: stopping backup sync thread 12165 ...
[  327.746389][    C1] syz_tun: tun_net_xmit 42
[  328.329718][T14430] loop3: detected capacity change from 0 to 128
[  328.846223][T14440] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3430'.
[  329.497217][T14475] loop3: detected capacity change from 0 to 4096
[  329.784956][T14481] loop3: detected capacity change from 0 to 32768
[  329.807439][T14481] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  329.815955][T14481] XFS (loop3): Fixing up incorrect CRC due to padding.
[  329.818984][T14481] XFS (loop3): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50.
[  329.823811][T14481] XFS (loop3): failed to locate log tail
[  329.826036][T14481] XFS (loop3): log mount/recovery failed: error -74
[  329.831668][T14481] XFS (loop3): log mount failed
[  329.939199][T14501] loop3: detected capacity change from 0 to 1024
[  329.946182][T14501] hfsplus: request for non-existent node 127 in B*Tree
[  329.950803][T14501] hfsplus: request for non-existent node 127 in B*Tree
[  330.044955][T14507] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[  330.226495][T14521] loop3: detected capacity change from 0 to 1024
[  330.229615][T14521] EXT4-fs: Ignoring removed bh option
[  330.231791][T14521] EXT4-fs: inline encryption not supported
[  330.234763][T14521] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  330.242554][T14521] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0001]
[  330.248022][T14521] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.3465: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  330.254278][T14521] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3465: couldn't read orphan inode 11 (err -117)
[  330.259987][T14521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.278120][ T7149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.326959][T14525] loop3: detected capacity change from 0 to 1024
[  330.342725][T14525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.376550][ T7149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.292877][T14543] Cannot find add_set index 128 as target
[  331.551032][T14544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3473'.
[  331.602552][T14544] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  331.611031][T14544] bond1 (unregistering): Released all slaves
[  333.011417][T14564] loop3: detected capacity change from 0 to 65536
[  333.056622][T14564] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  333.084174][T14564] XFS (loop3): Ending clean mount
[  333.087261][T14564] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  333.495013][T14557] loop3: detected capacity change from 0 to 4096
[  333.515356][T14557] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  333.534586][T14557] ntfs3(loop3): Failed to load $Extend (-22).
[  333.538615][T14557] ntfs3(loop3): Failed to initialize $Extend.
[  333.882978][T14605] loop3: detected capacity change from 0 to 512
[  333.889020][T14607] xt_hashlimit: overflow, rate too high: 0
[  333.899636][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3497'.
[  333.911484][T14605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  333.915417][T14605] ext4 filesystem being mounted at /948/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  333.984803][T14619] netlink: 'syz.4.3500': attribute type 10 has an invalid length.
[  333.985915][ T7149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.027636][T14619] macvlan0: entered promiscuous mode
[  334.044339][T14619] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  334.209765][T14639] loop3: detected capacity change from 0 to 512
[  334.218779][T14639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  334.263606][T14639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.271258][T14639] ext4 filesystem being mounted at /952/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  335.093029][ T7149] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.184913][   T35] kauditd_printk_skb: 3 callbacks suppressed
[  335.184929][   T35] audit: type=1804 audit(2000000170.026:114): pid=14661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3517" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=35025 res=1 errno=0
[  335.202678][   T35] audit: type=1804 audit(2000000170.046:115): pid=14661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3517" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=35025 res=1 errno=0
[  335.813001][T14674] loop3: detected capacity change from 0 to 512
[  335.847520][T14674] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3523: inode has both inline data and extents flags
[  335.857154][T14674] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3523: couldn't read orphan inode 15 (err -117)
[  335.873973][T14674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  335.884072][T14674] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.312471][   T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.358029][   T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.411367][   T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.475458][   T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.577285][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  336.585557][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  336.590035][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  336.594127][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  336.601252][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  336.645897][   T12] bridge_slave_1: left allmulticast mode
[  336.649142][   T12] bridge_slave_1: left promiscuous mode
[  336.651577][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.671142][   T12] bridge_slave_0: left allmulticast mode
[  336.673595][   T12] bridge_slave_0: left promiscuous mode
[  336.676155][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.698788][   T12] tipc: Resetting bearer <eth:xfrm0>
[  336.938465][   T12] tipc: Disabling bearer <eth:xfrm0>
[  337.215530][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  337.221600][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  337.225580][   T12] bond0 (unregistering): Released all slaves
[  337.231587][   T12] bond1 (unregistering): Released all slaves
[  337.302424][   T12] [: left promiscuous mode
[  337.381959][   T12] tipc: Left network mode
[  337.631157][   T12] hsr_slave_0: left promiscuous mode
[  337.635227][   T12] hsr_slave_1: left promiscuous mode
[  337.640381][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  337.643229][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  337.652954][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  337.656024][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  337.679642][   T12] veth1_macvtap: left promiscuous mode
[  337.682462][   T12] veth0_macvtap: left promiscuous mode
[  337.685257][   T12] veth1_vlan: left promiscuous mode
[  337.687945][   T12] veth0_vlan: left promiscuous mode
[  337.783209][T14733] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3543'.
[  338.521485][   T12] team0 (unregistering): Port device team_slave_1 removed
[  338.705294][ T5815] Bluetooth: hci0: command tx timeout
[  339.400341][T14687] chnl_net:caif_netlink_parms(): no params data found
[  339.521923][T14753] netlink: 'syz.2.3550': attribute type 2 has an invalid length.
[  339.585102][T14687] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.593028][T14687] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.595327][T14687] bridge_slave_0: entered allmulticast mode
[  339.598309][T14687] bridge_slave_0: entered promiscuous mode
[  339.601657][T14687] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.604148][T14687] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.686437][T14687] bridge_slave_1: entered allmulticast mode
[  339.690095][T14687] bridge_slave_1: entered promiscuous mode
[  339.709715][T14687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  339.718020][T14687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.738369][T14687] team0: Port device team_slave_0 added
[  339.742318][T14687] team0: Port device team_slave_1 added
[  339.759373][T14687] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.761668][T14687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  340.064300][T14687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  340.071528][T14687] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.074562][T14687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  340.086255][T14687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.127370][T14687] hsr_slave_0: entered promiscuous mode
[  340.130240][T14687] hsr_slave_1: entered promiscuous mode
[  340.132446][T14687] debugfs: 'hsr0' already exists in 'hsr'
[  340.134298][T14687] Cannot create hsr debugfs directory
[  340.143400][   T12] IPVS: stop unused estimator thread 0...
[  340.370662][T14687] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  340.382907][T14687] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  340.412162][T14687] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  340.428704][T14687] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  340.560243][T14787] netlink: 'syz.2.3556': attribute type 1 has an invalid length.
[  340.563075][T14787] netlink: 'syz.2.3556': attribute type 2 has an invalid length.
[  340.709610][T14687] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.738937][T14687] 8021q: adding VLAN 0 to HW filter on device team0
[  340.762525][T13635] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.765893][T13635] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.778845][ T5815] Bluetooth: hci0: command tx timeout
[  340.785442][T13635] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.788923][T13635] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.006047][T14806] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3561'.
[  341.015057][T14687] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.263801][T14687] veth0_vlan: entered promiscuous mode
[  341.281673][T14687] veth1_vlan: entered promiscuous mode
[  341.369969][T14687] veth0_macvtap: entered promiscuous mode
[  341.376200][T14687] veth1_macvtap: entered promiscuous mode
[  341.391186][T14687] batman_adv: batadv0: Interface activated: batadv_slave_0
[  341.735435][T14687] batman_adv: batadv0: Interface activated: batadv_slave_1
[  341.746837][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  341.750437][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  341.753907][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  341.772187][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.852283][T13635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.855389][T13635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.887978][T13640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.891968][T13640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.743428][T14861] xt_connbytes: Forcing CT accounting to be enabled
[  342.745870][T14861] set match dimension is over the limit!
[  342.866886][ T5815] Bluetooth: hci0: command tx timeout
[  343.427217][T14868] fuse: Bad value for 'group_id'
[  343.428929][T14868] fuse: Bad value for 'group_id'
[  343.443003][T14868] loop5: detected capacity change from 0 to 128
[  343.448355][T14868] vfat: Unknown parameter 'nonum'
[  343.831068][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3586'.
[  344.193834][T14901] loop5: detected capacity change from 0 to 256
[  344.198885][T14901] exfat: Deprecated parameter 'utf8'
[  344.200655][T14901] exfat: Deprecated parameter 'namecase'
[  344.222232][T14901] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc465a08c, utbl_chksum : 0xe619d30d)
[  344.241967][T14901] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3597'.
[  344.901342][T14916] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3603'.
[  344.905598][T14916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3603'.
[  344.936555][ T5815] Bluetooth: hci0: command tx timeout
[  344.990657][T14924] x_tables: duplicate underflow at hook 3
[  345.018002][T14926] futex_wake_op: syz.4.3608 tries to shift op by 32; fix this program
[  345.100183][T14936] loop5: detected capacity change from 0 to 256
[  345.105413][T14936] exfat: Deprecated parameter 'namecase'
[  345.109413][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3611'.
