last executing test programs:

3m45.260892s ago: executing program 3 (id=141):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESOCT], 0xfe, 0x677, &(0x7f0000000c00)="$eJzs3UtvG9fdx/HfUNT1AYwHbREYhmOd2A0goy5NUrECwV2UHQ6lSUkOMUMV0ipwYykwTDmt7QK1Nqk2vQDtG+gumyz6Igp0nXXfQJcFgnZXoBsWc+NFnBFp3ew234+Q8HDOf+b85+I5GpFzRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJZdL5crlppue2fX5LPrvtc6pT5e2rzuxoW7U9uVrPA/LS3pejzp+neG1e+E/7utm/G7m1oKX5Z09H/v/P/DbxcL6fynJHQWet0Fvnh19PRRr7f//Gyt9a2zzHcpJjJRYYa5tpy2G3huq7blGDfwzObGRvn+diMwDbfpBHtB12kZ23cKXc83a/ZdU9ncXDdOac/baW/Va00nnfjh96vl8ob5aDHZ/fc/KgX2tttsuu2tKCasDmMWB0eIU2sZc/Ckt78+LckwqDJLUHVaULVcrVYq1Wpl48Hmgw/L5eLEhPIJmogYHrRvz87HVbqgMzdwfoWw//+bJTW1pLZ2tCuT+WOrLl+eWjn1ibT/f/++c2q7o/1/2stfH1bfUNT/34rf3crr/3NyMTLRDFk1Vs70s/280Csd6akeqaee9vX8Ypa7enEZXu7PllSUXAXy5KqlmrbkyCRTjDa1oQ2V9bG21VAgo4ZcNeUo0J4CdeWoFe0TX45q6sqTL6M12boro4o2tal1GTkqaU+edtTWluqq6V/9fv9AT6Ltvn5KjkqDKrMEFQfH4GRQXv//08/jOV6v/8f/nsGxM0MM8Mb1k+v/fHNZE1cvLyMAAAAAAHDRrOiv71b02f27kvpquE2n/KbTAgAAAAAAFyj65P9m+DIflt6VlXP937/63AAAAAAAwMWwonvsLEkr0Zf6reGdULN8CSDz5gAAAAAAAPB2iT7/v7Ug9aOh1VZlvdb1PwAAAAAA+C/w25Ex9ovpGLv99GP9gqSgs2j9+R+L8uet487ud63DWlhTO0xiJr4B0G3csIqKB+qNxutdkBS9s52bVjI+cDIIphUP7Ct9fTBtrH/LP5HAwlz654uMBK4djSSwUUze6fd6L455L2n38VFBUU3cykrDbTol22s+rKhWu1boOrvdXzx78kvJH6znwZPefumTz3qPo1yOw0nHh2Een4+lU5iWy8tovIXonousNV5WI23yd+3WihW1W07Xf061w8JoQ7Ot/691O465vRK/rhyle0DWr5JCpRTtsuHaR6NDWMMsKifXPGtH5GSxFGVxJ465s3Ynfknzi/fC0vfmpGppch/4o1lUR7OYvi2sf05siylZhMfCepjFX8IF5WSx/npZTOwRAHhTDoa9UDSI+eQY+yf73Yyz3HLymnuWm967/3C8lZd/7Mc3HM5JRfUXk+6ln9+vKDyjr8VhC/Eo7sUbGWf0ctKvLCnnjF4+R+8WtvWn4TOQkqfVJDXFQRb/7vf7DytRu3840at+Ec7wRW67QbM6F27C+y8PfxYNgB/6dP/T/WfV6vpG+YNy+UFV89FqJC/0PQCADNOfsTMesTTszwZ99weDq+rHf38/Lo31u98afKWgpE/0mXp6rHvpIwRWs9tdGfkawr3Jq9YwNvqtYzy2onu5V3VRXzoSWx3EziudZfz3hWHs+mXvBgAArtTtKf3wyf4/69r9XnrdvXYj87p7vC8/+YTgvNjKFW8JAAC+ORz/a2ul+xvL993Ox5XNzUqtu+0Y37N/bHy3vuUYt911fHu71t5yTMf3up7tNU3H16JbdwIT7HQ6nt81Dc83HS9wd6Mnv5vk0e+B06q1u64ddJpOLXCM7bW7Nbtr6m5gm87Oj5pusO340cxBx7HdhmvXuq7XNoG3LNspGRM4zkigW3faXbfhhsW26fhuq+bvmZ94zZ2WY+pOYPtup+vFC0zbctsNz29Fiy2pf9qDDgEA+MZ48ero6aNeb//5KYVjxYX0+2hJ1VcZwQtZC3zDqwgAAE6glwYAAAAAAAAAAAAAAAAAAAAA4O03y/1/pxbSmwLTKfPKCJYGU35+baYlWxpO+fKv58rwDIXCySnJSLv96bN/FReKWTHLYWFBUi/d/KMxx1MTm8uYK6+wOtOaKi4UL34bLktZR8KlFX5wMH4cTsSElZlVi4OtWjz/P4eswrMvc6qmH1GL49tw4bQVHC8UJT1fOMcuuNrzEICr958AAAD//7gMOck=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001f80)=""/4092, 0x100)

