last executing test programs:

1m11.945272741s ago: executing program 3 (id=549):
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc)
r1 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})

1m11.683013943s ago: executing program 3 (id=553):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
fchown(r0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x6, 0x0)

1m11.313036412s ago: executing program 3 (id=556):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)

1m10.253143284s ago: executing program 3 (id=566):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x100)

1m10.100735352s ago: executing program 3 (id=568):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)

1m9.688579672s ago: executing program 3 (id=573):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000014c0)=[{&(0x7f00000012c0)="c05110196b02e36edbf04ba0b606d01bb3b6323e6506225d8617200f7d9386e548cf4afd5d6127d4ec4ffa41525e1d14ef80c10290c6d7da8a79b5", 0x3b}], 0x1)
write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77)
r2 = accept$alg(r1, 0x0, 0x0)
sendfile(r2, r0, 0x0, 0x9)

1m9.182259137s ago: executing program 32 (id=573):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000014c0)=[{&(0x7f00000012c0)="c05110196b02e36edbf04ba0b606d01bb3b6323e6506225d8617200f7d9386e548cf4afd5d6127d4ec4ffa41525e1d14ef80c10290c6d7da8a79b5", 0x3b}], 0x1)
write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77)
r2 = accept$alg(r1, 0x0, 0x0)
sendfile(r2, r0, 0x0, 0x9)

40.955960119s ago: executing program 4 (id=790):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x8144e1, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

40.505184502s ago: executing program 4 (id=793):
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0xe0003, 0x0, {[0x8, 0x8, 0x4, 0x8, 0x0, 0x4, 0x4]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

40.210994966s ago: executing program 4 (id=796):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x4000006, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000000800)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815", 0x45, 0x6d91fb6102d8914c, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4000, 0x0, 0x0)
recvfrom(r0, &(0x7f0000001a80)=""/4050, 0xfd2, 0x0, 0x0, 0x0)

39.241858624s ago: executing program 4 (id=810):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x5, 0x71e, &(0x7f0000000f40)="$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")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x20d008, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8001, 0x0, 0x0, 0x1a, 0xd, "413bb93852f7d6a4ae6dddfbd1ce5d2948bf75a5a9000ff8eee5e737030fdf110ff4117660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229b0b00001400000000d300e6d602000000000000000000000001", [0x8, 0xfffffffffffffffd]})
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x100000}])

37.923515079s ago: executing program 4 (id=820):
unshare(0x20000400)
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000040c0)=0x40000007, 0x4)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xfd, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10)

37.255525712s ago: executing program 4 (id=827):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x6}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

36.728317228s ago: executing program 33 (id=827):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x6}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

30.662457907s ago: executing program 5 (id=877):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x0, 0x8}]}, 0x10)
r1 = socket(0x2, 0x3, 0x6)
bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10)
sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10)

30.59602996s ago: executing program 5 (id=878):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8)
sendto$inet(r0, &(0x7f0000000700)="0c268a", 0x3, 0x0, 0x0, 0x0)
recvmsg(r0, 0x0, 0x104)

29.530997583s ago: executing program 5 (id=886):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x6, 0x4, 0x8a0f, 0x7fff, 0x100000005]}, &(0x7f0000000080)=0x78)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x700, 0x735, 0x4, 0x87e, 0x2000000]}, &(0x7f0000000140)=0x78)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x800, 0x7, 0x2, 0xfffffffffffffffe, 0x7]}, &(0x7f0000000200)=0x78)

27.974440479s ago: executing program 5 (id=895):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x200c080, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)

27.737207531s ago: executing program 5 (id=896):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000800000000, 0xfffffffffffffffb}, {0x3, 0x0, 0x200000000000000, 0xffffffffffffffff}, 0x800}}, 0xb8}, 0x1, 0x0, 0x0, 0x883}, 0x2c000010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10)

27.123953221s ago: executing program 5 (id=903):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c)
listen(r1, 0x401)

26.669115664s ago: executing program 34 (id=903):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c)
listen(r1, 0x401)

3.873034978s ago: executing program 2 (id=1076):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x8)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
syz_mount_image$fuse(&(0x7f0000000540), &(0x7f0000000000)='./bus\x00', 0x322020, &(0x7f0000000580)=ANY=[], 0x3, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r0, 0x101, 0x1)
getdents64(r0, 0x0, 0x0)

3.728240365s ago: executing program 2 (id=1078):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x40044}}], 0x1, 0x4014)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

3.574086783s ago: executing program 2 (id=1079):
r0 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0)
ftruncate(r0, 0x3)
r1 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000280)=0x21c4, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr, 0x1}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)

3.327128926s ago: executing program 2 (id=1081):
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x2, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=""/20, &(0x7f0000000240)=0x14)

3.186302772s ago: executing program 0 (id=1082):
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000009, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

3.185566162s ago: executing program 7 (id=1083):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

3.133359155s ago: executing program 6 (id=1084):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)
bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x2, 0xf0, 0x3}}, 0x18)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)

2.999527881s ago: executing program 6 (id=1085):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa20000000000000702"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000000}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x2}]}, 0x0, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.898047196s ago: executing program 7 (id=1087):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x40, 0x83, 0x0, 0x1001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

2.874712417s ago: executing program 0 (id=1088):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "174f1802006a377c", "4607a89cbc4f913db7d883093ad776efb47025e8121a09386e8df52827eed8b9", "85beac8a", "b2b4f5f4ef0b0e66"}, 0x38)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)

2.742020314s ago: executing program 6 (id=1089):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="a7", 0x1, 0x2400c040, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffc}, 0x1c)
sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc)
writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x588}], 0x1)

2.649213949s ago: executing program 7 (id=1090):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000087900060000000000000109022400010000200209040000090300030009210b00100122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="00222900000083702eedef0bf745506883672f3d98a0932d68717099660b4dfccb90932a391c004a441b674dfd0b1417face084f212f72163be31101bae689b95693f631b5dffa51f77f524363056d6bf92c9aff9dd894efd6cb1042894b0483e644df7afc24939ca87cc7e3402b79fa18f291c765a25d90f28983e7690d7b77bbc2d30292e0ac524d042ef3cd5cece521d93d785f858a051cc793dfe46032155457d6a3"], 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)

2.521253745s ago: executing program 6 (id=1092):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x3a)
fcntl$setlease(r2, 0x400, 0x1)
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')

2.362315643s ago: executing program 1 (id=1093):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x1}}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2306, 0x4)

2.333190174s ago: executing program 2 (id=1094):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$can_raw(0x1d, 0x3, 0x1)
pipe2(&(0x7f0000000080), 0x4000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000014c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x6)

2.332196374s ago: executing program 6 (id=1095):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.sectors\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x2000)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8050, &(0x7f00000004c0), 0x1, 0x418, &(0x7f0000001880)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)

2.115219345s ago: executing program 2 (id=1096):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

1.80590207s ago: executing program 0 (id=1097):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x20, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x1}}}}}}, 0x0)

1.741286303s ago: executing program 1 (id=1098):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0)

1.589653621s ago: executing program 1 (id=1099):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

800.55619ms ago: executing program 0 (id=1100):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000180)={0x2008, 0x1, 0x2, 0x0, 0x0, [{{r0}, 0x7}, {{r1}, 0x8}]})

800.39435ms ago: executing program 1 (id=1101):
syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00')
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)

625.101609ms ago: executing program 7 (id=1102):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r0 = io_uring_setup(0x5a02, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x4, 0x1000167})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000300)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x10000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x46}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

502.884955ms ago: executing program 1 (id=1103):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}}, 0x24004000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

398.39312ms ago: executing program 7 (id=1104):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
dup2(r3, r1)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(r0, 0x0, r4, 0x0, 0x80, 0x6)
write(r2, 0x0, 0x0)

332.030763ms ago: executing program 0 (id=1105):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001400)="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", 0x2000, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1af2, 0x161, 0x14, "0062ba7d82000000000000000000f7ffffff00"})
r1 = syz_open_pts(r0, 0xc0000)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000004c0))

210.566599ms ago: executing program 1 (id=1106):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c)
listen(r1, 0x7)

49.242957ms ago: executing program 6 (id=1107):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x401}}}, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680))
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

29.310088ms ago: executing program 0 (id=1108):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xd, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendto$inet6(r0, &(0x7f0000000180)="9000", 0x2, 0x0, 0x0, 0x0)

0s ago: executing program 7 (id=1109):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602019900000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