[  345.124923][T14936] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  345.161611][T14936] exFAT-fs (loop5): IO charset maccroati not found
[  345.351126][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3619'.
[  347.057554][T15009] overlayfs: failed to resolve './file2': -2
[  347.242006][T15017] loop5: detected capacity change from 0 to 2048
[  347.259141][T15017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  347.300513][T15017] overlayfs: upper fs needs to support d_type.
[  347.316912][T15017] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  347.319563][T15017] overlayfs: failed to set xattr on upper
[  347.322094][T15017] overlayfs: ...falling back to redirect_dir=nofollow.
[  347.324757][T15017] overlayfs: ...falling back to index=off.
[  347.393334][T15021] netlink: 'syz.4.3648': attribute type 21 has an invalid length.
[  347.722103][T15048] loop5: detected capacity change from 0 to 8
[  347.736091][T15048] SQUASHFS error: xz decompression failed, data probably corrupt
[  347.743765][T15048] SQUASHFS error: Failed to read block 0x108: -5
[  347.746003][T15048] SQUASHFS error: Unable to read metadata cache entry [106]
[  347.748442][T15048] SQUASHFS error: Unable to read inode 0x11f
[  348.112743][T15064] netlink: 'syz.4.3664': attribute type 39 has an invalid length.
[  348.355087][T15068] netlink: 'syz.4.3666': attribute type 1 has an invalid length.
[  348.357997][T15068] netlink: 'syz.4.3666': attribute type 4 has an invalid length.
[  348.360397][T15068] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3666'.
[  348.364062][T15068] netlink: 'syz.4.3666': attribute type 1 has an invalid length.
[  348.366540][T15068] netlink: 'syz.4.3666': attribute type 4 has an invalid length.
[  348.368894][T15068] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3666'.
[  349.649187][T15109] netlink: 'syz.4.3684': attribute type 1 has an invalid length.
[  349.661887][T15109] netlink: 'syz.4.3684': attribute type 4 has an invalid length.
[  349.667056][T15109] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.3684'.
[  350.034500][T15144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  350.040899][T15144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  350.044267][T15144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  350.048252][T15144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  350.051374][T15144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  350.054371][T15144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  350.059773][T15144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  350.062899][T15144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  350.065917][T15144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  350.069287][T15144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  350.891835][T15160] : entered promiscuous mode
[  351.012317][T15173] loop5: detected capacity change from 0 to 512
[  351.027078][T15173] EXT4-fs: Ignoring removed nomblk_io_submit option
[  351.029551][T15173] EXT4-fs: Ignoring removed i_version option
[  351.078180][T15173] EXT4-fs (loop5): 1 orphan inode deleted
[  351.081867][T15173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  351.115606][T14687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.329648][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3725'.
[  351.652235][T15232] tmpfs: Bad value for 'mpol'
[  351.711562][T15238] loop5: detected capacity change from 0 to 128
[  351.720833][T15238] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  351.731133][T15238] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  351.756931][T14687] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  353.481138][   T35] audit: type=1326 audit(2000000188.326:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.2.3764" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe67238f7c9 code=0x0
[  353.678913][T15335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3771'.
[  354.042449][T15360] loop5: detected capacity change from 0 to 4096
[  354.047323][T15360] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  354.061222][T15360] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  354.190697][T15366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3786'.
[  354.193709][T15366] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3786'.
[  354.197012][T15366] netlink: 'syz.5.3786': attribute type 1 has an invalid length.
[  354.200325][T15366] netlink: 'syz.5.3786': attribute type 1 has an invalid length.
[  354.203351][T15366] netlink: 'syz.5.3786': attribute type 1 has an invalid length.
[  354.558607][T15390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3797'.
[  355.407918][   T24] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  355.580676][   T24] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice= 1.64
[  355.595051][   T24] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  355.597457][   T24] usb 6-1: Product: syz
[  355.598786][   T24] usb 6-1: SerialNumber: syz
[  355.605418][   T24] usb 6-1: config 0 descriptor??
[  355.611507][   T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  355.640367][   T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  355.654726][   T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  356.180352][T15425] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3811'.
[  356.223961][T15427] syz_tun: tun_net_xmit 42
[  357.256435][    C1] syz_tun: tun_net_xmit 42
[  357.579263][   T24] usb 6-1: USB disconnect, device number 2
[  357.658471][T15445] netlink: 'syz.5.3819': attribute type 8 has an invalid length.
[  357.931869][T15453] tmpfs: Unknown parameter '01777777777777777777777'
[  358.306498][    C1] syz_tun: tun_net_xmit 42
[  359.465408][T15472] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3830'.
[  359.469075][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3830'.
[  359.841259][T15495] netlink: 'syz.5.3841': attribute type 1 has an invalid length.
[  359.844951][T15495] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3841'.
[  360.038888][T15500] loop5: detected capacity change from 0 to 32768
[  360.045832][T15500] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3842 (15500)
[  360.059163][T15500] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  360.062783][T15500] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  360.299479][   T35] audit: type=1326 audit(2000000195.006:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.2.3848" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  360.423503][   T35] audit: type=1326 audit(2000000195.006:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.2.3848" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  360.426719][T15500] BTRFS info (device loop5): enabling ssd optimizations
[  360.433117][   T35] audit: type=1326 audit(2000000195.016:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.2.3848" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  360.438416][T15500] BTRFS info (device loop5): turning on async discard
[  360.441191][   T35] audit: type=1326 audit(2000000195.016:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.2.3848" exe="/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  360.451126][   T35] audit: type=1326 audit(2000000195.016:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.2.3848" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  360.452828][T15500] BTRFS info (device loop5): enabling free space tree
[  360.459348][   T35] audit: type=1326 audit(2000000195.016:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.2.3848" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  360.471791][   T35] audit: type=1326 audit(2000000195.036:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.2.3848" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  360.479242][   T35] audit: type=1326 audit(2000000195.046:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.2.3848" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  360.486093][   T35] audit: type=1326 audit(2000000195.046:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.2.3848" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  360.493050][   T35] audit: type=1326 audit(2000000195.056:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15508 comm="syz.2.3848" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe67238f7c9 code=0x7ffc0000
[  360.545266][T14687] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  360.591976][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3850'.
[  360.924142][T15539] loop5: detected capacity change from 0 to 1024
[  360.943272][T15539] hfsplus: unable to find HFS+ superblock
[  361.065474][T15551] futex_wake_op: syz.4.3860 tries to shift op by -1; fix this program
[  361.165875][T15557] Bluetooth: MGMT ver 1.23
[  361.171149][T15557] loop5: detected capacity change from 0 to 256
[  361.192228][T15557] FAT-fs (loop5): bogus sectors per cluster 0
[  361.207896][T15557] FAT-fs (loop5): Can't find a valid FAT filesystem
[  361.513017][T15576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3871'.
[  361.854276][T15585] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3876'.
[  362.043944][T15592] geneve2: entered promiscuous mode
[  362.759790][T15599] loop5: detected capacity change from 0 to 1764
[  363.652031][T15611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  363.895814][T15636] netlink: 'syz.2.3900': attribute type 29 has an invalid length.
[  363.903793][T15636] netlink: 'syz.2.3900': attribute type 29 has an invalid length.
[  363.914606][T15636] netlink: 508 bytes leftover after parsing attributes in process `syz.2.3900'.
[  364.274058][T15660] loop5: detected capacity change from 0 to 1024
[  364.277653][T15660] EXT4-fs: Ignoring removed bh option
[  364.283590][T15660] EXT4-fs: inline encryption not supported
[  364.292922][T15660] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  364.298139][T15660] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  364.320650][T15660] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.3910: lblock 2 mapped to illegal pblock 2 (length 1)
[  364.336184][T15660] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.3910: lblock 0 mapped to illegal pblock 48 (length 1)
[  364.342519][T15660] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3910: Failed to acquire dquot type 0
[  364.348702][T15660] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  364.352698][T15660] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.3910: mark_inode_dirty error
[  364.357209][T15660] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  364.360397][T15660] EXT4-fs (loop5): 1 orphan inode deleted
[  364.364122][T15660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.369393][T13642] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:10: lblock 1 mapped to illegal pblock 1 (length 1)
[  364.380043][T13642] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u9:10: Failed to release dquot type 0
[  364.388229][T15660] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.3910: Invalid inode table block 1 in block_group 0
[  364.394254][T15660] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  364.423954][T14687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.430238][T13642] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:10: lblock 1 mapped to illegal pblock 1 (length 1)
[  364.436795][T13642] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u9:10: Failed to release dquot type 0
[  364.445815][T14687] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  364.454068][T14687] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  364.460420][T14687] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  364.773643][T15674] loop5: detected capacity change from 0 to 32768
[  364.800901][T15674] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  366.161652][T14687] ocfs2: Unmounting device (7,5) on (node local)
[  366.258258][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3928'.