3m44.388709803s ago: executing program 3 (id=144):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006)

3m42.871996353s ago: executing program 3 (id=153):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(0x3)
write(r0, &(0x7f0000000240)="94", 0x1)

3m42.361710556s ago: executing program 3 (id=157):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1d4, &(0x7f00000006c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1000, 0x0)
getdents(r0, 0x0, 0x0)

3m41.570911968s ago: executing program 3 (id=163):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000380)={'syztnl0\x00', <r1=>0x0, 0x0, 0x7c7, 0x7ff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', r1, 0x0, 0x700, 0x4000000, 0xfffffffe, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffd, 0x0, 0x1, 0x4, 0x0, @private=0xa014101, @dev={0xac, 0x14, 0x14, 0x14}}}}})

3m40.819209233s ago: executing program 3 (id=167):
r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)=[{{}, {<r1=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={r1, &(0x7f0000000040)=[{}, {0x80000000, <r2=>0x0}], 0x0})
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000380)={{0x80000000, 0x0, 0x2, [0x1, 0x1]}, {r1, r2, 0x7, [0xa, 0x10000006]}, 0x10000000, [0x10, 0x80003ff]})

3m38.888613678s ago: executing program 32 (id=167):
r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)=[{{}, {<r1=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={r1, &(0x7f0000000040)=[{}, {0x80000000, <r2=>0x0}], 0x0})
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000380)={{0x80000000, 0x0, 0x2, [0x1, 0x1]}, {r1, r2, 0x7, [0xa, 0x10000006]}, 0x10000000, [0x10, 0x80003ff]})

2m23.198522708s ago: executing program 0 (id=599):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f0000000240)=[{0xe, 0x44f2}]})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000})

2m22.793998433s ago: executing program 0 (id=603):
syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000240)='./file2\x00', 0x22208c8e, &(0x7f0000000000)=ANY=[], 0x1, 0x1526, &(0x7f000000a000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x82)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
getdents64(r0, &(0x7f0000000840)=""/4096, 0x1000)

2m22.089948968s ago: executing program 0 (id=608):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000007f000014001a80100005800c000680080001"], 0x34}, 0x1, 0x0, 0x0, 0x40040d8}, 0x0)

2m21.639804104s ago: executing program 0 (id=611):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f00000002c0)=0x700)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

2m20.629895771s ago: executing program 0 (id=616):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20c})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})

2m19.572079806s ago: executing program 0 (id=619):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x40810, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4000000)

2m17.462437216s ago: executing program 33 (id=619):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x40810, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4000000)

22.891825668s ago: executing program 5 (id=1292):
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x32, 0x1, 0x2000)
msgrcv(r0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000)
msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0xa0, 0x800)

21.68759615s ago: executing program 5 (id=1298):
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0)

21.098275126s ago: executing program 5 (id=1303):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000014000200626f6e64300000000000f97300000000090001007379"], 0x43}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

20.737821563s ago: executing program 5 (id=1307):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nodioread_nolock}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$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")
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00')

19.896083339s ago: executing program 5 (id=1315):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x163002, 0x0)
r0 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xd1d0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0)

18.171861246s ago: executing program 1 (id=1328):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)

17.616919505s ago: executing program 1 (id=1332):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)

16.944101875s ago: executing program 1 (id=1335):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20)

16.583700319s ago: executing program 1 (id=1338):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000180), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x1, 0xe}, {0x0, 0x4}]}]}, {0x0, [0x61]}}, &(0x7f0000000f40)=""/4089, 0x43, 0xff9, 0x1}, 0x28)