 to avoid problems!
[   74.784791][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.795445][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.807815][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.819066][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.830583][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.853345][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.883655][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.894694][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.898215][ T4354] loop3: detected capacity change from 0 to 128
[   74.910925][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.924179][ T4354] =======================================================
[   74.924179][ T4354] WARNING: The mand mount option has been deprecated and
[   74.924179][ T4354]          and is ignored by this kernel. Remove the mand
[   74.924179][ T4354]          option from the mount to silence this warning.
[   74.924179][ T4354] =======================================================
[   74.937897][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.987576][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.998594][ T4354] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   75.007196][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.008783][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.028454][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.037363][ T4354] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   75.048823][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.078860][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.107085][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.115971][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.127552][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.135636][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.142387][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.148832][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.163051][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.174286][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.184768][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.198499][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.211316][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.222426][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.233002][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.244513][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.256297][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.273549][ T4277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.283008][ T4277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.293076][ T4277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.302648][ T4277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.324849][ T4267] EXT4-fs (loop3): unmounting filesystem.
[   75.325289][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.359006][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.370394][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.387206][ T4283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.396076][ T4283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.428375][ T4283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.437454][ T4283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.486527][ T4281] Bluetooth: hci3: command 0x0419 tx timeout
[   75.486772][ T4286] Bluetooth: hci1: command 0x0419 tx timeout
[   75.492928][ T4281] Bluetooth: hci0: command 0x0419 tx timeout
[   75.567161][ T4281] Bluetooth: hci4: command 0x0419 tx timeout
[   75.567253][ T4286] Bluetooth: hci2: command 0x0419 tx timeout
[   75.682677][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.695121][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.710661][ T4320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.722957][ T4320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.737983][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.756977][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.842279][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.860228][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.904372][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.914016][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.926519][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.955988][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.007582][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.028608][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.062821][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.188502][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.202799][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.244007][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.536487][ T4335] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   76.631484][ T4382] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11'.
[   76.726786][   T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   76.736737][ T4335] usb 5-1: Using ep0 maxpacket: 32
[   76.751128][ T4335] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[   76.760488][ T4313] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   76.771712][ T4335] usb 5-1: config 0 has no interface number 0
[   76.784615][ T4335] usb 5-1: config 0 interface 12 has no altsetting 0
[   76.798663][ T4386] loop3: detected capacity change from 0 to 128
[   76.815396][ T4335] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[   76.834998][ T4335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.851468][ T4335] usb 5-1: Product: syz
[   76.866127][ T4335] usb 5-1: Manufacturer: syz
[   76.871264][ T4335] usb 5-1: SerialNumber: syz
[   76.880809][ T4386] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   76.890333][ T4335] usb 5-1: config 0 descriptor??
[   76.927674][   T11] wlan1: Trigger new scan to find an IBSS to join
[   76.940887][ T4386] hpfs: filesystem error: improperly stopped
[   76.956646][ T4313] usb 2-1: Using ep0 maxpacket: 16
[   76.956791][ T4386] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   76.961950][   T14] usb 3-1: Using ep0 maxpacket: 32
[   76.962013][ T4386] 
[   76.979072][ T4313] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.979195][ T4386] hpfs: You really don't want any checks? You are crazy...
[   76.995270][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.999730][ T4386] hpfs: hpfs_map_sector(): read error
[   77.015592][ T4386] hpfs: code page support is disabled
[   77.015875][ T4313] usb 2-1: config 0 interface 0 has no altsetting 0
[   77.027194][ T4386] hpfs: hpfs_map_4sectors(): unaligned read
[   77.034764][ T4386] hpfs: hpfs_map_4sectors(): unaligned read
[   77.035355][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.043697][ T4386] hpfs: filesystem error: unable to find root dir
[   77.058441][ T4313] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[   77.075441][   T14] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   77.078776][ T4386] 
[   77.091772][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.101237][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.144448][   T14] usb 3-1: config 0 descriptor??
[   77.150332][ T4313] usb 2-1: config 0 descriptor??
[   77.291335][ T4386] hpfs: hpfs_map_4sectors(): unaligned read
[   77.312286][ T4386] hpfs: hpfs_map_sector(): read error
[   77.337764][ T4386] hpfs: hpfs_map_4sectors(): unaligned read
[   77.343968][ T4386] hpfs: hpfs_map_sector(): read error
[   77.352005][ T4386] hpfs: hpfs_map_4sectors(): unaligned read
[   77.361391][ T4386] hpfs: hpfs_map_sector(): read error
[   77.638261][ T4313] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[   77.654890][   T14] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[   77.696554][ T4255] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   77.878414][ T4255] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[   77.896424][ T4255] usb 1-1: config 0 has no interface number 0
[   77.902793][ T4255] usb 1-1: config 0 interface 41 has no altsetting 0
[   77.977309][ T4255] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   77.994707][ T4255] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.026149][ T4255] usb 1-1: Product: syz
[   78.030620][ T4255] usb 1-1: Manufacturer: syz
[   78.035421][ T4255] usb 1-1: SerialNumber: syz
[   78.045621][ T4255] usb 1-1: config 0 descriptor??
[   78.071109][ T4313] usb 3-1: USB disconnect, device number 2
[   78.180146][   T41] usb 2-1: USB disconnect, device number 2
[   78.197210][ T4335] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[   78.209109][ T4335] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[   78.218145][ T4335] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[   78.225892][ T4335] f81534: probe of 5-1:0.12 failed with error -71
[   78.245058][ T4335] usb 5-1: USB disconnect, device number 2
[   78.870896][ T4255] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[   79.046292][ T4417] 9pnet: p9_errstr2errno: server reported unknown error �1 g;-�~	
[   79.137036][ T4419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'.
[   79.153312][ T4419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'.
[   79.210298][ T4419] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   79.219416][ T4419] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   79.228223][ T4419] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.237184][ T4419] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.296111][ T4419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'.
[   79.306129][ T4255] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[   79.325448][ T4255] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[   79.348859][ T4419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'.
[   79.354391][ T4255] CoreChips: probe of 1-1:0.41 failed with error -71
[   79.364866][ T4419] Zero length message leads to an empty skb
[   79.392985][ T4255] usb 1-1: USB disconnect, device number 2
[   79.967017][ T4324] wlan1: Trigger new scan to find an IBSS to join
[   80.022846][ T4440] binder: 4439:4440 ioctl c0306201 2000000003c0 returned -14
[   80.304348][ T4444] syz.3.35 uses obsolete (PF_INET,SOCK_PACKET)
[   80.439145][ T4446] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   81.278859][ T4459] loop1: detected capacity change from 0 to 4096
[   81.284318][ T4466] raw_sendmsg: syz.0.43 forgot to set AF_INET. Fix it!
[   81.431313][ T4468] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.900397][ T4474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'.
[   82.032690][ T4476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.46'.
[   82.085004][ T4470] loop2: detected capacity change from 0 to 65536
[   82.247066][ T4470] XFS (loop2): Mounting V5 Filesystem
[   82.361358][ T4470] XFS (loop2): Ending clean mount
[   82.600580][ T4497] loop3: detected capacity change from 0 to 128
[   82.715993][ T4497] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   82.777265][ T4497] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   82.801486][ T4497] syz.3.50 (pid 4497) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   82.945469][ T4266] XFS (loop2): Unmounting Filesystem
[   83.007462][   T11] wlan1: Trigger new scan to find an IBSS to join
[   83.274648][ T4497] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)"
[   83.442966][ T4267] EXT4-fs (loop3): unmounting filesystem.
[   83.695125][ T4527] loop0: detected capacity change from 0 to 128
[   83.988248][ T1119] wlan1: Creating new IBSS network, BSSID 1e:60:f1:d3:ae:cb
[   84.132238][ T4539] loop3: detected capacity change from 0 to 8192
[   84.277013][ T4335] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   84.488649][ T4335] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   84.531100][ T4335] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   84.579851][ T4335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   84.613791][ T4335] usb 1-1: Product: syz
[   84.639984][ T4335] usb 1-1: Manufacturer: syz
[   84.663162][ T4335] usb 1-1: SerialNumber: syz
[   84.918559][ T4335] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   85.449030][ T4549] usb 1-1: USB disconnect, device number 3
[   85.458987][    C1] usblp0: nonzero write bulk status received: -108
[   85.477978][ T4549] usblp0: removed
[   86.026552][ T4335] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   86.223632][ T4559] loop3: detected capacity change from 0 to 2048
[   86.243877][ T4335] usb 3-1: unable to get BOS descriptor or descriptor too short
[   86.263211][ T4335] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.295198][ T4335] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   86.314743][ T4335] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[   86.355397][ T4335] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[   86.396499][ T4335] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   86.424328][ T4566] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[   86.471323][ T4335] usb 3-1: config 1 interface 1 has no altsetting 0
[   86.505828][ T4335] usb 3-1: string descriptor 0 read error: -22
[   86.525624][ T4566] EXT4-fs (loop7): unable to read superblock
[   86.543860][ T4335] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[   86.567553][ T4559]  loop3: p4 < >
[   86.613473][ T3637]  loop3: p4 < >
[   86.614625][ T4335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.852602][    T7] cfg80211: failed to load regulatory.db
[   86.926347][    C1] hrtimer: interrupt took 61490 ns
[   87.953433][ T4335] usb 3-1: USB disconnect, device number 3
[   88.284687][ T4593] loop1: detected capacity change from 0 to 128
[   88.417583][ T4593] process 'syz.1.84' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   88.419592][ T4593] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/11/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   89.063606][ T4610] netlink: 7 bytes leftover after parsing attributes in process `syz.0.90'.
[   89.181435][ T4614] Illegal XDP return value 4294967274 on prog  (id 11) dev syz_tun, expect packet loss!
[   89.607360][ T4622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'.
[   89.747000][ T4626] loop3: detected capacity change from 0 to 16
[   89.816496][ T4626] erofs: (device loop3): mounted with root inode @ nid 36.
[   89.886074][ T4626] syz.3.97: attempt to access beyond end of device
[   89.886074][ T4626] loop3: rw=0, sector=8, nr_sectors = 16 limit=16
[   90.192304][ T4633] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.201585][ T4633] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.210935][ T4633] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.219722][ T4633] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.297972][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready
[   90.319620][ T4640] netlink: 1 bytes leftover after parsing attributes in process `syz.0.101'.
[   90.419882][ T4642] device batadv_slave_0 entered promiscuous mode
[   90.440881][ T4642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.103'.
[   90.504920][ T4647] capability: warning: `syz.1.104' uses deprecated v2 capabilities in a way that may be insecure
[   90.622595][ T4641] device batadv_slave_0 left promiscuous mode
[   90.912550][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'.
[   91.847525][ T4673] loop4: detected capacity change from 0 to 512
[   92.013704][ T4673] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   92.032726][ T4673] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   92.325365][ T4276] EXT4-fs (loop4): unmounting filesystem.
[   92.444321][   T26] audit: type=1326 audit(1776394892.514:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.3.114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0ac19c819 code=0x0