[  366.261428][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3928'.
[  366.445199][T15707] loop5: detected capacity change from 0 to 32768
[  366.475809][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'.
[  366.483460][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'.
[  366.497187][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'.
[  366.501371][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'.
[  366.509910][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'.
[  366.515172][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'.
[  366.543189][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'.
[  366.551713][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'.
[  366.599478][T15717] xt_TCPMSS: Only works on TCP SYN packets
[  366.976495][ T7167] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  367.136437][ T7167] usb 6-1: Using ep0 maxpacket: 16
[  367.140361][ T7167] usb 6-1: config 0 has an invalid interface number: 102 but max is 0
[  367.143684][ T7167] usb 6-1: config 0 has no interface number 0
[  367.148725][ T7167] usb 6-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=53.54
[  367.152547][ T7167] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.156262][ T7167] usb 6-1: Product: syz
[  367.158412][ T7167] usb 6-1: Manufacturer: syz
[  367.160402][ T7167] usb 6-1: SerialNumber: syz
[  367.164434][ T7167] usb 6-1: config 0 descriptor??
[  367.371289][ T7167] snd-usb-audio 6-1:0.102: probe with driver snd-usb-audio failed with error -71
[  367.377211][ T7167] usb 6-1: USB disconnect, device number 3
[  368.149975][T15755] syzkaller0: entered promiscuous mode
[  368.152291][T15755] syzkaller0: entered allmulticast mode
[  368.265402][T15757] loop5: detected capacity change from 0 to 1024
[  368.419331][T15767] loop5: detected capacity change from 0 to 8
[  368.429981][T15767] squashfs image failed sanity check
[  368.536952][T15775] 9pnet_fd: Insufficient options for proto=fd
[  369.141383][T15781] loop5: detected capacity change from 0 to 40427
[  369.150434][T15781] F2FS-fs (loop5): build fault injection rate: 771
[  369.157894][T15781] F2FS-fs (loop5): invalid crc value
[  369.184566][T15781] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  369.188046][T15781] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  369.203602][T15781] syz.5.3964: attempt to access beyond end of device
[  369.203602][T15781] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  369.757212][ T7167] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  369.908215][ T7167] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  369.912627][ T7167] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  369.916099][ T7167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.924724][ T7167] gspca_main: stv0680-2.14.0 probing 041e:4007
[  370.128811][T15828] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  370.765503][   T35] kauditd_printk_skb: 18 callbacks suppressed
[  370.765519][   T35] audit: type=1326 audit(2000000205.606:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.4.3988" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921938f7c9 code=0x7ffc0000
[  370.786644][   T35] audit: type=1326 audit(2000000205.626:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.4.3988" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f921938f7c9 code=0x7ffc0000
[  370.795543][   T35] audit: type=1326 audit(2000000205.626:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.4.3988" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f921938f803 code=0x7ffc0000
[  370.810392][   T35] audit: type=1326 audit(2000000205.626:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.4.3988" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f921938e27f code=0x7ffc0000
[  370.826428][   T35] audit: type=1326 audit(2000000205.636:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.4.3988" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f921938f857 code=0x7ffc0000
[  370.836454][   T35] audit: type=1326 audit(2000000205.636:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.4.3988" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f921938e010 code=0x7ffc0000
[  370.846629][   T35] audit: type=1326 audit(2000000205.636:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.4.3988" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f921938e42a code=0x7ffc0000
[  370.855038][   T35] audit: type=1326 audit(2000000205.636:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.4.3988" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921938f7c9 code=0x7ffc0000
[  370.866111][   T35] audit: type=1326 audit(2000000205.636:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15836 comm="syz.4.3988" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921938f7c9 code=0x7ffc0000
[  370.937500][ T7167] stv0680 6-1:4.0: STV(e): camera ping failed!!
[  371.089005][T15850] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  371.138307][ T7167] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  371.143168][ T7167] stv0680 6-1:4.0: last error: 0,  command = 0x0
[  371.148302][ T7167] usb 6-1: USB disconnect, device number 4
[  371.483434][T15870] net_ratelimit: 15934 callbacks suppressed
[  371.483454][T15870] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  371.588063][T15876] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  371.591313][T15876] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  371.595273][T15876] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  371.735314][T15882] loop5: detected capacity change from 0 to 2048
[  371.744254][   T35] audit: type=1326 audit(2000000206.586:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15883 comm="syz.4.4012" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921938f7c9 code=0x7ffc0000
[  371.781100][T15882] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c01c, mo2=0002]
[  371.784248][T15882] System zones: 0-7
[  371.787866][T15882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  371.819733][T15882] EXT4-fs error (device loop5): ext4_lookup:1787: inode #16: comm syz.5.4010: iget: bad i_size value: 8796093031208
[  371.863696][T14687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  372.122579][T15909] MTD: Couldn't look up '/dev/nullb0': -15
[  372.400818][T15916] syz_tun: tun_net_xmit 86
[  373.416595][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  373.416666][    C1] syz_tun: tun_net_xmit 86
[  373.433117][T15931] sctp: [Deprecated]: syz.4.4031 (pid 15931) Use of int in maxseg socket option.
[  373.433117][T15931] Use struct sctp_assoc_value instead
[  373.488206][ T7167] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  373.769618][ T7167] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  373.773147][ T7167] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  373.777234][ T7167] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  373.780234][ T7167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.994776][ T7167] usb 6-1: usb_control_msg returned -32
[  373.996947][ T7167] usbtmc 6-1:16.0: can't read capabilities
[  374.126825][T15978] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  374.358151][T15984] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  374.456515][    C1] syz_tun: tun_net_xmit 86
[  374.599507][ T7167] usb 6-1: USB disconnect, device number 5
[  375.528138][T16020] loop5: detected capacity change from 0 to 1024
[  375.559774][T16020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  375.568532][T16020] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  375.640140][T14687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  375.774871][T16032] xt_cgroup: xt_cgroup: no path or classid specified
[  375.836020][T16036] loop5: detected capacity change from 0 to 1024
[  375.841744][T16036] EXT4-fs: Ignoring removed bh option
[  375.877378][T16036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  375.909634][T16036] EXT4-fs error (device loop5): ext4_get_first_dir_block:3540: inode #11: comm syz.5.4078: directory missing '.'
[  375.924861][T16036] EXT4-fs (loop5): Remounting filesystem read-only
[  375.937378][T16042] netlink: 'syz.2.4080': attribute type 1 has an invalid length.
[  375.968094][T14687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.994796][T16042] bond3: entered promiscuous mode
[  376.017515][T16042] 8021q: adding VLAN 0 to HW filter on device bond3
[  376.063794][T16044] 8021q: adding VLAN 0 to HW filter on device bond3
[  376.070915][T16044] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  376.074937][T16044] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  376.106995][T16044] bond3: (slave wireguard0): making interface the new active one
[  376.112398][T16044] wireguard0: entered promiscuous mode
[  376.127827][T16044] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[  376.342992][T16047] loop5: detected capacity change from 0 to 32768
[  376.349353][T16047] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4081 (16047)
[  376.359752][T16047] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  376.364124][T16047] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  376.449059][T16071] __nla_validate_parse: 11 callbacks suppressed
[  376.449074][T16071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4089'.
[  376.489586][T16047] BTRFS info (device loop5): enabling ssd optimizations
[  376.492533][T16047] BTRFS info (device loop5): turning on async discard
[  376.495029][T16047] BTRFS info (device loop5): enabling free space tree
[  376.586807][T14687] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  377.214701][T16108] loop5: detected capacity change from 0 to 32768
[  377.239630][T16108] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  377.470261][T16135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4115'.
[  377.473383][T14687] ocfs2: Unmounting device (7,5) on (node local)
[  377.473978][T16135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4115'.
[  377.546218][T16137] io-wq is not configured for unbound workers
[  377.583196][T16139] loop5: detected capacity change from 0 to 512
[  377.604347][T16139] EXT4-fs (loop5): orphan cleanup on readonly fs
[  377.610934][T16139] __quota_error: 13 callbacks suppressed
[  377.610944][T16139] Quota error (device loop5): v2_read_file_info: Block with free entry 2 out of range (1, 0).
[  377.618581][T16139] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  377.629091][T16139] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  377.631531][T16139] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #13: comm syz.5.4116: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  377.637817][T16139] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4116: couldn't read orphan inode 13 (err -117)
[  377.642765][T16139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0b00-0000-000000000000 ro without journal. Quota mode: writeback.
[  377.662182][T14687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0b00-0000-000000000000.
[  377.740513][T16148] loop5: detected capacity change from 0 to 256
[  377.751221][T16148] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  377.885108][T16154] loop5: detected capacity change from 0 to 2048
[  377.913787][T16154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.919996][T16154] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  377.946124][T14687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.060343][T16165] @: renamed from vlan0 (while UP)
[  378.438953][T16172] hub 2-0:1.0: USB hub found
[  378.443177][T16172] hub 2-0:1.0: 1 port detected
[  378.540070][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  379.025496][T16195] netlink: 'syz.2.4141': attribute type 1 has an invalid length.