16.131186057s ago: executing program 1 (id=1340):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$eJzs3c9rXFsdAPDvzCR5SZtn33uKvFfBFirUHzSTH0gTFcSVuiiIBTcKNSbTWDPphMykNqFgqrsuXIiiIC7c+xe4sStLQVwrbl1Ji9YIVSpcmTtz00kyk041mfHlfj4wnXvnTOd7ziTfkzPnnjs3gNy62PynEDEZEb+PiHOt3f1PuNi62312b6l5K0SSXP9rIX1ecz97avb/zkbETkSMR8RXvxjxrcLhuPWt7dXFarWy0d4vN9bWy/Wt7Su31hZXKiuV2zPzVxcW5qfnZheOra0PfvidB9d+/eWxXz3/wZNHP/rtb5rVmmyXdbbjOLWaPhpvdzw2EhGfO4lgQ1Bqt2di2BXhv9L8+X0wIi6l+X8uSulPsz8vTrRmwElLkiT5d/JGr+KdBDi1iukYuFCciojWdrE4NdUaw38ozhSrtXrjUzdrm7eXW2Plt2K0ePNWtTLd/qzwVowWmvsz6fbL/dkD+3MR6Rj4x6WJdH9qqVZdHmxXBxxw9kD+/6PUyn8gJ/r/yA+cNvIf8kv+Q37Jf8gv+Q/5Jf8hv+Q/5Jf8h/yS/5Bfnfmfncj15pDqAgzWUX//xwZYD2CgvnLtWvOWZOe/L9/Z2lyt3bmyXKmvTq1tLk0t1TbWp1ZqtZX0nJ21V71etVZbn/l0bN4tNyr1Rrm+tX1jrbZ5u3EjPa//RmV0IK0C+vH2hYd/LETEzmcm0lt0/MmXq3C6JUkhhn0OMjAcpWF3QMDQOPQH+fUan/F7fkkY8P7W5St694yf7Vn0+Vg/keoAA1A8qvDF48FVBBi4y+85/gd5Zf4f8sv8P+TXK8b4hgeQA0fN/0f7Wn5d9Tv///z16gOcvCPn/4FTbbLL9b+SJPnemx3X7pqOiA9ExB9Ko29k1/oCToPiXwrt8f/lcx+bPFg6VvhnOgcwFhHf/fn1n95dbDQ2ZpqP/23v8cbP2o/PDqP+QG/7Z/iyPM3yGADIr91n95ay2yDjPv1CaxHC4fgj7bnJ8XQEc2a3sG+tQuGY1i7s3I+Id7vFL7Svd9468nFmt3Qo/jvt+0LrJdL6jqTXTR9M/Pc64n+0I/75//ldgXx42Ox/prvlXzHN6djLv/39z+QxrY/O+r9szXVn/Kz/K/Xo/y70GePbv/h+t8O76WLvp/cjznftf7N442msg/GbdbvcZ/wn3/jah3uVJb9svU63+JnmVrmxtl6ub21fuZXVYv7qwsL89NzsQjmdoy5nM9WHffbd3z3qFb/Z/rYe7f/TofZPtOv0iT7b/6+PPP76xSPif/xS99+/d9L7A+9/kuzV4ZN9xv/77J+/2ausGX+5x/tf7BY/stKIuT7j13/yJecOA8D/kfrW9upitVrZ6LIx2rvIhg0bg94YiQEGfVXPsTOYDgo4MS+Tftg1AQAAAAAAAAAAAPrVa/Xvw2NcTjzsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnAb/CQAA//9AntRF")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3853008, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

15.473765288s ago: executing program 5 (id=1343):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host})
pselect6(0x40, &(0x7f0000000080)={0xe, 0x9, 0x8000000000000000, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0)

14.268331078s ago: executing program 34 (id=1343):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host})
pselect6(0x40, &(0x7f0000000080)={0xe, 0x9, 0x8000000000000000, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0)

14.223610189s ago: executing program 1 (id=1347):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2008080, &(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x1, 0x5511, &(0x7f000000b2c0)="$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")

12.713841219s ago: executing program 35 (id=1347):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2008080, &(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0x1, 0x5511, &(0x7f000000b2c0)="$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")

3.573478868s ago: executing program 4 (id=1383):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0})

3.204239968s ago: executing program 6 (id=1384):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
r1 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}], 0x10)

3.148746474s ago: executing program 2 (id=1385):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211"], 0x3c}}, 0x10)

3.148330041s ago: executing program 4 (id=1386):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x24c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x204, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1e8, 0x1, [@m_simple={0x18c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x15d, 0x6, "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"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x58, 0x13, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x37b31}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x19, 0x6, "df76640d30b6ba21699aad3d084f7f7fa20bd027b7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