[   92.638753][ T4691] loop1: detected capacity change from 0 to 512
[   92.719120][ T4691] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   92.742533][ T4691] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.821201][ T4691] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[   92.932706][ T4698] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[   93.025657][ T4277] EXT4-fs (loop1): unmounting filesystem.
[   93.162713][ T4705] overlayfs: failed to clone upperpath
[   93.612533][ T4679] loop2: detected capacity change from 0 to 40427
[   93.644969][ T4679] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   93.672403][ T4679] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   93.705744][ T4679] F2FS-fs (loop2): Unrecognized mount option "��������fastboot" or missing value
[   94.249556][ T4723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.036467][ T4313] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   96.196968][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.205735][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.236884][ T4313] usb 5-1: Using ep0 maxpacket: 16
[   96.249019][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.265358][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.281367][ T4313] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   96.295249][ T4313] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   96.306005][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.345036][ T4313] usb 5-1: config 0 descriptor??
[   96.369378][ T4777] 9pnet_fd: p9_fd_create_tcp (4777): problem connecting socket to 127.0.0.1
[   96.432896][ T4780] loop2: detected capacity change from 0 to 2048
[   96.493930][ T4780] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   96.540710][ T4780] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #12: comm syz.2.150: corrupted in-inode xattr
[   96.678543][ T4266] EXT4-fs (loop2): unmounting filesystem.
[   96.768119][ T4313] microsoft 0003:045E:07DA.0003: unbalanced delimiter at end of report description
[   96.785632][ T4313] microsoft 0003:045E:07DA.0003: parse failed
[   96.792325][ T4313] microsoft: probe of 0003:045E:07DA.0003 failed with error -22
[   96.818088][ T4785] loop2: detected capacity change from 0 to 1024
[   96.956576][   T26] audit: type=1800 audit(1776394897.024:3): pid=4785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.151" name="file1" dev="loop2" ino=27 res=0 errno=0
[   96.974093][ T4313] usb 5-1: USB disconnect, device number 3
[   97.105753][ T4777] 9pnet_fd: p9_fd_create_tcp (4777): problem connecting socket to 127.0.0.1
[   97.201121][ T4764] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.227185][   T46] hfsplus: b-tree write err: -5, ino 25
[   97.233917][   T46] hfsplus: b-tree write err: -5, ino 4
[   97.247279][   T46] hfsplus: b-tree write err: -5, ino 2
[   97.264553][   T46] hfsplus: b-tree write err: -5, ino 26
[   97.292170][   T46] hfsplus: b-tree write err: -5, ino 27
[   97.303838][ T4764] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.592108][ T4798] loop4: detected capacity change from 0 to 128
[   97.609250][ T4798] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   97.664226][ T4798] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   97.675448][ T4798] ext2 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.784638][ T4798] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.154: Invalid inode bitmap blk 924378591 in block_group 0
[   97.903157][ T4276] EXT4-fs (loop4): unmounting filesystem.
[   97.969531][ T4764] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.014005][ T4764] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.023656][ T4764] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.042757][ T4764] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.253551][ T4764] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.263153][ T4764] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.272173][ T4764] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.281170][ T4764] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.535472][ T4810] bridge0: port 3(vlan2) entered blocking state
[   98.576690][ T4810] bridge0: port 3(vlan2) entered disabled state
[   98.613401][ T4810] device vlan2 entered promiscuous mode
[   98.644022][ T4810] bridge0: mtu less than device minimum
[   99.596499][ T4335] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   99.762732][ T4845] syz.2.170 sent an empty control message without MSG_MORE.
[   99.809125][ T4335] usb 2-1: unable to get BOS descriptor or descriptor too short
[   99.834250][ T4335] usb 2-1: not running at top speed; connect to a high speed hub
[   99.857936][ T4335] usb 2-1: config 5 has an invalid interface number: 246 but max is 0
[   99.896798][ T4335] usb 2-1: config 5 has an invalid descriptor of length 112, skipping remainder of the config
[   99.927735][ T4335] usb 2-1: config 5 has no interface number 0
[   99.947993][ T4335] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 65312, setting to 64
[   99.976607][ T4335] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   99.995001][ T4335] usb 2-1: config 5 interface 246 has no altsetting 0
[  100.010294][ T4335] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4
[  100.022522][ T4335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.034897][ T4335] usb 2-1: Product: syz
[  100.042725][ T4335] usb 2-1: Manufacturer: syz
[  100.055359][ T4335] usb 2-1: SerialNumber: syz
[  100.074929][ T4837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  100.414183][ T4335] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  100.438342][    T9] usb 2-1: Failed to submit usb control message: -71
[  100.445537][ T4335] usb 2-1: USB disconnect, device number 3
[  100.491164][    T9] usb 2-1: unable to send the bmi data to the device: -71
[  100.544379][    T9] usb 2-1: unable to get target info from device
[  100.577404][    T9] usb 2-1: could not get target info (-71)
[  100.605171][    T9] usb 2-1: could not probe fw (-71)
[  100.673020][ T4871] loop3: detected capacity change from 0 to 512
[  100.778392][ T4871] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  100.787913][ T4871] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  101.022822][ T4267] EXT4-fs (loop3): unmounting filesystem.
[  101.836654][ T4335] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  102.038726][ T4335] usb 2-1: unable to get BOS descriptor or descriptor too short
[  102.054362][ T4335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  102.076459][ T4335] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  102.092800][ T4335] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  102.111401][ T4918] loop2: detected capacity change from 0 to 512
[  102.118308][ T4335] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  102.143341][ T4335] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  102.162606][ T4335] usb 2-1: config 1 interface 1 has no altsetting 0
[  102.173591][ T4918] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  102.209417][ T4918] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  102.232134][ T4335] usb 2-1: string descriptor 0 read error: -22
[  102.269304][ T4335] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  102.309288][ T4335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.496279][ T4266] EXT4-fs (loop2): unmounting filesystem.
[  103.002264][ T4938] netlink: 'syz.0.204': attribute type 4 has an invalid length.
[  103.588618][ T4335] usb 2-1: 2:0: failed to get current value for ch 1 (-71)
[  103.680159][ T4335] usb 2-1: USB disconnect, device number 4
[  103.790302][ T4958] netlink: 76 bytes leftover after parsing attributes in process `syz.3.213'.
[  104.603866][ T4971] loop4: detected capacity change from 0 to 8192
[  105.204224][ T4982] loop3: detected capacity change from 0 to 256
[  105.420699][ T4968] loop1: detected capacity change from 0 to 32768
[  105.583798][ T4968] XFS (loop1): Mounting V5 Filesystem
[  105.631496][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'.
[  105.663673][ T4996] loop4: detected capacity change from 0 to 256
[  105.698697][ T4968] XFS (loop1): Ending clean mount
[  105.714832][ T4968] XFS (loop1): Quotacheck needed: Please wait.
[  105.876095][ T4968] XFS (loop1): Quotacheck: Done.
[  106.138690][ T5006] XFS (loop1): User initiated shutdown received.
[  106.145569][ T5006] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[  106.156477][   T26] audit: type=1800 audit(1776394906.214:4): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.217" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  106.196655][ T5006] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  106.468127][ T4277] XFS (loop1): Unmounting Filesystem
[  107.055173][ T5032] loop1: detected capacity change from 0 to 512
[  107.196062][ T5032] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  107.231406][ T5032] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  107.319800][ T5032] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.237: corrupted inode contents
[  107.416703][ T5032] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #2: comm syz.1.237: mark_inode_dirty error
[  107.454099][ T5032] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.237: corrupted inode contents
[  107.494219][  T950] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  107.540012][ T5041] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.237: corrupted inode contents
[  107.576618][ T5041] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #2: comm syz.1.237: mark_inode_dirty error
[  107.619285][ T5041] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.237: corrupted inode contents
[  107.669206][ T5041] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.237: mark_inode_dirty error
[  107.693687][ T5041] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.237: corrupted inode contents
[  107.709413][  T950] usb 5-1: Using ep0 maxpacket: 32
[  107.713834][ T5041] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #2: comm syz.1.237: mark_inode_dirty error
[  107.722121][  T950] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  107.745200][  T950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.762722][  T950] usb 5-1: Product: syz
[  107.767754][  T950] usb 5-1: Manufacturer: syz
[  107.773052][  T950] usb 5-1: SerialNumber: syz
[  107.785413][  T950] usb 5-1: config 0 descriptor??
[  107.792330][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  107.796796][ T4313] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  107.929464][ T5053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'.
[  107.953472][ T5055] loop3: detected capacity change from 0 to 512
[  107.983000][ T5055] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  107.994009][ T5055] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  108.005816][ T5058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'.
[  108.018601][ T4313] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  108.028229][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.036623][ T4313] usb 3-1: Product: syz
[  108.041042][ T4313] usb 3-1: Manufacturer: syz
[  108.046109][ T4313] usb 3-1: SerialNumber: syz
[  108.113456][ T4267] EXT4-fs (loop3): unmounting filesystem.
[  108.247214][  T950] airspy 5-1:0.0: Board ID: 00
[  108.252152][  T950] airspy 5-1:0.0: Firmware version: 
[  108.482695][ T4313] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  108.496730][ T4313] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  108.508644][ T4313] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  108.519061][ T4313] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  108.530488][ T4313] lan78xx: probe of 3-1:1.0 failed with error -71
[  108.552732][ T4313] usb 3-1: USB disconnect, device number 4
[  108.842063][ T5069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.253'.
[  109.223560][ T5080] loop2: detected capacity change from 0 to 128
[  109.256236][  T950] airspy 5-1:0.0: usb_control_msg() failed -71 request 10
[  109.283603][  T950] airspy 5-1:0.0: Registered as swradio24
[  109.283741][ T5080] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  109.301099][  T950] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  109.357495][  T950] usb 5-1: USB disconnect, device number 4
[  109.377981][ T5080] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  109.753954][   T11] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  110.270160][ T5111] loop1: detected capacity change from 0 to 256
[  110.311821][ T5111] exfat: Deprecated parameter 'utf8'
[  110.337889][ T5111] exfat: Deprecated parameter 'namecase'
[  110.397990][ T5111] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d)
[  110.773108][ T5128] loop1: detected capacity change from 0 to 512
[  110.946002][ T5128] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  110.984326][ T5128] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  110.995504][ T4282] Bluetooth: hci1: hcon ffff888079c6e000 sent 1 < count 511
[  111.221909][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  111.477564][   T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  111.617804][ T4313] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  111.668353][   T14] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  111.692002][   T14] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  111.711821][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  111.729370][   T14] usb 4-1: Product: syz
[  111.739511][   T14] usb 4-1: Manufacturer: syz
[  111.749910][   T14] usb 4-1: SerialNumber: syz
[  111.811381][ T4313] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  111.826458][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.845255][ T4313] usb 2-1: Product: syz
[  111.855398][ T4313] usb 2-1: Manufacturer: syz
[  111.871051][ T4313] usb 2-1: SerialNumber: syz
[  111.975251][   T14] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  112.130179][ T4313] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  112.151395][ T4313] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  112.707145][ T5164] overlayfs: invalid origin (0000)
[  112.988913][ T4313] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71
[  113.018505][ T4313] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  113.034039][ T4313] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  113.051941][ T4313] lan78xx: probe of 2-1:1.0 failed with error -71
[  113.088463][ T4313] usb 2-1: USB disconnect, device number 5
[  114.015230][   T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  115.004088][ T5175] loop2: detected capacity change from 0 to 32768
[  115.183134][ T5175] XFS (loop2): Mounting V5 Filesystem
[  115.281225][ T5175] XFS (loop2): Ending clean mount
[  115.355799][ T5175] XFS (loop2): User initiated shutdown received.
[  115.381985][ T5175] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[  115.417251][ T5175] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  115.521640][ T4266] XFS (loop2): Unmounting Filesystem
[  115.692696][ T5204] loop1: detected capacity change from 0 to 2048
[  115.751937][ T5204] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  115.917393][ T5204] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #12: comm syz.1.301: corrupted in-inode xattr
[  116.092327][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  117.033242][ T5229] loop4: detected capacity change from 0 to 1024
[  117.169519][   T26] audit: type=1800 audit(1776394917.244:5): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.306" name="file1" dev="loop4" ino=27 res=0 errno=0
[  117.594975][   T46] hfsplus: b-tree write err: -5, ino 25
[  117.605793][   T46] hfsplus: b-tree write err: -5, ino 4