[  379.176519][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4145'.
[  379.973710][T16228] loop5: detected capacity change from 0 to 1024
[  381.104951][T16270] loop5: detected capacity change from 0 to 512
[  381.135069][T16270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.143255][T16270] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  381.159301][T16270] EXT4-fs error (device loop5): ext4_add_entry:2417: inode #12: comm syz.5.4173: Directory hole found for htree leaf block 0
[  381.199747][T16270] EXT4-fs (loop5): Remounting filesystem read-only
[  381.387521][T14687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.391078][ T1089] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  381.394242][ T1089] Quota error (device loop5): write_blk: dquota write failed
[  381.396824][ T1089] Quota error (device loop5): free_dqentry: Can't write quota data block 5
[  381.746042][T16284] loop5: detected capacity change from 0 to 32768
[  381.759896][T16284] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  381.790971][T16284] XFS (loop5): Ending clean mount
[  381.845608][T16284] XFS (loop5): Quotacheck needed: Please wait.
[  381.887942][T16284] XFS (loop5): Quotacheck: Done.
[  381.955320][T14687] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  382.478959][T16315] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4188'.
[  382.662208][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4194'.
[  382.665766][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4194'.
[  383.104880][T16336] loop5: detected capacity change from 0 to 16
[  383.118264][T16336] erofs (device loop5): mounted with root inode @ nid 36.
[  383.125707][T16336] syz.5.4198: attempt to access beyond end of device
[  383.125707][T16336] loop5: rw=0, sector=48, nr_sectors = 16 limit=16
[  383.132688][T16336] erofs (device loop5): read error -5 @ 43 of nid 36
[  383.323542][T16349] tmpfs: Unknown parameter '3'
[  383.750464][T16363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4209'.
[  383.798134][T16336] syz.5.4198 (16336): drop_caches: 2
[  384.018161][T16377] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4213'.
[  384.076618][T16381] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  384.856754][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4223'.
[  385.361581][T16418] IPv6: addrconf: prefix option has invalid lifetime
[  385.532182][T16432] trusted_key: encrypted_key: insufficient parameters specified
[  385.944017][T16436] loop5: detected capacity change from 0 to 128
[  385.952742][T16436] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  385.958549][T16436] hpfs: filesystem error: improperly stopped
[  385.961433][T16436] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  385.964617][T16436] hpfs: You really don't want any checks? You are crazy...
[  385.969349][T16436] hpfs: hpfs_map_sector(): read error
[  385.971854][T16436] hpfs: code page support is disabled
[  385.979005][T16436] hpfs: hpfs_map_4sectors(): unaligned read
[  385.981520][T16436] hpfs: hpfs_map_4sectors(): unaligned read
[  385.984202][T16436] hpfs: filesystem error: unable to find root dir
[  385.993762][T16436] hpfs: hpfs_map_4sectors(): unaligned read
[  386.557998][T16452] x_tables: unsorted entry at hook 3
[  387.692576][   T35] audit: type=1326 audit(2000000222.536:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16480 comm="syz.5.4260" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f899178f7c9 code=0x0
[  387.901767][T16493] IPVS: ip_vs_edit_dest(): server weight less than zero
[  387.912613][ T5852] IPVS: starting estimator thread 0...
[  388.064095][T16495] IPVS: using max 80 ests per chain, 192000 per kthread
[  388.194700][T16501] loop5: detected capacity change from 0 to 32768
[  388.200742][T16501] btrfs: Deprecated parameter 'usebackuproot'
[  388.206615][T16501] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  388.228580][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802749bc00: rx timeout, send abort
[  388.233095][T16501] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4268 (16501)
[  388.256252][T16501] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  388.274333][T16501] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  388.370358][T16501] BTRFS info (device loop5): rebuilding free space tree
[  388.397194][T16501] BTRFS info (device loop5): allowing degraded mounts
[  388.402436][T16501] BTRFS info (device loop5): enabling ssd optimizations
[  388.411707][T16501] BTRFS info (device loop5): turning on flush-on-commit
[  388.418455][T16501] BTRFS info (device loop5): enabling free space tree
[  388.424782][T16501] BTRFS info (device loop5): force clearing of disk cache
[  388.431519][T16501] BTRFS info (device loop5): trying to use backup root at mount time
[  388.439251][T16501] BTRFS info (device loop5): use zstd compression, level 3
[  388.661053][T14687] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  388.744991][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802749b800: rx timeout, send abort
[  388.748176][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802749bc00: abort rx timeout. Force session deactivation
[  389.248147][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802749b800: abort rx timeout. Force session deactivation
[  389.907019][    C1] vcan0: j1939_tp_rxtimer: 0xffff888027498400: rx timeout, send abort
[  389.909814][    C1] vcan0: j1939_tp_rxtimer: 0xffff888027498000: rx timeout, send abort
[  389.912774][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888027498400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  389.917262][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888027498000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  390.922790][   T35] audit: type=1326 audit(2000000225.766:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.4.4295" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f921938f7c9 code=0x0
[  391.091790][T16566] loop5: detected capacity change from 0 to 32768
[  391.095611][T16566] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4293 (16566)
[  391.113224][T16566] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  391.118918][T16566] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  391.425428][T16566] BTRFS info (device loop5): enabling ssd optimizations
[  391.472573][T16566] BTRFS info (device loop5): turning on async discard
[  391.474853][T16566] BTRFS info (device loop5): enabling free space tree
[  391.483930][   T35] audit: type=1800 audit(2000000226.326:166): pid=16566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4293" name="file1" dev="loop5" ino=260 res=0 errno=0
[  391.593165][T14687] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  391.754812][T16599] overlayfs: failed to clone lowerpath
[  392.466456][ T5851] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  392.636602][ T5851] usb 6-1: Using ep0 maxpacket: 16
[  392.652826][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8
[  392.666960][ T5851] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  392.688809][ T5851] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  392.701202][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.761348][ T5851] usb 6-1: config 0 descriptor??
[  392.961691][T16650] tmpfs: Group quota block hardlimit too large.
[  393.181212][ T5851] holtek 0003:1241:5015.0011: unknown main item tag 0x0
[  393.184503][ T5851] holtek 0003:1241:5015.0011: unknown main item tag 0x0
[  393.187860][ T5851] holtek 0003:1241:5015.0011: unknown main item tag 0x0
[  393.190590][ T5851] holtek 0003:1241:5015.0011: unknown main item tag 0x0
[  393.194642][ T5851] holtek 0003:1241:5015.0011: unknown main item tag 0x0
[  393.234918][ T5851] holtek 0003:1241:5015.0011: hidraw0: USB HID vfb.c7 Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0
[  393.239069][ T5851] holtek 0003:1241:5015.0011: no inputs found
[  393.503362][   T24] usb 6-1: USB disconnect, device number 6
[  393.816697][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4331'.
[  393.820103][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4331'.
[  394.063081][T16674] netlink: 'syz.4.4334': attribute type 1 has an invalid length.
[  394.066186][T16674] netlink: 'syz.4.4334': attribute type 1 has an invalid length.
[  394.122818][T13452] bridge0: port 3(syz_tun) entered disabled state
[  394.153484][T13452] syz_tun (unregistering): left allmulticast mode
[  394.158175][T13452] syz_tun (unregistering): left promiscuous mode
[  394.161155][T13452] bridge0: port 3(syz_tun) entered disabled state
[  394.260512][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4343'.
[  394.506035][T16695] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  394.512657][T16695] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  394.539632][T16695] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  394.546736][T16695] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  394.551067][T16695] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  394.763554][T16693] chnl_net:caif_netlink_parms(): no params data found
[  394.787338][T16705] netlink: 'syz.4.4349': attribute type 6 has an invalid length.
[  394.790581][T16705] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4349'.