2.823927995s ago: executing program 2 (id=1387):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
poll(&(0x7f0000000000)=[{r1}, {r1}], 0x2, 0x5e5b)
close_range(r0, 0xffffffffffffffff, 0x0)

2.656778698s ago: executing program 6 (id=1388):
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3'])
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020)

2.104836468s ago: executing program 6 (id=1389):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000240)={&(0x7f0000000980)={{@host=0x10}, {}, 0x400, "d49e0b1f09a3e05cb898141464441748655937bb34d22f02362479246bb6372d891a3b5dafa58a6abc5a678d6874fc8fb5f8a529c6e30103484f2667c174fb6cda19ea0a9301bc3238eb816e9c3882f243bcd4bd7115b26dacf5923f060498d471cb4f789562fcda119739dd1a5b0e4e1a4a64dbd7b398bd4e7a247d81f968f2e945f293fc3860bf11f0424193fce743067d27f0ac187b44b128a4999547f73d8c35d3c2bd8b51bbc9a31123f773be89e109cc71b8ec29a539083c0cba15b0899c7181ba154c28b3c4e2ebe360ac44f942a703b9a3a37fbbefe9ae0de04a32336a6eba07b2fb6ad426d56e17291bb1a9d1fcdaa939378bab6dd2eac37b369ef163c9e0fc8039352c24d8147fcc2e2559b47066abd21a3a5f83f239a2227d17d4ca90f60ed9acc243ed38818e3883a985106b54dc157b67022525a74e8f9cb99852760359278d5d22294a70433ba4cec5147fbb09b1d0008ba76257f1c5af6b8d6bf3bcfd5a468a566a4e98fe5f264f2663b72cb421c90d8b7883ddfb5749b27a3e146f9d8538706fea61b07c6e064446337439b9d5a5dc82f6c63c57d6ba0e709b7c1b15fa8367f8e6df2cf59b0b30740ef47c5cccffce5911569591ce4ab62275964cd147e87a30cc6e71f7e40e161997cdbadcfbfb6c54e0289ac137508b7b5339414e4ab7afcc420148e37d49b664cc07c8178a3b50f566c5bdd3aa9217ef909805972bd63ee1d729b282cd866c183744b20da3227f9d43843236b571c8d3237408c266e08d0699ebd30e0820362664ab323b15d3ae9896d6120aae6ef9085f53a2b39cc31238b031476c86e6b16d7703fcbacc7269ce8622eab1cfdf82a364209ec4ac912db924bb76bc35ddf8d0e7a3aff0d08a48c07be47303b59653d9409f14dc59ac33cae5e010466f54d86772e43e3680863bb9bf10c971f16a731e601d7fcdbb91d7146e7834d89059ad522d70398c2bacf113ed791e32f933dfa23f5d6d11bfc9d9e0f04a34b0eddd99d16cd9712485e0a5c9aaf1ebf3f14d00005f8960b6145cbb7d4522692ebe1f9491f87a29ed67c5fb60f5e69bde2a758742999fc986a2dbf6199977e9b446691bf9f95d0abd84557c77ea13356c977d0f098ab9fec85acbd6447f2e6893e2fa6a0a7b272dab66e69b7def48f8b3583a53a0941fb3e4367fa8d56e05ee3b265f17ca0439fcdcea276f7f0a9bf4c2a324d7143658007cf4019e8da69ba1b7dff4383714cbcb71dfe6f1b1ac5d5e99394cb2c360ddb1889d92cd36f8fc72ac865f1c6445957b2a57c1af59ef8d2e9fe328ec2bde763d65c4dea965042f540515bf2f879d1b26309ebc1d7f76c569fa88fbe61845e96e93d3b6025b6285777e59495943596c128fdacc545263ce458bf99f57d7e5dc77f65cf650902b5b6d5af9359334759843365bf0dfb244817a40e8cc9030"}, 0x418})

2.039709904s ago: executing program 4 (id=1390):
setresuid(0xee00, 0xee01, 0xee01)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
kcmp(r1, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)

2.034265177s ago: executing program 2 (id=1391):
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x3, r0, 0x0, 0x0)
request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0)

1.547736811s ago: executing program 6 (id=1392):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000004c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[], 0x38}, 0x300}, 0x0)

1.500006192s ago: executing program 2 (id=1393):
r0 = gettid()
r1 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0)

1.237616989s ago: executing program 4 (id=1394):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11)

1.048843717s ago: executing program 6 (id=1395):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@my=0x0, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000100)={&(0x7f0000000c00)={{@host, 0x921}, {@hyper, 0x3}, 0x400, "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"}, 0x418, 0x1000e})