[  117.614340][   T46] hfsplus: b-tree write err: -5, ino 2
[  117.624477][   T46] hfsplus: b-tree write err: -5, ino 26
[  117.653013][   T46] hfsplus: b-tree write err: -5, ino 27
[  118.060475][ T5255] overlayfs: failed to decode file handle (len=6, type=196859, flags=0, err=-22)
[  118.872616][  T124] usb 4-1: USB disconnect, device number 2
[  118.917216][  T124] usblp0: removed
[  119.584309][ T5287] device ipip0 entered promiscuous mode
[  122.056519][  T124] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  122.257737][  T124] usb 5-1: Using ep0 maxpacket: 32
[  122.277303][  T124] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  122.303809][  T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.325833][ T5335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.350'.
[  122.351539][  T124] gspca_main: nw80x-2.14.0 probing 055f:d001
[  122.371143][ T5335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.350'.
[  122.708073][ T5345] netlink: 'syz.3.354': attribute type 10 has an invalid length.
[  122.732648][ T5345] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  122.830160][ T5345] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  122.849223][ T5345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  122.859183][ T5345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  122.885532][ T5345] device bridge_slave_0 left promiscuous mode
[  122.905648][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.948204][ T5345] device bridge_slave_1 left promiscuous mode
[  122.966748][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.991104][ T5345] bond0: (slave bond_slave_0): Releasing backup interface
[  123.033053][ T5345] bond0: (slave bond_slave_1): Releasing backup interface
[  123.124823][ T5345] team0: Port device team_slave_0 removed
[  123.182784][ T5345] team0: Port device team_slave_1 removed
[  123.195521][ T5345] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.209711][ T5345] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.222540][ T5345] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.235190][ T5345] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.270818][ T5345] bond0: (slave netdevsim0): Releasing backup interface
[  123.340746][ T5355] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  123.368772][ T5355] batman_adv: batadv0: Adding interface: ip6gretap1
[  123.386715][ T5355] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.423662][ T5355] batman_adv: batadv0: Interface activated: ip6gretap1
[  123.690705][ T5363] loop2: detected capacity change from 0 to 512
[  123.764470][  T124] usb 5-1: USB disconnect, device number 5
[  123.784426][ T5363] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.361: inode has both inline data and extents flags
[  123.825230][ T5363] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.361: couldn't read orphan inode 15 (err -117)
[  123.875196][ T5363] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  124.261413][ T4266] EXT4-fs (loop2): unmounting filesystem.
[  124.612905][ T5387] loop3: detected capacity change from 0 to 512
[  124.940671][ T5387] EXT4-fs (loop3): Test dummy encryption mode enabled
[  124.963815][ T5387] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  125.002543][ T5387] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  125.046499][ T5387] EXT4-fs (loop3): The Hurd can't support 64-bit file systems
[  125.171690][ T5387] loop3: detected capacity change from 0 to 256
[  126.126367][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  126.696461][ T4335] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  126.888546][ T4335] usb 4-1: config 0 has no interfaces?
[  126.902449][ T4335] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  126.956355][ T4335] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  126.972621][ T4335] usb 4-1: Product: syz
[  126.986511][ T4335] usb 4-1: SerialNumber: syz
[  127.010718][ T4335] usb 4-1: config 0 descriptor??
[  127.229363][ T4335] usb 4-1: USB disconnect, device number 3
[  127.846542][ T4335] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  127.975700][ T5459] loop3: detected capacity change from 0 to 16
[  128.013978][ T5459] erofs: (device loop3): mounted with root inode @ nid 36.
[  128.054785][ T5459] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[  128.066477][ T4335] usb 5-1: Using ep0 maxpacket: 8
[  128.073740][ T4335] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.124987][ T4335] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  128.163912][ T4335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.191396][ T4335] usb 5-1: config 0 descriptor??
[  128.210128][ T4335] gspca_main: vc032x-2.14.0 probing 046d:0892
[  128.591673][ T5474] overlayfs: failed to clone upperpath
[  128.672598][ T5478] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  128.681707][ T4324] Bluetooth: hci5: Frame reassembly failed (-84)
[  129.621989][ T4335] gspca_vc032x: reg_w err -71
[  129.629131][ T4335] vc032x: probe of 5-1:0.0 failed with error -71
[  129.644388][ T4335] usb 5-1: USB disconnect, device number 6
[  130.686551][ T4286] Bluetooth: hci5: command 0x1003 tx timeout
[  130.694768][ T4282] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  131.177376][ T4316] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  131.366468][ T4316] usb 3-1: Using ep0 maxpacket: 32
[  131.380342][ T4316] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  131.413227][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.444454][ T4316] usb 3-1: Product: syz
[  131.455222][ T4316] usb 3-1: Manufacturer: syz
[  131.464681][ T4316] usb 3-1: SerialNumber: syz
[  131.505456][ T4316] usb 3-1: config 0 descriptor??
[  131.737400][ T4316] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 005
[  131.951125][ T5545] loop3: detected capacity change from 0 to 40427
[  131.983536][ T5545] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  132.055589][ T5545] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  132.105581][ T5545] F2FS-fs (loop3): invalid crc value
[  132.164774][ T5545] F2FS-fs (loop3): Found nat_bits in checkpoint
[  132.334589][ T5545] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  132.346825][ T5545] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  132.399997][ T5543] i2c i2c-1: failure reading status
[  132.418419][ T4315] usb 3-1: USB disconnect, device number 5
[  132.726931][ T4324] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  132.746621][ T4324] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  132.896206][ T5570] netlink: 'syz.4.444': attribute type 10 has an invalid length.
[  132.929981][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  132.937545][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.032250][ T5570] team0: Port device dummy0 added
[  133.052892][ T5571] netlink: 'syz.4.444': attribute type 10 has an invalid length.
[  133.136611][ T5571] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  133.201353][ T5571] team0: Failed to send options change via netlink (err -105)
[  133.215544][ T5571] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  133.245573][ T5571] team0: Port device dummy0 removed
[  133.269141][ T5571] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  133.635030][ T5583] 9pnet_fd: Insufficient options for proto=fd
[  134.344216][ T5604] loop4: detected capacity change from 0 to 4096
[  134.405632][ T5606] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  134.906444][   T41] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  135.096619][   T41] usb 3-1: Using ep0 maxpacket: 32
[  135.104361][   T41] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  135.127224][   T41] usb 3-1: config 0 has no interface number 0
[  135.137654][   T41] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  135.147730][   T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.156119][   T41] usb 3-1: Product: syz
[  135.160574][   T41] usb 3-1: Manufacturer: syz
[  135.165379][   T41] usb 3-1: SerialNumber: syz
[  135.181238][   T41] usb 3-1: config 0 descriptor??
[  135.190599][ T5628] overlayfs: failed to clone upperpath
[  135.191916][   T41] smsc95xx v2.0.0
[  135.416541][ T4335] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  135.597573][   T41] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  135.610483][ T4335] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  135.624985][ T4335] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  135.638180][   T41] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  135.663700][ T4335] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  135.673701][ T4335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.681919][ T4335] usb 4-1: Product: syz
[  135.686659][ T4335] usb 4-1: Manufacturer: syz
[  135.691354][ T4335] usb 4-1: SerialNumber: syz
[  135.723505][ T4335] usb 4-1: config 0 descriptor??
[  135.729969][ T5626] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  135.744898][ T4335] dm9601: probe of 4-1:0.0 failed with error -22
[  136.428854][ T5653] loop4: detected capacity change from 0 to 256
[  136.463743][   T41] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  136.492530][ T5653] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  136.506113][   T41] smsc95xx: probe of 3-1:0.67 failed with error -71
[  136.530167][   T41] usb 3-1: USB disconnect, device number 6
[  136.536433][ T5653] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  136.605339][ T5653] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d)
[  136.823438][ T5663] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 3944. macoff=96
[  137.494615][ T5685] netlink: 'syz.2.493': attribute type 10 has an invalid length.
[  137.544976][ T5685] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  137.597622][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  137.626607][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  137.649232][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  137.691542][ T5685] device bridge_slave_0 left promiscuous mode
[  137.723236][ T5685] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.781288][ T5685] device bridge_slave_1 left promiscuous mode
[  137.805996][ T5685] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.829017][ T5685] bond0: (slave bond_slave_0): Releasing backup interface
[  137.854766][ T5685] bond0: (slave bond_slave_1): Releasing backup interface
[  137.973950][ T5685] team0: Port device team_slave_0 removed
[  138.004689][ T5685] team0: Port device team_slave_1 removed
[  138.025263][ T5685] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.054416][ T5685] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.082347][ T5685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.128890][ T5685] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.165385][ T4313] usb 4-1: USB disconnect, device number 4
[  138.182046][ T5685] bond0: (slave netdevsim0): Releasing backup interface
[  138.812851][ T5724] netlink: 'syz.1.506': attribute type 11 has an invalid length.
[  138.862802][ T5724] netlink: 36 bytes leftover after parsing attributes in process `syz.1.506'.
[  138.923220][ T5724] netlink: 'syz.1.506': attribute type 11 has an invalid length.
[  138.941944][ T5725] loop3: detected capacity change from 0 to 4096
[  138.976502][ T5724] netlink: 36 bytes leftover after parsing attributes in process `syz.1.506'.
[  139.001139][ T5724] netlink: 'syz.1.506': attribute type 11 has an invalid length.
[  139.034585][ T5731] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.045565][ T5724] netlink: 36 bytes leftover after parsing attributes in process `syz.1.506'.
[  139.339261][ T5735] loop2: detected capacity change from 0 to 1024
[  139.518795][ T5735] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  139.566706][ T5735] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.642813][ T5735] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.509: lblock 0 mapped to illegal pblock 0 (length 1)
[  139.762487][ T5735] EXT4-fs (loop2): Remounting filesystem read-only
[  139.821410][ T5749] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.509: lblock 0 mapped to illegal pblock 0 (length 1)
[  139.896968][ T5749] EXT4-fs (loop2): Remounting filesystem read-only
[  140.060529][ T4266] EXT4-fs (loop2): unmounting filesystem.
[  140.258816][ T5759] netlink: 'syz.2.516': attribute type 1 has an invalid length.
[  140.329484][ T5759] 8021q: adding VLAN 0 to HW filter on device bond1
[  140.342252][ T5761] bond1: (slave gretap1): making interface the new active one
[  140.473558][ T5761] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  140.522776][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  140.529454][ T5761] syz.2.516 (5761) used greatest stack depth: 20656 bytes left
[  141.181240][ T5784] overlayfs: failed to clone upperpath
[  141.411679][ T5794] netlink: 'syz.1.530': attribute type 11 has an invalid length.
[  142.120706][ T5793] loop2: detected capacity change from 0 to 40427
[  142.151164][ T5793] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff
[  142.171127][ T5793] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4
[  142.216398][ T5793] F2FS-fs (loop2): invalid crc value
[  142.257287][ T5793] F2FS-fs (loop2): Found nat_bits in checkpoint
[  142.432981][ T5793] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  142.602203][   T26] audit: type=1800 audit(1776394942.674:6): pid=5793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.529" name="bus" dev="loop2" ino=14 res=0 errno=0
[  142.643852][ T5793] syz.2.529: attempt to access beyond end of device
[  142.643852][ T5793] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  142.813697][ T4266] syz-executor: attempt to access beyond end of device
[  142.813697][ T4266] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[  143.043275][ T5808] loop3: detected capacity change from 0 to 32768
[  143.072940][ T5822] netlink: 52 bytes leftover after parsing attributes in process `syz.4.542'.
[  143.110816][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.118516][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.210823][ T5823] netlink: 52 bytes leftover after parsing attributes in process `syz.4.542'.
[  143.233388][   T26] audit: type=1804 audit(1776394943.304:7): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.536" name="/newroot/111/file0/&" dev="loop3" ino=7 res=1 errno=0
[  143.672069][ T5829] loop3: detected capacity change from 0 to 1024
[  143.767515][ T5829] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  143.879130][ T5827] loop4: detected capacity change from 0 to 8192
[  143.993774][ T5827] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  144.085426][ T5829] EXT4-fs (loop3): unmounting filesystem.
[  144.136168][ T5827] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  144.216823][ T5827] REISERFS (device loop4): using ordered data mode
[  144.223844][ T5827] reiserfs: using flush barriers
[  144.300219][ T5827] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  144.382351][ T5843] netlink: 'syz.3.549': attribute type 12 has an invalid length.
[  144.432118][ T5827] REISERFS (device loop4): checking transaction log (loop4)
[  144.546003][ T5827] REISERFS (device loop4): Using r5 hash to sort names
[  144.588950][ T5827] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  145.556909][ T5875] netlink: 64 bytes leftover after parsing attributes in process `syz.1.561'.
[  145.762490][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  145.811121][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  145.844113][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  145.878642][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  145.910604][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  145.937638][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  146.008799][ T5883] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  146.676165][ T4324] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.713262][ T5901] loop2: detected capacity change from 0 to 4096