[  395.081323][T16693] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.084042][T16693] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.087511][T16693] bridge_slave_0: entered allmulticast mode
[  395.093725][T16693] bridge_slave_0: entered promiscuous mode
[  395.104537][T16693] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.109888][T16693] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.115343][T16693] bridge_slave_1: entered allmulticast mode
[  395.119660][T16693] bridge_slave_1: entered promiscuous mode
[  395.179139][T16693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  395.213386][T16693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  395.263834][T16693] team0: Port device team_slave_0 added
[  395.268750][   T12] bridge_slave_1: left allmulticast mode
[  395.270924][   T12] bridge_slave_1: left promiscuous mode
[  395.273097][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.280018][   T12] bridge_slave_0: left allmulticast mode
[  395.282207][   T12] bridge_slave_0: left promiscuous mode
[  395.286987][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.661003][   T12] batman_adv: batadv0: Removing interface: gretap1
[  395.825550][   T12] bond1 (unregistering): (slave bridge1): Releasing active interface
[  395.934942][   T12] bond0 (unregistering): left promiscuous mode
[  395.939562][   T12] bond_slave_0: left promiscuous mode
[  395.941902][   T12] bond_slave_1: left promiscuous mode
[  395.944371][   T12] dummy0: left promiscuous mode
[  395.949298][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  395.954844][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  395.961174][   T12] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  395.973989][   T12] bond0 (unregistering): Released all slaves
[  395.982758][   T12] bond1 (unregistering): Released all slaves
[  396.148743][   T12] bond2 (unregistering): Released all slaves
[  396.276212][   T12] bond3 (unregistering): (slave wireguard0): Releasing backup interface
[  396.279814][   T12] wireguard0: left promiscuous mode
[  396.283171][   T12] bond3 (unregistering): Released all slaves
[  396.293204][T16693] team0: Port device team_slave_1 added
[  396.347539][T16693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  396.350551][T16693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.360186][T16693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  396.364995][T16693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  396.370409][T16693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.380360][T16693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  396.407646][T16693] hsr_slave_0: entered promiscuous mode
[  396.410779][T16693] hsr_slave_1: entered promiscuous mode
[  396.413615][T16693] debugfs: 'hsr0' already exists in 'hsr'
[  396.415936][T16693] Cannot create hsr debugfs directory
[  396.649119][T16695] Bluetooth: hci1: command tx timeout
[  397.039713][   T12] batadv0: left promiscuous mode
[  397.048471][   T12] hsr_slave_0: left promiscuous mode
[  397.059966][   T12] hsr_slave_1: left promiscuous mode
[  397.064947][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  397.069710][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  397.073352][   T12] veth0_macvtap: left allmulticast mode
[  397.873854][T16778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4376'.
[  397.877745][T16778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4376'.
[  397.938263][   T12] team0 (unregistering): Port device team_slave_1 removed
[  397.989323][   T12] team0 (unregistering): Port device team_slave_0 removed
[  398.698390][T16693] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  398.701414][T16695] Bluetooth: hci1: command tx timeout
[  398.747297][T16693] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  398.803919][T16693] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  398.840414][T16693] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  398.909504][T16780] loop5: detected capacity change from 0 to 32768
[  398.945836][T16780] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  399.074162][T16780] XFS (loop5): Ending clean mount
[  399.120363][T16693] 8021q: adding VLAN 0 to HW filter on device bond0
[  399.138046][T16693] 8021q: adding VLAN 0 to HW filter on device team0
[  399.142807][   T12] IPVS: stop unused estimator thread 0...
[  399.145868][T13638] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.148706][T13638] bridge0: port 1(bridge_slave_0) entered forwarding state
[  399.165680][T14687] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  399.169103][T13638] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.171322][T13638] bridge0: port 2(bridge_slave_1) entered forwarding state
[  399.471459][T16693] 8021q: adding VLAN 0 to HW filter on device batadv0
[  399.693470][T16693] veth0_vlan: entered promiscuous mode
[  399.700232][T16693] veth1_vlan: entered promiscuous mode
[  399.716948][T16693] veth0_macvtap: entered promiscuous mode
[  399.721051][T16693] veth1_macvtap: entered promiscuous mode
[  399.730318][T16693] batman_adv: batadv0: Interface activated: batadv_slave_0
[  399.736603][T16693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  399.757129][T16730] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  399.766244][T16730] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  399.773718][T16730] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  399.796453][T16730] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  399.833296][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  399.835856][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.113566][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.116535][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  400.167047][T16851] loop6: detected capacity change from 0 to 128
[  400.191159][T16851] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  400.197914][T16851] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  400.206037][T16851] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.4344: No space for directory leaf checksum. Please run e2fsck -D.
[  400.213978][T16851] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.4344: checksumming directory block 0
[  400.247305][T16693] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  400.436016][T16861] loop6: detected capacity change from 0 to 8192
[  400.638639][T16865] loop6: detected capacity change from 0 to 1024
[  400.648877][T16865] EXT4-fs: inline encryption not supported
[  400.672313][T16865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  400.773891][T16693] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.777542][T16695] Bluetooth: hci1: command tx timeout
[  400.865799][T16879] loop6: detected capacity change from 0 to 512
[  400.875278][T16879] EXT4-fs (loop6): external journal device major/minor numbers have changed
[  400.924320][T16879] EXT4-fs (loop6): failed to open journal device unknown-block(11,127) -6
[  401.056445][   T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  401.246078][   T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  401.250515][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.266104][   T24] usb 6-1: config 0 descriptor??
[  401.278039][   T24] cp210x 6-1:0.0: cp210x converter detected
[  401.707222][   T24] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  401.728097][   T24] usb 6-1: cp210x converter now attached to ttyUSB0
[  401.921747][ T5850] usb 6-1: USB disconnect, device number 7
[  401.944642][ T5850] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  401.963839][ T5850] cp210x 6-1:0.0: device disconnected
[  402.485232][T16894] loop5: detected capacity change from 0 to 128
[  402.500140][T16894] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  402.509062][T16894] hpfs: filesystem error: improperly stopped
[  402.513384][T16894] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  402.517613][T16894] hpfs: You really don't want any checks? You are crazy...
[  402.521783][T16894] hpfs: hpfs_map_sector(): read error
[  402.524437][T16894] hpfs: code page support is disabled
[  402.529879][T16894] hpfs: hpfs_map_4sectors(): unaligned read
[  402.532611][T16894] hpfs: hpfs_map_4sectors(): unaligned read
[  402.535069][T16894] hpfs: filesystem error: unable to find root dir
[  402.542905][T16894] hpfs: hpfs_map_4sectors(): unaligned read
[  402.549237][T16894] hpfs: hpfs_map_sector(): read error
[  402.567520][ T5279] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  402.656052][T16903] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4405'.
[  402.718082][ T5279] usb 7-1: Using ep0 maxpacket: 16
[  402.721405][ T5279] usb 7-1: config 0 has an invalid interface number: 125 but max is 0
[  402.724058][ T5279] usb 7-1: config 0 has no interface number 0
[  402.738278][ T5279] usb 7-1: New USB device found, idVendor=04e8, idProduct=a100, bcdDevice=b2.9d
[  402.741420][ T5279] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.757094][ T5279] usb 7-1: Product: syz
[  402.764656][ T5279] usb 7-1: Manufacturer: syz
[  402.768510][ T5279] usb 7-1: SerialNumber: syz
[  402.780325][ T5279] usb 7-1: config 0 descriptor??
[  402.787300][ T5279] ax88179_178a 7-1:0.125: probe with driver ax88179_178a failed with error -22
[  402.807609][T16912] loop5: detected capacity change from 0 to 1024
[  402.869038][T16695] Bluetooth: hci1: command tx timeout
[  402.996035][ T6418] usb 7-1: USB disconnect, device number 2
[  403.369999][T16943] loop5: detected capacity change from 0 to 32768
[  403.373065][T16943] BTRFS error: failed to parse compression option 'zstd:nobarrier'
[  403.470668][T16947] "syz.4.4426" (16947) uses obsolete ecb(arc4) skcipher
[  403.473120][T16947] "syz.4.4426" (16947) uses obsolete ecb(arc4) skcipher
[  403.576874][T16955] loop6: detected capacity change from 0 to 4096
[  403.579849][T16955] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  403.629300][T16959] loop5: detected capacity change from 0 to 4096
[  403.693869][T16959] ntfs3(loop5): failed to convert "0080" to maciceland
[  403.996454][   T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  404.149580][   T24] usb 7-1: Using ep0 maxpacket: 8
[  404.161188][   T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[  404.165828][   T24] usb 7-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  404.176828][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  404.179585][   T24] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  404.188581][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.202826][   T24] usb 7-1: config 0 descriptor??
[  404.496550][ T6418] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  404.622806][   T24] arvo 0003:1E7D:30D4.0012: hidraw0: USB HID vf4.f6 Device [HID 1e7d:30d4] on usb-dummy_hcd.6-1/input0
[  404.647806][ T6418] usb 6-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  404.651299][ T6418] usb 6-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  404.664264][ T6418] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  404.668865][ T6418] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  404.672210][ T6418] usb 6-1: Manufacturer: syz
[  404.674024][ T6418] usb 6-1: SerialNumber: syz
[  404.819323][   T24] usb 7-1: USB disconnect, device number 3
[  404.894960][ T6418] usbhid 6-1:36.0: couldn't find an input interrupt endpoint
[  404.901345][ T6418] usb 6-1: USB disconnect, device number 8
[  405.146090][T17014] overlayfs: failed to clone upperpath
[  405.185003][T17016] syz_tun: tun_net_xmit 86
[  405.370595][T17027] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4463'.
[  405.558577][T17041] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4470'.