645.014161ms ago: executing program 2 (id=1396):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0xf)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

575.895936ms ago: executing program 4 (id=1397):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab780ef39fa3910d96072000001ea800000000fdffffff0000faffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000001700", "90be8bf4bd00000000000000000000000000001000"}})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x800004, 0x0, 0x1, 0x37, 0xd, "5046ffede9997bad8eeb68d930afb7b6e3595cd3a0558a8826c54098d138ea0cc2a1ec99d37fbbd0c26cc4e6fc7a8d7e23560124daea369ccd8b0cf87034d8bd", "177bec42528ba61285cb864a9eea82cafaf6ff6bd4dca46b616cf36b0a62798b7624e330980acf454f536e4c49ac5d108c79c97c2e4890419cd172420e7dd6c9", "df4831f9541095deccd62e26311ce105ae4c7b80a018d1d2c85b50abe3ef518f", [0x2, 0xd]})

524.24593ms ago: executing program 6 (id=1398):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000240)={[{@barrier}, {@gid}, {@nobarrier}, {@creator={'creator', 0x3d, "ff60f383"}}, {@uid}, {@nls={'nls', 0x3d, 'cp857'}}, {@force}]}, 0x1, 0x6e8, &(0x7f0000001f80)="$eJzs3U1sHGcZAOB31uu1N5XcbZq0BSHFakQEDSS2l5IgIREQQj5UKBKXXk3iNFbWbmRvkRMhsgUKRzihHHooQubQE+oBqYgDopyRkLii3CNxjziwaGZn1rtr79qb+CcJzyPNzjcz3887r2dmZ2cTbQD/txbfjslWJLF4/q3NdPnBVr3xYKu+WpQjYioiShHlziyStYjks4gr0Znic+nKvLtk2DhvPvz0w3P3P653lsr5lNUvjWq3rT1ihFY+xWxETOTzMZWH9Xdtl/7ujdV10o07TdjZInFw3No7tMZpvo/zFnja3YuYmNxlfS3iRERM5/cBkV8dSkcc3oEb6yoHAAAAT6eJvSq8+CgexWbMHE04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HxIOr8ZmORTqSjPRlL8/n8lX5eqVI453tG+ssf2D24cUSAAAAAAAAAAcCg+yb+4P/MoHsVmzBTr20n2nf/r2cKp7PWFeC82YjnW40JsxlI0oxnrMR8xOdPTYWVzqdlcn9/Z8jeRtmy32/fylgsRUdvRcuEIdhoAAAAAAAAAnl8/jcWYOe4gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgVxIx0Zll06miXItSOSKmI6KS1mtF/LkoP8v+ctwBAAAAwOGr5vOZ5L+dQjvJPvO/kn3un473Yi2asRLNaMRyXM+eBXQ+9Zf+0ao3HmzVV9NpZ8ff/vdYcWQ9RsREvD9k5Lmsxului8X4XvwgzsdsXI31WIkfxVI0Yzlmo5ruRCxFErVq5+lFrYhz93iv9C1dHYztzMDya1kk1bgRK1lsF+JaJTqPTbJ9SMd8rWe0P1YiBkZ8P81O8q3cPnN0vefv9ev8uUyu/eI++xiu/ARta9meT3YzMpfmPs/GS6NzP+ZxMjjSfJS6z6BObY+SLg6OVOT8h+Pk/EQ+T3P9i/6cH7QxH6UNZmIhSvnRF/FKf85vf/H+yf7GX/7nX6/eLK3dunlj4/wh7tKhmiwKg5mo92Ti1dFHX56JRpqJ1v4zMTm4YvoJ9uMAVfJsZJeifV4tv5uVluL1nkPw3bgey3Ep5mI+LsdcfCMWot53hJ3uy2u5vtqfk+xcK+28vlVHBH/2Sz2VfrlH5aOV5uWlnrz2Xulq2bZ8zZVfxVxPlk6OPvrGfhdIx/98Xk7H+Fn3Hedp0JeJ/NpcRPfy6Ez8tp2+bjTWbq3fXLo9pP/Bd6hz+Tw9bT/ovzb/7qD26fGkx8vJbsRZTqrF8ZJue7kbbX++Kvk3Lp12pR3bTne31WImVuL7Q8/USn4Pt7OnzrZXe7f9a/vKWcnvb4ptfXc58W40sruQAbNHk1UA9u3EGycq1YfVv1c/qv68erP61vR3pi5PfaESk38r/2niD6Xfl76ZvBEfxU9i5rgjBQAAAAAAAAAAAAAAAAAAAAAAAAAAAACA58HGnbu3lhqN5fVuIaYH1zxpoTJ0rNGFKO1ZZ+uF/XUYtYjRYyV5oXKw+/4sFqpxSD1/EhEj6lSeeIhk7GNs7EJ6IB9Ih8UPp2Vr2hNjNC8XrXavU46N6WF/wantsyBqt5Ya/2n31alGzykDPOcuNldvX9y4c/erK6tL7yy/s7y2cPnS5Uv1r89/7eKNlcbyXOf1uKMEDsPGnbsTxx0DAAAAAAAAAAAAMJ78X/83H/s/M5T3qFNZ39h95DNHvasAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAM2rx7ZhsRRLzcxfm0uUHW/VGOhXl7ZrliChFRPLjiOSziCvRmaLW010ybJw3H3764bn7H9e3+yoX9Uuj2u1PK59iNiIm8vnepnbpZmd/13r6az1WeEl3D9OEnS0SB8ftfwEAAP//p+75lw==")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfd, 0x0, &(0x7f00000000c0))
rename(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)='./file1\x00')