[  146.762405][ T5901] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  146.866668][ T4324] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.029506][ T4324] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.145949][ T4324] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.305774][ T5901] syz.2.572 (5901) used greatest stack depth: 20624 bytes left
[  147.929870][ T5922] netlink: 'syz.1.579': attribute type 8 has an invalid length.
[  148.365881][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  148.393171][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  148.402145][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  148.410909][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  148.418616][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  148.426176][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  149.669516][ T5927] chnl_net:caif_netlink_parms(): no params data found
[  150.276828][ T4324] device hsr_slave_0 left promiscuous mode
[  150.315445][ T4324] device hsr_slave_1 left promiscuous mode
[  150.395727][ T4324] device veth1_macvtap left promiscuous mode
[  150.432099][ T4324] device veth0_macvtap left promiscuous mode
[  150.446040][ T4324] device veth1_vlan left promiscuous mode
[  150.463107][ T4324] device veth0_vlan left promiscuous mode
[  150.526752][ T4286] Bluetooth: hci1: command 0x0409 tx timeout
[  150.622727][ T5942] loop2: detected capacity change from 0 to 40427
[  150.640597][ T5942] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  150.649533][ T5942] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  150.681034][ T5942] F2FS-fs (loop2): Found nat_bits in checkpoint
[  150.805083][ T5942] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  150.822289][ T5942] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  151.884910][ T5980] loop2: detected capacity change from 0 to 512
[  152.005702][ T5980] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  152.123568][ T5980] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  152.153143][ T5980] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.324039][ T5980] EXT4-fs error (device loop2): ext4_dx_csum_verify:502: inode #2: comm syz.2.594: dir seems corrupt?  Run e2fsck -D.
[  152.343106][ T4372] udevd[4372]: incorrect ext4 checksum on /dev/loop2
[  152.414202][ T5980] EXT4-fs (loop2): Remounting filesystem read-only
[  152.436450][ T5980] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.594: Directory index failed checksum
[  152.464136][ T5980] EXT4-fs (loop2): Remounting filesystem read-only
[  152.556917][ T4266] EXT4-fs (loop2): unmounting filesystem.
[  152.606443][ T4286] Bluetooth: hci1: command 0x041b tx timeout
[  153.312800][   T41] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  153.453076][ T4324] bond0 (unregistering): Released all slaves
[  153.518939][   T41] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  153.533201][   T41] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  153.546363][   T41] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  153.555748][   T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  153.582756][   T41] usb 5-1: SerialNumber: syz
[  153.628016][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.635287][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.661158][ T5927] device bridge_slave_0 entered promiscuous mode
[  153.710077][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.748789][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.798354][ T5927] device bridge_slave_1 entered promiscuous mode
[  153.817492][   T41] usb 5-1: 0:2 : does not exist
[  153.832878][   T41] usb 5-1: unit 5 not found!
[  153.931326][   T41] usb 5-1: USB disconnect, device number 7
[  153.982029][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.040411][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.148733][ T5927] team0: Port device team_slave_0 added
[  154.182500][ T5927] team0: Port device team_slave_1 added
[  154.213005][ T4372] udevd[4372]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  154.228145][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.236016][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.295409][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.325146][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.339426][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.420181][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.532970][ T5927] device hsr_slave_0 entered promiscuous mode
[  154.550780][ T5927] device hsr_slave_1 entered promiscuous mode
[  154.686804][ T4286] Bluetooth: hci1: command 0x040f tx timeout
[  154.992364][ T5927] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  155.026195][ T5927] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  155.049601][ T5927] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  155.084955][ T5927] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  155.256790][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.285400][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  155.308143][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  155.343013][ T5927] 8021q: adding VLAN 0 to HW filter on device team0
[  155.364247][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  155.379108][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  155.389329][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.396534][ T4324] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.405193][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.447127][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  155.467144][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  155.477310][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.484643][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.527356][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  155.539914][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  155.560229][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  155.573856][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  155.583550][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  155.601767][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  155.611683][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  155.626149][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  155.643831][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  155.659902][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  155.673809][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  155.685175][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  156.004298][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  156.019119][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  156.033614][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.435968][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  156.445227][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  156.471448][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  156.488222][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  156.505589][ T5927] device veth0_vlan entered promiscuous mode
[  156.513075][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  156.534173][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  156.554796][ T5927] device veth1_vlan entered promiscuous mode
[  156.582034][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  156.597715][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  156.606119][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  156.616262][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  156.631693][ T5927] device veth0_macvtap entered promiscuous mode
[  156.651030][ T5927] device veth1_macvtap entered promiscuous mode
[  156.682048][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.700045][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.712395][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.724845][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.737424][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.746244][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  156.760936][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  156.771693][ T4286] Bluetooth: hci1: command 0x0419 tx timeout
[  156.784715][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.797028][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.807703][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.818926][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.830605][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.838404][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  156.859533][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  156.879752][ T5927] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.889016][ T5927] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.898418][ T5927] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.907655][ T5927] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.022338][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.035323][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.046019][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  157.092191][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.105079][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.118269][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  157.464185][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'.
[  157.520613][ T6090] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  157.529856][ T6090] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.538652][ T6090] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  157.547612][ T6090] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.590512][ T6094] loop2: detected capacity change from 0 to 164
[  157.625290][ T6094] rock: directory entry would overflow storage
[  157.660875][ T6094] rock: sig=0x4543, size=28, remaining=18
[  157.705250][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'.
[  159.915680][ T6153] loop2: detected capacity change from 0 to 7
[  159.944245][ T6153] Dev loop2: unable to read RDB block 7
[  159.957958][ T6153]  loop2: unable to read partition table
[  159.970885][ T6153] loop2: partition table beyond EOD, truncated
[  159.994349][ T6153] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  160.162911][ T6130] loop5: detected capacity change from 0 to 40427
[  160.194067][ T6130] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff
[  160.225625][ T6130] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4
[  160.292504][ T6130] F2FS-fs (loop5): invalid crc value
[  160.317971][ T6130] F2FS-fs (loop5): Found nat_bits in checkpoint
[  160.502286][ T6130] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  160.647345][   T26] audit: type=1800 audit(1776394960.714:8): pid=6130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.628" name="bus" dev="loop5" ino=14 res=0 errno=0
[  160.677378][ T6130] syz.5.628: attempt to access beyond end of device
[  160.677378][ T6130] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  160.837090][ T5927] syz-executor: attempt to access beyond end of device
[  160.837090][ T5927] loop5: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[  161.331780][   T26] audit: type=1326 audit(1776394961.404:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ccb9c819 code=0x7ffc0000
[  161.410045][   T26] audit: type=1326 audit(1776394961.404:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ccb9c819 code=0x7ffc0000
[  161.481113][   T26] audit: type=1326 audit(1776394961.404:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ccb9c819 code=0x7ffc0000
[  161.547037][   T26] audit: type=1326 audit(1776394961.404:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f37ccb9c819 code=0x7ffc0000
[  161.636404][   T26] audit: type=1326 audit(1776394961.404:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ccb9c819 code=0x7ffc0000
[  161.738410][   T26] audit: type=1326 audit(1776394961.404:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ccb9c819 code=0x7ffc0000
[  161.781752][   T26] audit: type=1326 audit(1776394961.404:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ccb9c819 code=0x7ffc0000
[  161.811505][   T26] audit: type=1326 audit(1776394961.404:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ccb9c819 code=0x7ffc0000
[  161.861684][   T26] audit: type=1326 audit(1776394961.404:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.4.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f37ccb9c819 code=0x7ffc0000
[  162.648605][ T6236] overlayfs: failed to clone upperpath
[  162.846897][    C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187
[  163.522593][ T6265] loop2: detected capacity change from 0 to 2048
[  163.656426][ T6265] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  163.726861][ T6265] NILFS (loop2): mounting unchecked fs
[  163.802771][ T6265] NILFS (loop2): recovery complete
[  163.830185][ T4372] udevd[4372]: incorrect nilfs2 checksum on /dev/loop2
[  163.840992][ T6271] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.083761][ T6283] kvm: apic: phys broadcast and lowest prio
[  164.096452][ T4313] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  164.199467][ T6285] tipc: Started in network mode
[  164.204674][ T6285] tipc: Node identity 4, cluster identity 4711
[  164.286672][ T6285] tipc: Node number set to 4
[  164.299306][ T4313] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.336618][ T4313] usb 5-1: config 0 has no interfaces?
[  164.342185][ T4313] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  164.383464][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.401483][ T6288] overlayfs: failed to clone upperpath
[  164.425499][ T4313] usb 5-1: config 0 descriptor??
[  164.664611][  T950] usb 5-1: USB disconnect, device number 8
[  164.843323][ T6301] loop2: detected capacity change from 0 to 256
[  164.911541][ T6301] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d)
[  165.012875][ T6304] sctp: [Deprecated]: syz.0.682 (pid 6304) Use of int in max_burst socket option deprecated.
[  165.012875][ T6304] Use struct sctp_assoc_value instead
[  165.764130][ T6319] loop4: detected capacity change from 0 to 16
[  165.883438][ T6319] erofs: (device loop4): mounted with root inode @ nid 36.
[  166.102264][ T6319] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[  166.149378][ T6319] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  166.207311][ T6319] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[  166.273625][ T6319] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  166.305661][ T6319] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[  166.324784][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'.
[  166.380145][ T6319] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  166.390917][ T6329] device team1 entered promiscuous mode
[  166.409725][ T6329] 8021q: adding VLAN 0 to HW filter on device team1
[  166.455323][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'.
[  166.575448][ T6334] device team2 entered promiscuous mode
[  166.589564][ T6334] 8021q: adding VLAN 0 to HW filter on device team2
[  166.599590][ T6336] loop2: detected capacity change from 0 to 256
[  166.638284][ T6336] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  168.643302][ T6407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.715'.
[  169.362666][ T6425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  169.370883][ T6425] IPv6: NLM_F_CREATE should be set when creating new route