[  405.663196][T17047] loop6: detected capacity change from 0 to 128
[  405.674578][T17047] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  405.682934][T17047] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  405.705818][T16693] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  406.226600][    C1] syz_tun: tun_net_xmit 86
[  406.486481][ T5279] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  406.636515][ T5279] usb 6-1: Using ep0 maxpacket: 8
[  406.645098][ T5279] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  406.650432][ T5279] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  406.659178][ T5279] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  406.670504][ T5279] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  406.696590][ T5279] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  406.708235][ T5279] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.989392][ T5279] usb 6-1: GET_CAPABILITIES returned 0
[  406.991176][ T5279] usbtmc 6-1:16.0: can't read capabilities
[  407.192600][ T5850] usb 6-1: USB disconnect, device number 9
[  407.266784][    C1] syz_tun: tun_net_xmit 86
[  407.745156][T17083] Bluetooth: MGMT ver 1.23
[  407.789734][T17087] loop5: detected capacity change from 0 to 1024
[  407.839028][T13638] hfsplus: b-tree write err: -5, ino 8
[  407.884801][T17092] xt_ecn: cannot match TCP bits for non-tcp packets
[  407.950486][T17099] tmpfs: Bad value for 'mpol'
[  407.970602][T17101] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  408.988967][T17121] netlink: 'syz.4.4502': attribute type 11 has an invalid length.
[  409.036721][T17123] netlink: 'syz.4.4503': attribute type 9 has an invalid length.
[  409.506081][T17138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4510'.
[  409.506394][ T5279] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  409.666961][ T5279] usb 7-1: Using ep0 maxpacket: 32
[  409.671425][ T5279] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  409.675428][ T5279] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.693832][ T5279] usb 7-1: config 0 descriptor??
[  409.704469][ T5279] gspca_main: nw80x-2.14.0 probing 055f:d001
[  409.905146][ T5279] gspca_nw80x: reg_w err -71
[  409.917707][ T5279] nw80x 7-1:0.0: probe with driver nw80x failed with error -71
[  409.939022][ T5279] usb 7-1: USB disconnect, device number 4
[  410.193174][T17167] loop5: detected capacity change from 0 to 1764
[  410.275628][T17172] team0: Device ipip0 is of different type
[  410.695958][T17191] syzkaller1: entered promiscuous mode
[  410.703991][T17191] syzkaller1: entered allmulticast mode
[  411.203545][T17198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4532'.
[  411.367682][T17209] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4537'.
[  411.624298][T17221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4542'.
[  411.642153][T17221] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4542'.
[  412.201189][T17252] loop6: detected capacity change from 0 to 256
[  412.247779][T17252] FAT-fs (loop6): Directory bread(block 64) failed
[  412.250541][T17252] FAT-fs (loop6): Directory bread(block 65) failed
[  412.264182][T17252] FAT-fs (loop6): Directory bread(block 66) failed
[  412.272812][T17252] FAT-fs (loop6): Directory bread(block 67) failed
[  412.275771][T17252] FAT-fs (loop6): Directory bread(block 68) failed
[  412.287580][T17252] FAT-fs (loop6): Directory bread(block 69) failed
[  412.290359][T17252] FAT-fs (loop6): Directory bread(block 70) failed
[  412.293100][T17252] FAT-fs (loop6): Directory bread(block 71) failed
[  412.295848][T17252] FAT-fs (loop6): Directory bread(block 72) failed
[  412.309915][T17252] FAT-fs (loop6): Directory bread(block 73) failed
[  412.516840][T17259] tmpfs: Bad value for 'mpol'
[  413.061784][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4560'.
[  413.284339][T17277] bond1: up delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[  413.292847][T17277] 8021q: adding VLAN 0 to HW filter on device bond1
[  414.160749][T17303] loop6: detected capacity change from 0 to 2048
[  414.166733][T17303] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  414.274240][T17305] delete_channel: no stack
[  415.329354][T17322] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4580'.
[  415.332970][T17322] netem: invalid attributes len -15
[  415.335253][T17322] netem: change failed
[  415.344796][T17324] No source specified
[  415.384570][T17326] loop6: detected capacity change from 0 to 256
[  415.402151][T17326] FAT-fs (loop6): Directory bread(block 64) failed
[  415.404812][T17326] FAT-fs (loop6): Directory bread(block 65) failed
[  415.420447][T17326] FAT-fs (loop6): Directory bread(block 66) failed
[  415.423213][T17326] FAT-fs (loop6): Directory bread(block 67) failed
[  415.425798][T17326] FAT-fs (loop6): Directory bread(block 68) failed
[  415.429571][T17326] FAT-fs (loop6): Directory bread(block 69) failed
[  415.432533][T17326] FAT-fs (loop6): Directory bread(block 70) failed
[  415.435498][T17326] FAT-fs (loop6): Directory bread(block 71) failed
[  415.438611][T17326] FAT-fs (loop6): Directory bread(block 72) failed
[  415.441354][T17326] FAT-fs (loop6): Directory bread(block 73) failed
[  416.261908][T17332] loop6: detected capacity change from 0 to 131072
[  416.276593][T17332] F2FS-fs (loop6): Skip to start discard thread for readonly image
[  416.314268][T17332] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  416.318048][T17332] F2FS-fs (loop6): Mounted with checkpoint version = 1b41e955
[  416.342925][T17332] F2FS-fs (loop6): Inconsistent error blkaddr:5633, sit bitmap:0
[  416.346693][T17332] CPU: 1 UID: 0 PID: 17332 Comm: syz.6.4585 Not tainted syzkaller #0 PREEMPT(full) 
[  416.346712][T17332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  416.346719][T17332] Call Trace:
[  416.346724][T17332]  <TASK>
[  416.346731][T17332]  dump_stack_lvl+0x189/0x250
[  416.346756][T17332]  ? __pfx_dump_stack_lvl+0x10/0x10
[  416.346773][T17332]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  416.346792][T17332]  ? filemap_add_folio+0x35f/0x540
[  416.346811][T17332]  ? __pfx_f2fs_lookup_read_extent_cache_block+0x10/0x10
[  416.346827][T17332]  __f2fs_is_valid_blkaddr+0xd84/0x14f0
[  416.346846][T17332]  f2fs_get_read_data_folio+0x3d7/0x7b0
[  416.346866][T17332]  ? __pfx_f2fs_get_read_data_folio+0x10/0x10
[  416.346888][T17332]  ? __filemap_get_folio+0x9a6/0xaf0
[  416.346900][T17332]  ? f2fs_hash_filename+0x821/0xad0
[  416.346917][T17332]  f2fs_find_data_folio+0x195/0x3c0
[  416.346936][T17332]  __f2fs_find_entry+0x7a7/0xef0
[  416.346967][T17332]  ? __pfx___f2fs_find_entry+0x10/0x10
[  416.346985][T17332]  f2fs_lookup+0x264/0x9f0
[  416.346998][T17332]  ? __pfx_f2fs_lookup+0x10/0x10
[  416.347008][T17332]  ? __pfx_d_alloc_parallel+0x10/0x10
[  416.347058][T17332]  ? mode_strip_sgid+0x6a/0x1b0
[  416.347076][T17332]  path_openat+0x1101/0x3830
[  416.347117][T17332]  ? __pfx_path_openat+0x10/0x10
[  416.347146][T17332]  do_filp_open+0x1fa/0x410
[  416.347160][T17332]  ? __lock_acquire+0xab9/0xd20
[  416.347173][T17332]  ? __pfx_do_filp_open+0x10/0x10
[  416.347204][T17332]  ? _raw_spin_unlock+0x28/0x50
[  416.347219][T17332]  ? alloc_fd+0x64c/0x6c0
[  416.347239][T17332]  do_sys_openat2+0x121/0x1c0
[  416.347253][T17332]  ? __se_sys_futex+0x36f/0x400
[  416.347271][T17332]  ? __pfx_do_sys_openat2+0x10/0x10
[  416.347296][T17332]  __x64_sys_creat+0x8f/0xc0
[  416.347320][T17332]  do_syscall_64+0xfa/0xfa0
[  416.347336][T17332]  ? lockdep_hardirqs_on+0x9c/0x150
[  416.347353][T17332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.347365][T17332]  ? exc_page_fault+0xab/0x100
[  416.347385][T17332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.347396][T17332] RIP: 0033:0x7efe3638f7c9
[  416.347408][T17332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  416.347418][T17332] RSP: 002b:00007efe37262038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  416.347431][T17332] RAX: ffffffffffffffda RBX: 00007efe365e5fa0 RCX: 00007efe3638f7c9