197.744432ms ago: executing program 2 (id=1399):
syz_usb_connect(0x4, 0x4b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d500102030109023900010000"], 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1})
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))

0s ago: executing program 4 (id=1400):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

kernel console output (not intermixed with test programs):

][ T7440] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  290.190459][ T7440] ocfs2: Unmounting device (7,0) on (node local)
[  291.768134][ T7488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.572'.
[  291.779681][ T7488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.572'.
[  292.796684][ T5867] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  292.981337][ T5867] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  292.991169][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.056945][ T5867] usb 5-1: config 0 descriptor??
[  293.186393][ T5824] Bluetooth: hci3: command 0x0406 tx timeout
[  293.195410][   T49] Bluetooth: hci2: command 0x0406 tx timeout
[  293.195945][ T5810] Bluetooth: hci1: command 0x0406 tx timeout
[  293.202408][   T49] Bluetooth: hci0: command 0x0406 tx timeout
[  293.561366][ T5867] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  293.819953][ T5867] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[  293.827529][ T5867] [drm] Initialized udl on minor 2
[  293.968098][ T7525] loop2: detected capacity change from 0 to 32768
[  294.142500][ T5867] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  294.152789][ T5867] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  294.175598][ T5893] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  294.185432][ T5893] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  294.194006][ T5893] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  294.223294][ T5867] usb 5-1: USB disconnect, device number 6
[  294.546523][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.5.595'.
[  295.342427][ T7549] loop5: detected capacity change from 0 to 512
[  295.468943][ T7556] loop1: detected capacity change from 0 to 512
[  295.490867][ T7549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.503937][ T7549] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  295.517226][ T7552] loop0: detected capacity change from 0 to 256
[  295.529660][ T7552] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  295.559630][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'.
[  295.570944][ T7562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.594'.
[  295.580610][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'.
[  295.601135][ T7562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.594'.
[  295.610731][ T7562] netlink: 'syz.2.594': attribute type 6 has an invalid length.
[  295.618679][ T7552] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  295.708575][ T7556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.722542][ T7556] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  295.816389][ T7556] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz.1.604: lblock 23 mapped to illegal pblock 18 (length 1)
[  295.847825][ T7556] EXT4-fs (loop1): Remounting filesystem read-only
[  296.013721][ T7549] __quota_error: 118 callbacks suppressed
[  296.013800][ T7549] Quota error (device loop5): do_check_range: Getting block 589828 out of range 1-5
[  296.031191][ T7549] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  296.041122][ T7549] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.602: Failed to acquire dquot type 0
[  296.105998][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.402988][ T6392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.856729][ T7577] loop0: detected capacity change from 0 to 2048
[  296.953431][ T7577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  297.351136][ T7578] loop4: detected capacity change from 0 to 4096
[  297.457840][ T5811] UDF-fs: error (device loop0): udf_read_inode: (ino 1410) failed !bh
[  297.521706][ T5811] UDF-fs: error (device loop0): udf_read_inode: (ino 1410) failed !bh
[  297.817549][ T7575] loop1: detected capacity change from 0 to 65536
[  297.865877][ T7575] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  297.975388][ T7575] XFS (loop1): Ending clean mount
[  297.986925][ T7575] XFS (loop1): Quotacheck needed: Please wait.
[  298.092697][ T7575] XFS (loop1): Quotacheck: Done.
[  298.294147][   T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.305334][   T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.332296][ T5816] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  298.618600][   T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.629786][   T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.641906][ T7584] loop5: detected capacity change from 0 to 32768
[  298.690420][ T7584] Dev loop5 SGI disklabel: csum bad, label corrupted
[  298.727164][ T7578] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  298.818225][   T30] audit: type=1800 audit(1754485881.586:137): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.612" name="file1" dev="loop4" ino=30 res=0 errno=0
[  298.840711][ T7578] ntfs3(loop4): ino=1e, "file1" attr_set_size
[  298.846580][   T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.858192][   T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.912822][ T7576] ntfs3(loop4): ino=1e, "file1" attr_set_size