[  169.492366][  T124] kernel write not supported for file bpf-prog (pid: 124 comm: kworker/1:2)
[  169.859315][ T6448] loop5: detected capacity change from 0 to 16
[  169.886260][ T6448] erofs: (device loop5): mounted with root inode @ nid 36.
[  169.947694][ T6448] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  169.962574][ T6448] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  169.973282][ T6448] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117]
[  170.876483][ T4335] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  171.083874][ T4335] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  171.113791][ T4335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.136580][ T4335] usb 3-1: Product: syz
[  171.140818][ T4335] usb 3-1: Manufacturer: syz
[  171.196504][ T4335] usb 3-1: SerialNumber: syz
[  171.213411][ T4335] usb 3-1: config 0 descriptor??
[  171.368764][ T6470] loop5: detected capacity change from 0 to 40427
[  171.397583][ T6470] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  171.425435][ T6470] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  171.476816][ T6470] F2FS-fs (loop5): Unrecognized mount option "age_extent_cache" or missing value
[  171.508507][ T4335] usb 3-1: USB disconnect, device number 7
[  171.752745][ T6487] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.795963][ T6487] team0: Port device bond0 added
[  171.837265][ T6490] bridge0: port 3(team0) entered blocking state
[  171.865887][ T6490] bridge0: port 3(team0) entered disabled state
[  171.897649][ T6490] device team0 entered promiscuous mode
[  171.916885][ T6490] device team_slave_0 entered promiscuous mode
[  171.931744][ T6490] device team_slave_1 entered promiscuous mode
[  171.952890][ T6490] device bond0 entered promiscuous mode
[  171.979592][ T6490] device bond_slave_0 entered promiscuous mode
[  172.003120][ T6490] device bond_slave_1 entered promiscuous mode
[  172.035603][ T6490] bridge0: port 3(team0) entered blocking state
[  172.042785][ T6490] bridge0: port 3(team0) entered forwarding state
[  173.176001][ T6541] netlink: 224 bytes leftover after parsing attributes in process `syz.5.763'.
[  174.050790][ T6570] netlink: 'syz.4.774': attribute type 1 has an invalid length.
[  174.099151][ T6570] netlink: 'syz.4.774': attribute type 4 has an invalid length.
[  174.121726][ T6570] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.774'.
[  174.645237][ T6593] loop4: detected capacity change from 0 to 128
[  174.674654][ T6593] FAT-fs (loop4): bogus logical sector size 759
[  174.705779][ T6593] FAT-fs (loop4): Can't find a valid FAT filesystem
[  174.771757][ T6589] loop5: detected capacity change from 0 to 4096
[  174.830131][ T6589] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  174.910422][ T6589] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  175.056727][ T6601] tipc: Failed to remove unknown binding: 66,1,1/0:1199829221/1199829223
[  175.107478][   T26] kauditd_printk_skb: 194 callbacks suppressed
[  175.107496][   T26] audit: type=1800 audit(1776394975.184:212): pid=6589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.780" name="file1" dev="loop5" ino=30 res=0 errno=0
[  175.241264][   T26] audit: type=1804 audit(1776394975.314:213): pid=6607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.780" name="/newroot/31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=30 res=1 errno=0
[  175.656543][ T6617] overlayfs: failed to clone upperpath
[  175.983825][ T6627] netlink: 'syz.1.795': attribute type 4 has an invalid length.
[  175.999355][ T6627] netlink: 'syz.1.795': attribute type 4 has an invalid length.
[  177.131063][ T6660] loop4: detected capacity change from 0 to 2048
[  177.161079][ T6660] EXT4-fs: Ignoring removed i_version option
[  177.240931][ T6660] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  177.256518][ T6660] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.416809][ T6660] loop4: detected capacity change from 2048 to 64
[  177.635168][ T6664] syz.4.810: attempt to access beyond end of device
[  177.635168][ T6664] loop4: rw=2049, sector=192, nr_sectors = 1344 limit=64
[  177.721209][ T6664] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 48)
[  177.782211][ T6664] Buffer I/O error on device loop4, logical block 48
[  177.789666][ T6664] Buffer I/O error on device loop4, logical block 49
[  177.816093][ T6664] Buffer I/O error on device loop4, logical block 50
[  177.822859][ T6664] Buffer I/O error on device loop4, logical block 51
[  177.840090][ T6664] Buffer I/O error on device loop4, logical block 52
[  177.846851][ T6664] Buffer I/O error on device loop4, logical block 53
[  177.874474][ T6664] Buffer I/O error on device loop4, logical block 54
[  177.881247][ T6664] Buffer I/O error on device loop4, logical block 55
[  177.960440][ T6664] Buffer I/O error on device loop4, logical block 56
[  177.967219][ T6664] Buffer I/O error on device loop4, logical block 57
[  178.442028][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  178.493111][ T6661] kmmpd-loop4: attempt to access beyond end of device
[  178.493111][ T6661] loop4: rw=14337, sector=256, nr_sectors = 4 limit=64
[  178.543292][ T6661] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  178.680111][ T6700] overlayfs: failed to clone upperpath
[  178.793731][ T6702] loop2: detected capacity change from 0 to 64
[  179.162930][ T1119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.206497][ T1119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.395983][ T6687] loop5: detected capacity change from 0 to 40427
[  179.404561][ T1119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.431723][ T1119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.449902][ T6687] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  179.460167][ T6687] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  179.472002][ T6687] F2FS-fs (loop5): invalid crc value
[  179.490500][ T6687] F2FS-fs (loop5): Found nat_bits in checkpoint
[  179.625772][ T1119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.682843][ T1119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.696136][ T6687] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  179.712559][ T6687] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  179.892735][ T1119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.918656][ T6687] syz.5.819: attempt to access beyond end of device
[  179.918656][ T6687] loop5: rw=2049, sector=53248, nr_sectors = 992 limit=40427
[  179.961980][ T1119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.030950][ T6687] syz.5.819: attempt to access beyond end of device
[  180.030950][ T6687] loop5: rw=0, sector=54232, nr_sectors = 8 limit=40427
[  180.541580][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  180.553203][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  180.562088][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  180.571825][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  180.580117][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  180.587773][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  180.699076][ T4282] Bluetooth: hci4: Malformed MSFT vendor event: 0x02
[  181.540171][ T6774] 9pnet_fd: Insufficient options for proto=fd
[  181.548256][ T6745] chnl_net:caif_netlink_parms(): no params data found
[  182.083730][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'.
[  182.114073][ T6791] device erspan0 entered promiscuous mode
[  182.135130][ T6791] device macvtap1 entered promiscuous mode
[  182.217967][ T6799] device erspan0 left promiscuous mode
[  182.276531][ T6799] device macvtap1 left promiscuous mode
[  182.447968][ T6805] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  182.595985][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.639973][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.663161][ T6745] device bridge_slave_0 entered promiscuous mode
[  182.694622][ T4282] Bluetooth: hci2: command 0x0409 tx timeout
[  182.879948][ T1119] device hsr_slave_0 left promiscuous mode
[  182.890069][ T1119] device hsr_slave_1 left promiscuous mode
[  182.930632][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.955404][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.025678][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.061322][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.108895][ T1119] device bridge_slave_1 left promiscuous mode
[  183.129143][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.197178][ T1119] device bridge_slave_0 left promiscuous mode
[  183.206336][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.304418][ T1119] device veth1_macvtap left promiscuous mode
[  183.314411][ T1119] device veth0_macvtap left promiscuous mode
[  183.325452][ T1119] device veth1_vlan left promiscuous mode
[  183.353471][ T1119] device veth0_vlan left promiscuous mode
[  184.773062][ T4282] Bluetooth: hci2: command 0x041b tx timeout
[  184.915136][ T1119] team0 (unregistering): Port device team_slave_1 removed
[  184.970888][ T1119] team0 (unregistering): Port device team_slave_0 removed
[  185.031680][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.085999][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.479595][ T1119] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  185.559323][ T1119] bond0 (unregistering): Released all slaves
[  185.695265][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.716402][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.729288][ T6745] device bridge_slave_1 entered promiscuous mode
[  185.747767][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'.
[  185.789143][ T6867] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  185.798137][ T6867] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  185.807153][ T6867] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  185.816150][ T6867] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  185.827853][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'.
[  185.939306][ T6745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.971839][ T6745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.111259][ T6745] team0: Port device team_slave_0 added
[  186.142447][ T6745] team0: Port device team_slave_1 added
[  186.268347][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.282318][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.345042][ T6745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.376795][ T4315] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  186.400200][ T6891] netlink: 'syz.0.882': attribute type 1 has an invalid length.
[  186.423678][ T6891] netlink: 'syz.0.882': attribute type 1 has an invalid length.
[  186.454082][ T6891] netlink: 264 bytes leftover after parsing attributes in process `syz.0.882'.
[  186.477481][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'.
[  186.498526][ T6891] netlink: 'syz.0.882': attribute type 1 has an invalid length.
[  186.506253][ T6891] netlink: 'syz.0.882': attribute type 1 has an invalid length.
[  186.556431][ T6891] netlink: 264 bytes leftover after parsing attributes in process `syz.0.882'.
[  186.578397][ T4315] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.600527][ T4315] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  186.616557][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'.
[  186.635711][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.656761][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.663793][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.694418][ T4315] usb 3-1: config 0 descriptor??
[  186.720659][ T4315] pwc: Askey VC010 type 2 USB webcam detected.
[  186.786673][ T6745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.800246][ T6905] overlayfs: failed to clone upperpath
[  186.846476][ T4282] Bluetooth: hci2: command 0x040f tx timeout
[  187.027789][ T6914] overlayfs: failed to clone upperpath
[  187.040788][ T6745] device hsr_slave_0 entered promiscuous mode
[  187.061061][ T6745] device hsr_slave_1 entered promiscuous mode
[  187.074926][ T6745] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.086086][ T6745] Cannot create hsr debugfs directory
[  187.130253][ T4315] pwc: recv_control_msg error -32 req 02 val 2b00
[  187.156569][ T4315] pwc: recv_control_msg error -32 req 02 val 2700
[  187.190815][ T4315] pwc: recv_control_msg error -32 req 02 val 2c00
[  187.217203][ T4315] pwc: recv_control_msg error -32 req 04 val 1000
[  187.426082][ T4315] pwc: recv_control_msg error -71 req 04 val 1400
[  187.440641][ T4315] pwc: recv_control_msg error -71 req 02 val 2000
[  187.463282][ T4315] pwc: recv_control_msg error -71 req 02 val 2100
[  187.491684][ T4315] pwc: recv_control_msg error -71 req 04 val 1500
[  187.518919][ T4315] pwc: recv_control_msg error -71 req 02 val 2500
[  187.543362][ T4315] pwc: recv_control_msg error -71 req 02 val 2400
[  187.567408][ T4315] pwc: recv_control_msg error -71 req 02 val 2600
[  187.607128][ T4315] pwc: recv_control_msg error -71 req 02 val 2900
[  187.636668][ T4315] pwc: recv_control_msg error -71 req 02 val 2800
[  187.668545][ T4315] pwc: recv_control_msg error -71 req 04 val 1100
[  187.693558][ T4315] pwc: recv_control_msg error -71 req 04 val 1200
[  187.713812][ T4315] pwc: Registered as video103.
[  187.739804][ T6745] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  187.749875][ T4315] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5
[  187.772232][ T4315] usb 3-1: USB disconnect, device number 8
[  187.839086][ T6745] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  187.979613][ T6745] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  188.023752][ T6745] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  188.390278][ T6745] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.443357][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.454123][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.463552][ T6950] overlayfs: failed to clone upperpath
[  188.499511][ T6745] 8021q: adding VLAN 0 to HW filter on device team0
[  188.553542][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  188.577499][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  188.601869][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.609132][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.646204][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  188.670333][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  188.697025][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.704290][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.750866][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  188.773513][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  188.882583][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  188.911628][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  188.926549][ T4282] Bluetooth: hci2: command 0x0419 tx timeout
[  188.975847][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  189.029074][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  189.043302][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  189.052595][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  189.074776][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  189.110493][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  189.147225][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  189.160780][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  189.197838][ T6745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  189.207085][ T6969] netlink: 'syz.1.902': attribute type 1 has an invalid length.
[  189.519436][   T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.647364][ T6980] fuse: Bad value for 'fd'
[  189.699857][   T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.736730][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'.