[  416.347440][T17332] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000200000000100
[  416.347447][T17332] RBP: 00007efe363f297f R08: 0000000000000000 R09: 0000000000000000
[  416.347456][T17332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  416.347465][T17332] R13: 00007efe365e6038 R14: 00007efe365e5fa0 R15: 00007fff923cf878
[  416.347489][T17332]  </TASK>
[  416.471912][T17332] F2FS-fs (loop6): Inconsistent error blkaddr:5633, sit bitmap:0
[  416.474848][T17332] CPU: 1 UID: 0 PID: 17332 Comm: syz.6.4585 Not tainted syzkaller #0 PREEMPT(full) 
[  416.474861][T17332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  416.474866][T17332] Call Trace:
[  416.474870][T17332]  <TASK>
[  416.474874][T17332]  dump_stack_lvl+0x189/0x250
[  416.474889][T17332]  ? __pfx_dump_stack_lvl+0x10/0x10
[  416.474899][T17332]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  416.474911][T17332]  ? __filemap_get_folio+0x79f/0xaf0
[  416.474918][T17332]  ? __pfx_f2fs_lookup_read_extent_cache_block+0x10/0x10
[  416.474928][T17332]  __f2fs_is_valid_blkaddr+0xd84/0x14f0
[  416.474940][T17332]  f2fs_get_read_data_folio+0x3d7/0x7b0
[  416.474950][T17332]  ? __pfx_folio_mark_accessed+0x10/0x10
[  416.474960][T17332]  ? __pfx_f2fs_get_read_data_folio+0x10/0x10
[  416.474972][T17332]  ? __filemap_get_folio+0x79f/0xaf0
[  416.474979][T17332]  ? f2fs_hash_filename+0x821/0xad0
[  416.474988][T17332]  f2fs_find_data_folio+0x195/0x3c0
[  416.474999][T17332]  __f2fs_find_entry+0x7a7/0xef0
[  416.475018][T17332]  ? __pfx___f2fs_find_entry+0x10/0x10
[  416.475054][T17332]  f2fs_lookup+0x264/0x9f0
[  416.475063][T17332]  ? __pfx_f2fs_lookup+0x10/0x10
[  416.475069][T17332]  ? __pfx_d_alloc_parallel+0x10/0x10
[  416.475083][T17332]  ? mode_strip_sgid+0x6a/0x1b0
[  416.475093][T17332]  path_openat+0x1101/0x3830
[  416.475115][T17332]  ? __pfx_path_openat+0x10/0x10
[  416.475132][T17332]  do_filp_open+0x1fa/0x410
[  416.475140][T17332]  ? __lock_acquire+0xab9/0xd20
[  416.475149][T17332]  ? __pfx_do_filp_open+0x10/0x10
[  416.475166][T17332]  ? _raw_spin_unlock+0x28/0x50
[  416.475175][T17332]  ? alloc_fd+0x64c/0x6c0
[  416.475185][T17332]  do_sys_openat2+0x121/0x1c0
[  416.475195][T17332]  ? __pfx_do_sys_openat2+0x10/0x10
[  416.475205][T17332]  ? rcu_is_watching+0x15/0xb0
[  416.475215][T17332]  __x64_sys_openat+0x138/0x170
[  416.475225][T17332]  do_syscall_64+0xfa/0xfa0
[  416.475235][T17332]  ? lockdep_hardirqs_on+0x9c/0x150
[  416.475244][T17332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.475251][T17332]  ? exc_page_fault+0xab/0x100
[  416.475260][T17332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.475266][T17332] RIP: 0033:0x7efe3638f7c9
[  416.475274][T17332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  416.475283][T17332] RSP: 002b:00007efe37262038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  416.475291][T17332] RAX: ffffffffffffffda RBX: 00007efe365e5fa0 RCX: 00007efe3638f7c9
[  416.475297][T17332] RDX: 00000000000026e1 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  416.475302][T17332] RBP: 00007efe363f297f R08: 0000000000000000 R09: 0000000000000000
[  416.475306][T17332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  416.475310][T17332] R13: 00007efe365e6038 R14: 00007efe365e5fa0 R15: 00007fff923cf878
[  416.475322][T17332]  </TASK>
[  418.100876][T17395] syz_tun: tun_net_xmit 86
[  419.186585][    C1] syz_tun: tun_net_xmit 86
[  419.186990][T17412] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4618'.
[  419.351553][T17414] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  419.695709][T17426] netlink: 'syz.4.4625': attribute type 1 has an invalid length.
[  420.128688][T17445] loop5: detected capacity change from 0 to 8
[  420.148570][T17445] SQUASHFS error: Unable to read directory block [2c0:35]
[  420.216625][    C1] syz_tun: tun_net_xmit 86
[  420.306515][ T5850] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  420.436459][ T5279] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  420.456419][ T5850] usb 7-1: Using ep0 maxpacket: 32
[  420.460697][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.465544][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  420.470229][ T5850] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  420.473762][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.480197][ T5850] usb 7-1: config 0 descriptor??
[  420.489043][ T5850] hub 7-1:0.0: USB hub found
[  420.586506][ T5279] usb 6-1: Using ep0 maxpacket: 16
[  420.591508][ T5279] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  420.595539][ T5279] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  420.602052][ T5279] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  420.605690][ T5279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.609138][ T5279] usb 6-1: Product: syz
[  420.611059][ T5279] usb 6-1: Manufacturer: syz
[  420.612925][ T5279] usb 6-1: SerialNumber: syz
[  420.703623][ T5850] hub 7-1:0.0: config failed, can't read hub descriptor (err -90)
[  420.830429][ T5279] usb 6-1: 0:2 : does not exist
[  420.837537][ T5279] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  420.850193][ T5279] usb 6-1: USB disconnect, device number 10
[  420.871101][T13241] udevd[13241]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  421.116126][ T5850] hid-generic 0003:046D:C31C.0013: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0
[  421.402668][T17459] loop5: detected capacity change from 0 to 512
[  421.446908][T17459] 
[  421.447955][T17459] ======================================================
[  421.450635][T17459] WARNING: possible circular locking dependency detected
[  421.453432][T17459] syzkaller #0 Not tainted
[  421.455296][T17459] ------------------------------------------------------
[  421.458102][T17459] syz.5.4642/17459 is trying to acquire lock:
[  421.460603][T17459] ffff88802e1aab98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350
[  421.464391][T17459] 
[  421.464391][T17459] but task is already holding lock:
[  421.467256][T17459] ffff88801e9ac3b8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700
[  421.471045][T17459] 
[  421.471045][T17459] which lock already depends on the new lock.
[  421.471045][T17459] 
[  421.474857][T17459] 
[  421.474857][T17459] the existing dependency chain (in reverse order) is:
[  421.478303][T17459] 
[  421.478303][T17459] -> #1 (&ei->xattr_sem){++++}-{4:4}:
[  421.481364][T17459]        lock_acquire+0x120/0x360
[  421.483417][T17459]        down_write+0x96/0x1f0
[  421.485387][T17459]        ext4_destroy_inline_data+0x28/0xe0
[  421.487759][T17459]        ext4_do_writepages+0x526/0x4610
[  421.489998][T17459]        ext4_writepages+0x205/0x350
[  421.492150][T17459]        do_writepages+0x32e/0x550
[  421.494231][T17459]        file_write_and_wait_range+0x23e/0x340
[  421.496739][T17459]        generic_buffers_fsync_noflush+0x6c/0x180
[  421.499358][T17459]        ext4_sync_file+0x332/0xb20
[  421.501475][T17459]        ext4_buffered_write_iter+0x2ca/0x3a0
[  421.503887][T17459]        ext4_file_write_iter+0x298/0x1bc0
[  421.506192][T17459]        vfs_write+0x5c9/0xb30
[  421.508147][T17459]        __x64_sys_pwrite64+0x193/0x220
[  421.510427][T17459]        do_syscall_64+0xfa/0xfa0
[  421.512524][T17459]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.515117][T17459] 
[  421.515117][T17459] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  421.518323][T17459]        validate_chain+0xb9b/0x2140
[  421.520498][T17459]        __lock_acquire+0xab9/0xd20
[  421.522825][T17459]        lock_acquire+0x120/0x360
[  421.525004][T17459]        percpu_down_read_internal+0x48/0x1c0
[  421.527517][T17459]        ext4_writepages+0x1cc/0x350
[  421.529610][T17459]        do_writepages+0x32e/0x550
[  421.531603][T17459]        __writeback_single_inode+0x145/0xff0
[  421.534032][T17459]        writeback_single_inode+0x1f9/0x6a0
[  421.536331][T17459]        write_inode_now+0x160/0x1d0
[  421.538484][T17459]        iput+0x830/0xc50
[  421.540262][T17459]        ext4_xattr_block_set+0x1fce/0x2ac0
[  421.542631][T17459]        ext4_expand_extra_isize_ea+0x12da/0x1ea0