[  299.051017][   T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.062024][   T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.528185][   T57] bridge_slave_1: left allmulticast mode
[  299.534127][   T57] bridge_slave_1: left promiscuous mode
[  299.540962][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.613540][   T57] bridge_slave_0: left allmulticast mode
[  299.619822][   T57] bridge_slave_0: left promiscuous mode
[  299.626611][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.348921][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.419453][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.462103][   T57] bond0 (unregistering): Released all slaves
[  301.675287][   T57] hsr_slave_0: left promiscuous mode
[  301.704084][   T57] hsr_slave_1: left promiscuous mode
[  301.711894][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  301.719871][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  301.817382][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  301.825124][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  301.859500][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  301.869681][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  301.886823][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  301.909106][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  301.934108][   T57] veth1_macvtap: left promiscuous mode
[  301.947111][   T57] veth0_macvtap: left promiscuous mode
[  301.953234][   T57] veth1_vlan: left promiscuous mode
[  301.958931][   T57] veth0_vlan: left promiscuous mode
[  301.967656][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  302.397465][ T7621] loop2: detected capacity change from 0 to 2048
[  302.511843][ T7621] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  302.605805][   T57] team0 (unregistering): Port device team_slave_1 removed
[  302.639327][   T57] team0 (unregistering): Port device team_slave_0 removed
[  302.835365][ T7617] tun0: tun_chr_ioctl cmd 35108
[  302.898594][ T5872] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  303.095813][ T5872] usb 6-1: Using ep0 maxpacket: 16
[  303.452913][ T5872] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  303.461682][ T5872] usb 6-1: config 1 has no interface number 0
[  303.468207][ T5872] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  303.479396][ T5872] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  303.490716][ T5872] usb 6-1: config 1 interface 105 has no altsetting 0
[  303.761356][ T5872] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  303.771587][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.783607][ T5872] usb 6-1: Product: syz
[  303.789562][ T5872] usb 6-1: Manufacturer: syz
[  303.794361][ T5872] usb 6-1: SerialNumber: syz
[  303.806366][ T7623] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  303.832644][ T7623] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  304.165167][ T5821] Bluetooth: hci2: command tx timeout
[  304.339447][ T7623] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  304.388561][ T7623] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  304.556493][ T7618] chnl_net:caif_netlink_parms(): no params data found
[  304.723041][ T7643] netlink: 'syz.2.638': attribute type 9 has an invalid length.
[  304.843880][ T5872] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  304.877378][ T5872] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  305.145498][ T5872] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  305.173062][ T5872] aqc111 6-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, c6:75:93:d3:11:48
[  305.189794][ T5872] usb 6-1: USB disconnect, device number 2
[  305.198686][ T5872] aqc111 6-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  305.306707][ T5872] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  305.317833][ T5872] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  305.329715][ T5872] aqc111 6-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  305.387614][ T7652] bond1: entered promiscuous mode
[  305.392839][ T7652] bond1: entered allmulticast mode
[  305.399827][ T7652] 8021q: adding VLAN 0 to HW filter on device bond1
[  305.434530][ T7652] bond1 (unregistering): Released all slaves
[  305.585158][ T7657] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  305.803169][ T7660] netlink: 96 bytes leftover after parsing attributes in process `syz.2.644'.
[  306.041837][ T7663] loop1: detected capacity change from 0 to 2048
[  306.073895][ T7618] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.081684][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.091032][ T7618] bridge_slave_0: entered allmulticast mode
[  306.094758][ T7663] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  306.100512][ T7618] bridge_slave_0: entered promiscuous mode
[  306.182539][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.191295][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.199792][ T7618] bridge_slave_1: entered allmulticast mode
[  306.210407][ T7618] bridge_slave_1: entered promiscuous mode
[  306.244084][ T7668] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  306.255720][ T5821] Bluetooth: hci2: command tx timeout
[  306.510110][ T7665] loop4: detected capacity change from 0 to 4096
[  306.942764][ T7667] loop5: detected capacity change from 0 to 32768