[  189.834879][   T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.948550][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  189.956141][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  190.063958][   T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.123689][ T6992] overlayfs: failed to clone upperpath
[  190.125719][ T6745] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.148259][   T26] audit: type=1326 audit(1776394990.224:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.2.909" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7c739c819 code=0x0
[  190.325957][ T6998] fuse: Bad value for 'fd'
[  190.521292][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  190.533164][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  190.544904][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  190.553467][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  190.564972][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  190.566883][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'.
[  190.587782][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  190.648176][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'.
[  190.846812][ T7011] overlayfs: failed to clone upperpath
[  190.870338][ T7011] overlayfs: failed to clone upperpath
[  191.284222][ T7003] chnl_net:caif_netlink_parms(): no params data found
[  191.336544][ T4286] Bluetooth: hci3: command 0x0406 tx timeout
[  191.347104][ T4286] Bluetooth: hci4: command 0x0406 tx timeout
[  191.374988][ T7025] loop2: detected capacity change from 0 to 1024
[  191.438219][ T7025] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  191.535472][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  191.583935][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  191.702916][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  191.738991][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  191.800554][ T4266] EXT4-fs (loop2): unmounting filesystem.
[  191.987741][ T6745] device veth0_vlan entered promiscuous mode
[  191.998472][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  192.010102][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  192.119082][ T6745] device veth1_vlan entered promiscuous mode
[  192.132627][ T7041] netlink: 'syz.2.918': attribute type 10 has an invalid length.
[  192.155003][ T7041] device syz_tun entered promiscuous mode
[  192.193792][ T7041] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  192.213604][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.225437][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.243019][ T7003] device bridge_slave_0 entered promiscuous mode
[  192.301912][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  192.320734][ T7003] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.333199][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.360146][ T7003] device bridge_slave_1 entered promiscuous mode
[  192.498404][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  192.517258][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  192.619892][ T4286] Bluetooth: hci1: command 0x0409 tx timeout
[  192.687471][ T6745] device veth0_macvtap entered promiscuous mode
[  192.708536][ T7003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.722992][ T7057] device vlan2 left promiscuous mode
[  192.744181][ T7057] bridge0: port 3(vlan2) entered disabled state
[  192.765287][ T7057] device bridge_slave_1 left promiscuous mode
[  192.771989][ T7057] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.788834][ T7057] device bridge_slave_0 left promiscuous mode
[  192.795369][ T7057] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.897061][ T6745] device veth1_macvtap entered promiscuous mode
[  192.906237][ T7003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.035773][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.047080][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.060698][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  193.080002][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.095066][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.117352][ T7003] team0: Port device team_slave_0 added
[  193.125830][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  193.144027][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  193.166106][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  193.187083][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  193.208767][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.240420][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.250914][ T6745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.261972][ T6745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.289957][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.308848][ T7003] team0: Port device team_slave_1 added
[  193.374319][   T35] device hsr_slave_0 left promiscuous mode
[  193.403997][   T35] device hsr_slave_1 left promiscuous mode
[  193.426572][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.443634][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  193.461980][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.497993][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  193.524798][   T35] device team0 left promiscuous mode
[  193.536014][   T35] device team_slave_0 left promiscuous mode
[  193.546988][   T35] device team_slave_1 left promiscuous mode
[  193.554638][   T35] device bond0 left promiscuous mode
[  193.560426][   T35] device bond_slave_0 left promiscuous mode
[  193.567468][   T35] device bond_slave_1 left promiscuous mode
[  193.574457][   T35] bridge0: port 3(team0) entered disabled state
[  193.586510][   T35] device bridge_slave_1 left promiscuous mode
[  193.595875][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.621821][   T35] device bridge_slave_0 left promiscuous mode
[  193.635810][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.695024][   T35] device veth1_macvtap left promiscuous mode
[  193.701498][   T35] device veth0_macvtap left promiscuous mode
[  193.710284][   T35] device veth1_vlan left promiscuous mode
[  193.720691][   T35] device veth0_vlan left promiscuous mode
[  194.374525][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.381824][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.635892][   T35] team0 (unregistering): Port device team_slave_1 removed
[  194.690304][   T35] team0 (unregistering): Port device team_slave_0 removed
[  194.696828][ T4286] Bluetooth: hci1: command 0x041b tx timeout
[  194.740940][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.792759][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.141371][   T35] team0 (unregistering): Port device bond0 removed
[  195.183013][   T35] bond0 (unregistering): Released all slaves
[  195.286248][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  195.295488][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  195.307102][ T6745] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.316058][ T6745] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.325366][ T6745] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.345795][ T6745] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.392258][ T7097] device vxcan1 entered promiscuous mode
[  195.454190][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.462232][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.528447][ T7003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.562885][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.587131][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.660037][ T7003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.828718][ T7108] loop2: detected capacity change from 0 to 512
[  195.832482][ T7003] device hsr_slave_0 entered promiscuous mode
[  195.870178][ T7003] device hsr_slave_1 entered promiscuous mode
[  195.878384][ T7108] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  195.964447][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.995909][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.019965][ T7108] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00)
[  196.050633][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  196.181805][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.246762][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.316025][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  196.662769][ T7003] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  196.712365][ T7003] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  196.748439][ T7003] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  196.766658][ T4286] Bluetooth: hci1: command 0x040f tx timeout
[  196.811986][ T7003] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  196.883272][ T7135] loop2: detected capacity change from 0 to 128
[  196.976878][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  196.979324][ T7137] overlayfs: failed to clone upperpath
[  196.996531][ T7135] FAT-fs (loop2): Filesystem has been set read-only
[  197.045869][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.095956][ T7137] overlayfs: failed to clone upperpath
[  197.098950][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.141613][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.141800][ T7003] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.188072][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.211985][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  197.225956][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.230856][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  197.253651][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.293641][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.319838][ T7003] 8021q: adding VLAN 0 to HW filter on device team0
[  197.324922][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.343986][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  197.363212][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  197.383472][ T7151] loop6: detected capacity change from 0 to 1024
[  197.386537][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.412659][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.419864][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.449893][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.481339][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.488860][ T7151] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  197.499384][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  197.546360][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  197.573217][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.610030][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  197.636515][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.692419][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.699872][ T4320] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.731916][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.764040][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  197.772410][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.799090][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.816145][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.826890][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.829242][ T6745] EXT4-fs (loop6): unmounting filesystem.
[  197.835800][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.867060][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  197.877043][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  197.895156][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.914256][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  197.930626][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  197.963666][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  197.979204][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.015381][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.029941][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  198.045027][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.056615][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  198.085374][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.109530][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  198.132577][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.147520][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  198.156665][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.205047][ T7003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  198.239971][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.255929][ T7003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  198.265476][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.287132][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  198.294971][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.315277][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.316160][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  198.347366][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.366225][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.416865][ T7135] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.461029][   T26] audit: type=1800 audit(1776394998.534:215): pid=7135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.942" name="file1" dev="loop2" ino=1048673 res=0 errno=0
[  198.631088][ T7135] syz.2.942 (7135) used greatest stack depth: 19792 bytes left
[  198.847963][ T4286] Bluetooth: hci1: command 0x0419 tx timeout
[  199.169457][ T7194] loop2: detected capacity change from 0 to 7
[  199.199760][ T7194] Dev loop2: unable to read RDB block 7
[  199.205417][ T7194]  loop2: AHDI p1 p2 p3
[  199.240180][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  199.248741][ T7194] loop2: partition table partially beyond EOD, truncated
[  199.268138][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  199.279550][ T7194] loop2: p1 start 1818582900 is beyond EOD, truncated
[  199.301963][ T7003] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.316026][ T7194] loop2: p3 start 335544320 is beyond EOD, truncated
[  200.868004][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  200.903234][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  200.973878][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  201.001633][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  201.037983][ T7003] device veth0_vlan entered promiscuous mode
[  201.046898][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  201.073562][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  201.085666][ T7236] loop2: detected capacity change from 0 to 7
[  201.113621][ T7003] device veth1_vlan entered promiscuous mode
[  201.132107][ T7236]  loop2:
[  201.136020][ T7236] loop2: partition table partially beyond EOD, truncated
[  201.215863][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  201.230288][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  201.245212][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  201.262800][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  201.284731][ T7003] device veth0_macvtap entered promiscuous mode
[  201.321150][ T7003] device veth1_macvtap entered promiscuous mode
[  201.422180][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.469925][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.501802][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.546395][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.587356][ T7003] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.595120][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  201.607690][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  201.634285][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  201.650578][ T7245] overlayfs: failed to clone upperpath