[  421.545176][T17459]        __ext4_expand_extra_isize+0x30d/0x400
[  421.547629][T17459]        __ext4_mark_inode_dirty+0x46c/0x700
[  421.550005][T17459]        ext4_evict_inode+0x80d/0xee0
[  421.552029][T17459]        evict+0x504/0x9c0
[  421.553853][T17459]        ext4_orphan_cleanup+0xc20/0x1460
[  421.556068][T17459]        ext4_fill_super+0x5920/0x61e0
[  421.558179][T17459]        get_tree_bdev_flags+0x40e/0x4d0
[  421.560496][T17459]        vfs_get_tree+0x92/0x2b0
[  421.562519][T17459]        do_new_mount+0x302/0xa10
[  421.564550][T17459]        __se_sys_mount+0x313/0x410
[  421.566669][T17459]        do_syscall_64+0xfa/0xfa0
[  421.568678][T17459]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.571268][T17459] 
[  421.571268][T17459] other info that might help us debug this:
[  421.571268][T17459] 
[  421.575320][T17459]  Possible unsafe locking scenario:
[  421.575320][T17459] 
[  421.578282][T17459]        CPU0                    CPU1
[  421.580432][T17459]        ----                    ----
[  421.582569][T17459]   lock(&ei->xattr_sem);
[  421.584268][T17459]                                lock(&sbi->s_writepages_rwsem);
[  421.587379][T17459]                                lock(&ei->xattr_sem);
[  421.590150][T17459]   rlock(&sbi->s_writepages_rwsem);
[  421.592321][T17459] 
[  421.592321][T17459]  *** DEADLOCK ***
[  421.592321][T17459] 
[  421.595581][T17459] 3 locks held by syz.5.4642/17459:
[  421.597678][T17459]  #0: ffff8881b08380e0 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: alloc_super+0x1bb/0x930
[  421.601675][T17459]  #1: ffff8881b0838610 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0
[  421.605329][T17459]  #2: ffff88801e9ac3b8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700
[  421.609240][T17459] 
[  421.609240][T17459] stack backtrace:
[  421.611573][T17459] CPU: 1 UID: 0 PID: 17459 Comm: syz.5.4642 Not tainted syzkaller #0 PREEMPT(full) 
[  421.611589][T17459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  421.611597][T17459] Call Trace:
[  421.611604][T17459]  <TASK>
[  421.611610][T17459]  dump_stack_lvl+0x189/0x250
[  421.611630][T17459]  ? __pfx_dump_stack_lvl+0x10/0x10
[  421.611650][T17459]  ? __pfx__printk+0x10/0x10
[  421.611663][T17459]  ? print_lock_name+0xde/0x100
[  421.611674][T17459]  print_circular_bug+0x2ee/0x310
[  421.611689][T17459]  check_noncircular+0x134/0x160
[  421.611704][T17459]  validate_chain+0xb9b/0x2140
[  421.611719][T17459]  ? look_up_lock_class+0x74/0x170
[  421.611735][T17459]  ? register_lock_class+0x51/0x320
[  421.611747][T17459]  __lock_acquire+0xab9/0xd20
[  421.611759][T17459]  ? ext4_writepages+0x1cc/0x350
[  421.611773][T17459]  lock_acquire+0x120/0x360
[  421.611783][T17459]  ? ext4_writepages+0x1cc/0x350
[  421.611800][T17459]  percpu_down_read_internal+0x48/0x1c0
[  421.611814][T17459]  ? ext4_writepages+0x1cc/0x350
[  421.611827][T17459]  ext4_writepages+0x1cc/0x350
[  421.611841][T17459]  ? __pfx_ext4_writepages+0x10/0x10
[  421.611858][T17459]  ? do_raw_spin_unlock+0x4d/0x240
[  421.611873][T17459]  ? __pfx_ext4_writepages+0x10/0x10
[  421.611886][T17459]  do_writepages+0x32e/0x550
[  421.611901][T17459]  ? do_raw_spin_lock+0x121/0x290
[  421.611918][T17459]  __writeback_single_inode+0x145/0xff0
[  421.611935][T17459]  ? do_raw_spin_unlock+0x4d/0x240
[  421.611949][T17459]  writeback_single_inode+0x1f9/0x6a0
[  421.611965][T17459]  write_inode_now+0x160/0x1d0
[  421.612009][T17459]  ? __pfx_write_inode_now+0x10/0x10
[  421.612033][T17459]  ? do_raw_spin_unlock+0x4d/0x240
[  421.612050][T17459]  iput+0x830/0xc50
[  421.612064][T17459]  ext4_xattr_block_set+0x1fce/0x2ac0
[  421.612086][T17459]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  421.612098][T17459]  ? ext4_xattr_block_find+0x2d4/0x350
[  421.612112][T17459]  ext4_expand_extra_isize_ea+0x12da/0x1ea0
[  421.612134][T17459]  __ext4_expand_extra_isize+0x30d/0x400
[  421.612150][T17459]  __ext4_mark_inode_dirty+0x46c/0x700
[  421.612170][T17459]  ext4_evict_inode+0x80d/0xee0
[  421.612189][T17459]  ? __pfx_ext4_evict_inode+0x10/0x10
[  421.612204][T17459]  ? do_raw_spin_unlock+0x4d/0x240
[  421.612218][T17459]  ? __pfx_ext4_evict_inode+0x10/0x10
[  421.612232][T17459]  evict+0x504/0x9c0
[  421.612249][T17459]  ? __pfx_evict+0x10/0x10
[  421.612262][T17459]  ? do_raw_spin_unlock+0x4d/0x240
[  421.612285][T17459]  ? _raw_spin_unlock+0x28/0x50
[  421.612300][T17459]  ? iput+0x946/0xc50
[  421.612314][T17459]  ext4_orphan_cleanup+0xc20/0x1460
[  421.612334][T17459]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[  421.612351][T17459]  ? ext4_register_li_request+0x640/0x720
[  421.612367][T17459]  ? errseq_check_and_advance+0x66/0x120
[  421.612383][T17459]  ext4_fill_super+0x5920/0x61e0
[  421.612403][T17459]  ? __pfx_ext4_fill_super+0x10/0x10
[  421.612415][T17459]  ? snprintf+0xda/0x120
[  421.612431][T17459]  ? __pfx_snprintf+0x10/0x10
[  421.612442][T17459]  ? set_blocksize+0x21e/0x500
[  421.612459][T17459]  ? sb_set_blocksize+0x104/0x180
[  421.612476][T17459]  ? setup_bdev_super+0x4c1/0x5b0
[  421.612494][T17459]  get_tree_bdev_flags+0x40e/0x4d0
[  421.612512][T17459]  ? __pfx_ext4_fill_super+0x10/0x10
[  421.612525][T17459]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  421.612543][T17459]  vfs_get_tree+0x92/0x2b0
[  421.612560][T17459]  do_new_mount+0x302/0xa10
[  421.612571][T17459]  ? apparmor_capable+0x137/0x1b0
[  421.612585][T17459]  ? __pfx_do_new_mount+0x10/0x10
[  421.612595][T17459]  ? ns_capable+0x8a/0xf0
[  421.612607][T17459]  ? kmem_cache_free+0x19b/0x690
[  421.612627][T17459]  __se_sys_mount+0x313/0x410
[  421.612639][T17459]  ? __pfx___se_sys_mount+0x10/0x10
[  421.612652][T17459]  ? do_syscall_64+0xbe/0xfa0
[  421.612666][T17459]  ? __x64_sys_mount+0x20/0xc0
[  421.612678][T17459]  do_syscall_64+0xfa/0xfa0
[  421.612693][T17459]  ? lockdep_hardirqs_on+0x9c/0x150
[  421.612709][T17459]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.612720][T17459]  ? exc_page_fault+0xab/0x100
[  421.612735][T17459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.612747][T17459] RIP: 0033:0x7f8991790f6a
[  421.612760][T17459] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  421.612770][T17459] RSP: 002b:00007f89925d4e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  421.612783][T17459] RAX: ffffffffffffffda RBX: 00007f89925d4ef0 RCX: 00007f8991790f6a
[  421.612793][T17459] RDX: 0000200000000180 RSI: 0000200000000080 RDI: 00007f89925d4eb0
[  421.612800][T17459] RBP: 0000200000000180 R08: 00007f89925d4ef0 R09: 0000000000800700
[  421.612807][T17459] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000080
[  421.612815][T17459] R13: 00007f89925d4eb0 R14: 000000000000046f R15: 00002000000000c0
[  421.612828][T17459]  </TASK>
[  421.803777][    C1] vkms_vblank_simulate: vblank timer overrun
[  421.812697][ T5279] usb 7-1: USB disconnect, device number 5
[  421.831292][T17459] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.4642: iget: bad extra_isize 90 (inode size 256)
[  421.837891][T17459] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4642: error while reading EA inode 11 err=-117
[  421.843411][T17459] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.4642: iget: bad extra_isize 90 (inode size 256)
[  421.849185][T17459] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4642: error while reading EA inode 11 err=-117
[  421.854286][T17459] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.4642: iget: bad extra_isize 90 (inode size 256)
[  421.861962][T17459] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4642: error while reading EA inode 18 err=-117
[  421.868028][T17459] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.4642: iget: bad extra_isize 90 (inode size 256)
[  421.873571][T17459] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4642: error while reading EA inode 18 err=-117
[  421.878669][T17459] EXT4-fs (loop5): 1 orphan inode deleted
[  421.881483][T17459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  421.901616][T14687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