[  201.666340][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  201.701930][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.731082][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.763235][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.801446][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.832398][ T7003] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.848398][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  201.890491][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  201.925033][ T7003] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.940934][ T7003] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.960083][ T7003] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.980428][ T7003] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.197486][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.219346][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.269495][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  202.307175][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.329104][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.360788][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  202.706161][ T7274] loop6: detected capacity change from 0 to 128
[  202.762253][ T7274] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  202.779020][ T7274] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  202.786463][  T950] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  202.877019][ T7274] fscrypt: key with descriptor e8dab99234bb312e is too short (got 17 bytes, need 32+ bytes)
[  203.036934][ T6745] EXT4-fs (loop6): unmounting filesystem.
[  203.067626][  T950] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  203.075715][  T950] usb 8-1: config 0 has no interface number 0
[  203.119603][  T950] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  203.150335][  T950] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.208551][  T950] usb 8-1: config 0 descriptor??
[  203.227673][ T7285] netlink: 'syz.1.982': attribute type 10 has an invalid length.
[  203.242793][  T950] cp210x 8-1:0.1: cp210x converter detected
[  203.302318][ T7285] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  203.348164][ T7285] team0: Failed to send options change via netlink (err -105)
[  203.376953][ T7285] team0: Port device dummy0 added
[  203.618557][  T950] cp210x 8-1:0.1: failed to get vendor val 0x000e size 3: -32
[  203.775456][ T7307] loop2: detected capacity change from 0 to 128
[  203.833031][  T950] usb 8-1: cp210x converter now attached to ttyUSB0
[  203.865648][ T7307] EXT4-fs: Ignoring removed nobh option
[  203.868574][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'.
[  203.980899][ T7307] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  204.016753][ T7307] ext4 filesystem being mounted at /195/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  204.034070][  T950] usb 8-1: USB disconnect, device number 2
[  204.058805][  T950] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  204.085826][  T950] cp210x 8-1:0.1: device disconnected
[  204.266206][ T4266] EXT4-fs (loop2): unmounting filesystem.
[  204.445471][ T7326] netlink: 'syz.2.993': attribute type 39 has an invalid length.
[  204.849016][ T7337] loop7: detected capacity change from 0 to 1024
[  204.883956][ T7337] EXT4-fs: Ignoring removed orlov option
[  205.003199][ T7337] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  205.541134][ T7003] EXT4-fs (loop7): unmounting filesystem.
[  205.625730][ T7345] overlayfs: failed to clone upperpath
[  207.213359][ T7403] loop6: detected capacity change from 0 to 1024
[  207.246712][   T14] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  207.261971][ T7403] EXT4-fs: quotafile must be on filesystem root
[  207.467766][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.491273][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.525204][   T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  207.597337][   T14] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  207.638744][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.691492][   T14] usb 3-1: config 0 descriptor??
[  207.944577][ T7427] overlayfs: failed to clone upperpath
[  208.133974][   T14] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  208.159650][   T14] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  208.190024][   T14] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  208.210374][   T14] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  208.233868][   T14] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  208.313452][   T14] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  208.427629][   T14] usb 3-1: USB disconnect, device number 9
[  208.556854][ T7448] sock: sock_set_timeout: `syz.7.1034' (pid 7448) tries to set negative timeout
[  208.694516][ T7446] fido_id[7446]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  209.872244][ T7495] "syz.1.1046" (7495) uses obsolete ecb(arc4) skcipher
[  210.493681][ T7523] loop6: detected capacity change from 0 to 512
[  210.497078][ T7520] overlayfs: failed to clone upperpath
[  210.536354][   T22] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  210.600472][ T7523] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #11: comm syz.6.1055: ea_inode with extended attributes
[  210.630764][ T7523] EXT4-fs (loop6): Remounting filesystem read-only
[  210.639409][ T7523] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1055: error while reading EA inode 11 err=-117
[  210.667139][ T7523] EXT4-fs (loop6): Remounting filesystem read-only
[  210.667829][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1059'.
[  210.674398][ T7523] EXT4-fs (loop6): 1 orphan inode deleted
[  210.690270][ T7523] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  210.716394][   T22] usb 8-1: Using ep0 maxpacket: 32
[  210.723521][   T22] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.766157][   T22] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.793859][   T22] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  210.812049][   T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.824374][   T22] usb 8-1: config 0 descriptor??
[  210.860447][   T22] hub 8-1:0.0: USB hub found
[  210.985726][ T6745] EXT4-fs (loop6): unmounting filesystem.
[  211.076958][   T22] hub 8-1:0.0: 1 port detected
[  211.583934][ T7555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1065'.
[  211.635619][ T7556] netlink: 'syz.0.1064': attribute type 2 has an invalid length.
[  211.676902][ T7556] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1064'.
[  211.710867][ T4335] hub 8-1:0.0: activate --> -90
[  212.035638][ T7571] 9pnet: p9_errstr2errno: server reported unknown error ��_acl_default
[  212.114874][ T4335] usb 8-1-port1: cannot disable (err = -71)
[  212.123668][ T4315] usb 8-1: USB disconnect, device number 3
[  212.202992][ T7576] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  212.230106][ T7576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  212.258940][ T7576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  212.303339][ T7576] device bridge_slave_0 left promiscuous mode
[  212.338808][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.397711][ T7576] device bridge_slave_1 left promiscuous mode
[  212.404138][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.440313][ T7576] bond0: (slave bond_slave_0): Releasing backup interface
[  212.471468][ T7576] bond0: (slave bond_slave_1): Releasing backup interface
[  212.634959][ T7576] team0: Port device team_slave_0 removed
[  212.697254][ T7576] team0: Port device team_slave_1 removed
[  212.703953][ T7576] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.800164][ T7576] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.826113][ T7576] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.850196][ T7576] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.883594][ T7576] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  212.894753][ T7576] batman_adv: batadv0: Removing interface: ip6gretap1
[  213.184310][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1083'.
[  213.916632][   T14] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  214.106449][   T14] usb 8-1: Using ep0 maxpacket: 8
[  214.115297][   T14] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.149182][   T14] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.182544][   T14] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  214.226595][   T14] usb 8-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  214.256504][   T14] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.285599][   T14] usb 8-1: config 0 descriptor??
[  214.710635][   T14] dragonrise 0003:0079:0006.0005: unbalanced collection at end of report description
[  214.741193][   T14] dragonrise 0003:0079:0006.0005: parse failed
[  214.758190][   T14] dragonrise: probe of 0003:0079:0006.0005 failed with error -22
[  214.888161][ T7639] loop6: detected capacity change from 0 to 32768
[  214.915253][   T14] usb 8-1: USB disconnect, device number 4
[  214.995222][ T7639] (syz.6.1095,7639,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  215.021762][ T7639] (syz.6.1095,7639,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  215.138100][ T7639] JBD2: Ignoring recovery information on journal
[  215.245338][ T7639] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  215.599539][ T7668] OCFS2: ERROR (device loop6): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 28 has invalid next free chain record 48456, but only 14434 total
[  215.694654][ T7673] overlayfs: failed to clone upperpath
[  215.726475][ T7668] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  215.766363][ T7668] OCFS2: Returning error to the calling process.
[  215.783006][ T7668] (syz.6.1095,7668,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -5
[  215.823479][ T7668] (syz.6.1095,7668,1):ocfs2_claim_new_inode:2226 ERROR: status = -5
[  215.860041][ T7668] (syz.6.1095,7668,1):ocfs2_claim_new_inode:2241 ERROR: status = -5
[  215.888075][ T7668] (syz.6.1095,7668,1):ocfs2_mknod_locked:639 ERROR: status = -5
[  215.929560][ T7668] (syz.6.1095,7668,1):ocfs2_mknod:385 ERROR: status = -5
[  215.970563][ T7668] (syz.6.1095,7668,1):ocfs2_mknod:502 ERROR: status = -5
[  216.007487][ T7668] (syz.6.1095,7668,1):ocfs2_create:676 ERROR: status = -5
[  216.309096][ T6745] ------------[ cut here ]------------
[  216.315579][ T6745] kernel BUG at fs/ocfs2/journal.c:1001!
[  216.351732][ T6745] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  216.357937][ T6745] CPU: 0 PID: 6745 Comm: syz-executor Not tainted syzkaller #0
[  216.365548][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  216.375649][ T6745] RIP: 0010:ocfs2_journal_toggle_dirty+0x34a/0x350
[  216.382206][ T6745] Code: fe ff ff e8 e8 31 e7 06 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 3f fe ff ff 48 89 df e8 90 bd 8c fe e9 32 fe ff ff e8 56 b1 3b fe <0f> 0b 0f 1f 40 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4
[  216.401865][ T6745] RSP: 0018:ffffc900031b7a60 EFLAGS: 00010293
[  216.408061][ T6745] RAX: ffffffff8346c3fa RBX: 00000000ffffffff RCX: ffff888024953b80
[  216.416340][ T6745] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  216.424354][ T6745] RBP: ffffc900031b7b10 R08: ffffffff90af931f R09: 1ffffffff215f263
[  216.432365][ T6745] R10: dffffc0000000000 R11: fffffbfff215f264 R12: 1ffff1100aa7365c
[  216.440459][ T6745] R13: ffff888028d75a00 R14: ffff888023c24800 R15: ffff88805539b2e0
[  216.448561][ T6745] FS:  00005555761b0500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  216.457698][ T6745] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  216.464291][ T6745] CR2: 00002000000002c0 CR3: 000000005e8d6000 CR4: 00000000003506f0
[  216.472290][ T6745] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  216.480273][ T6745] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  216.488277][ T6745] Call Trace:
[  216.491582][ T6745]  <TASK>
[  216.494540][ T6745]  ? ocfs2_journal_shutdown+0xc20/0xc20
[  216.500295][ T6745]  ? _raw_write_unlock+0x24/0x40
[  216.505249][ T6745]  ? jbd2_journal_unlock_updates+0x80/0xe0
[  216.511206][ T6745]  ocfs2_journal_shutdown+0x56c/0xc20
[  216.516873][ T6745]  ? ocfs2_journal_init+0xdb0/0xdb0
[  216.522093][ T6745]  ? __kmem_cache_free+0xb6/0x1f0
[  216.527136][ T6745]  ? ocfs2_release_system_inodes+0x426/0x480
[  216.533129][ T6745]  ocfs2_dismount_volume+0x3f4/0x940
[  216.538423][ T6745]  ? ocfs2_enable_quotas+0x490/0x490
[  216.543725][ T6745]  ? clear_inode+0x150/0x150
[  216.548328][ T6745]  ? ocfs2_free_inode+0x20/0x20
[  216.553192][ T6745]  generic_shutdown_super+0x130/0x340
[  216.558605][ T6745]  kill_block_super+0x7c/0xe0
[  216.563657][ T6745]  deactivate_locked_super+0x93/0xf0
[  216.568951][ T6745]  cleanup_mnt+0x42c/0x4b0
[  216.573409][ T6745]  ? lockdep_hardirqs_on+0x94/0x140
[  216.578619][ T6745]  task_work_run+0x1d0/0x260
[  216.583227][ T6745]  ? task_work_cancel+0x220/0x220
[  216.588273][ T6745]  ? exit_to_user_mode_loop+0x3b/0x110
[  216.593841][ T6745]  exit_to_user_mode_loop+0xe6/0x110
[  216.599141][ T6745]  exit_to_user_mode_prepare+0xee/0x180
[  216.604798][ T6745]  syscall_exit_to_user_mode+0x16/0x40
[  216.610281][ T6745]  do_syscall_64+0x58/0xa0
[  216.614714][ T6745]  ? clear_bhb_loop+0x60/0xb0
[  216.619404][ T6745]  ? clear_bhb_loop+0x60/0xb0
[  216.624090][ T6745]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  216.630018][ T6745] RIP: 0033:0x7face3b9da57
[  216.634444][ T6745] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  216.654071][ T6745] RSP: 002b:00007ffcd3475de8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  216.662582][ T6745] RAX: 0000000000000000 RBX: 00007face3c32048 RCX: 00007face3b9da57
[  216.670588][ T6745] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd3475ea0
[  216.678568][ T6745] RBP: 00007ffcd3475ea0 R08: 00007ffcd3476ea0 R09: 00000000ffffffff
[  216.686551][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd3476f30
[  216.694529][ T6745] R13: 00007face3c32048 R14: 0000000000034a39 R15: 00007ffcd3476f70
[  216.702513][ T6745]  </TASK>
[  216.705539][ T6745] Modules linked in:
[  216.728083][ T7693] netlink: 'syz.7.1109': attribute type 10 has an invalid length.
[  216.778548][ T7693] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  216.822624][ T6745] ---[ end trace 0000000000000000 ]---
[  216.844309][ T6745] RIP: 0010:ocfs2_journal_toggle_dirty+0x34a/0x350
[  216.852903][ T6745] Code: fe ff ff e8 e8 31 e7 06 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 3f fe ff ff 48 89 df e8 90 bd 8c fe e9 32 fe ff ff e8 56 b1 3b fe <0f> 0b 0f 1f 40 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4
[  216.888462][ T6745] RSP: 0018:ffffc900031b7a60 EFLAGS: 00010293
[  216.894798][ T6745] RAX: ffffffff8346c3fa RBX: 00000000ffffffff RCX: ffff888024953b80
[  216.903568][ T6745] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  216.913411][ T6745] RBP: ffffc900031b7b10 R08: ffffffff90af931f R09: 1ffffffff215f263
[  216.922481][ T6745] R10: dffffc0000000000 R11: fffffbfff215f264 R12: 1ffff1100aa7365c
[  216.935152][ T6745] R13: ffff888028d75a00 R14: ffff888023c24800 R15: ffff88805539b2e0
[  216.943731][ T6745] FS:  00005555761b0500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  216.954858][ T6745] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  216.963351][ T6745] CR2: 00007f35bd9ea6b0 CR3: 000000005e8d6000 CR4: 00000000003506f0
[  216.972824][ T6745] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  216.981413][ T6745] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  216.990888][ T6745] Kernel panic - not syncing: Fatal exception
[  216.997540][ T6745] Kernel Offset: disabled
[  217.001870][ T6745] Rebooting in 86400 seconds..