[  306.953580][ T7667] XFS: attr2 mount option is deprecated.
[  306.991087][ T7672] loop2: detected capacity change from 0 to 128
[  307.050855][ T7672] EXT4-fs: Ignoring removed nobh option
[  307.056578][ T7618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.068760][ T7618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.105662][ T7667] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  307.127903][ T7679] netlink: 232 bytes leftover after parsing attributes in process `syz.1.650'.
[  307.158625][ T7665] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  307.213020][ T7672] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  307.246048][ T7618] team0: Port device team_slave_0 added
[  307.273967][ T7618] team0: Port device team_slave_1 added
[  307.279829][ T7672] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  307.416798][ T7618] batman_adv: batadv0: Adding interface: batadv_slave_0
[  307.424010][ T7618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.451028][ T7618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.562670][ T5813] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22.
[  307.563320][ T7667] XFS (loop5): Ending clean mount
[  307.612792][ T7618] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.620395][ T7618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.647787][ T7618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.680063][ T6392] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  307.837714][ T5809] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  307.907974][ T7689] netlink: 32 bytes leftover after parsing attributes in process `syz.4.653'.
[  307.954085][ T7618] hsr_slave_0: entered promiscuous mode
[  307.964131][ T7618] hsr_slave_1: entered promiscuous mode
[  307.972803][ T7618] debugfs: 'hsr0' already exists in 'hsr'
[  307.978906][ T7618] Cannot create hsr debugfs directory
[  308.312157][ T5821] Bluetooth: hci2: command tx timeout
[  309.042348][ T7618] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  309.075392][ T7618] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  309.116602][ T7618] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  309.146015][ T7618] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  309.255469][   T30] audit: type=1326 audit(1754485892.026:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c658ebe9 code=0x7ffc0000
[  309.278815][   T30] audit: type=1326 audit(1754485892.026:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c658ebe9 code=0x7ffc0000
[  309.303843][   T30] audit: type=1326 audit(1754485892.036:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24c658ebe9 code=0x7ffc0000
[  309.374096][   T30] audit: type=1326 audit(1754485892.146:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c658ebe9 code=0x7ffc0000
[  309.560001][   T30] audit: type=1326 audit(1754485892.206:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24c658ebe9 code=0x7ffc0000
[  309.585357][   T30] audit: type=1326 audit(1754485892.206:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c658ebe9 code=0x7ffc0000
[  309.608728][   T30] audit: type=1326 audit(1754485892.206:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f24c6585ba7 code=0x7ffc0000
[  309.633584][   T30] audit: type=1326 audit(1754485892.206:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f24c652add9 code=0x7ffc0000
[  309.658144][   T30] audit: type=1326 audit(1754485892.206:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f24c6585ba7 code=0x7ffc0000
[  309.683167][   T30] audit: type=1326 audit(1754485892.206:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.4.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f24c652add9 code=0x7ffc0000
[  309.807956][ T7715] netlink: 60 bytes leftover after parsing attributes in process `syz.2.665'.
[  309.855534][ T7715] netlink: 60 bytes leftover after parsing attributes in process `syz.2.665'.
[  309.946180][ T7715] netlink: 60 bytes leftover after parsing attributes in process `syz.2.665'.
[  310.288978][ T7721] loop5: detected capacity change from 0 to 1024
[  310.358483][ T7618] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.396219][ T5821] Bluetooth: hci2: command tx timeout
[  310.465928][ T7618] 8021q: adding VLAN 0 to HW filter on device team0
[  310.513652][ T3972] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.521281][ T3972] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.608524][ T3972] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.616726][ T3972] bridge0: port 2(bridge_slave_1) entered forwarding state
[  310.782763][ T1139] hfsplus: b-tree write err: -5, ino 4
[  311.922769][ T7748] loop1: detected capacity change from 0 to 128
[  312.170463][ T7618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.212255][ T7746] loop2: detected capacity change from 0 to 4096
[  312.545158][ T7746] ntfs3(loop2): failed to convert "0080" to cp775
[  312.566065][ T7746] ntfs3(loop2): failed to convert name for inode 1e.
[  312.586845][ T7746] ntfs3(loop2): ino=1f, mi_enum_attr
[  312.593776][ T7746] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  313.355191][ T7759] loop4: detected capacity change from 0 to 32768
[  313.657002][ T7771] loop2: detected capacity change from 0 to 512
[  313.668873][ T7771] EXT4-fs: Ignoring removed nobh option
[  313.745127][ T7771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.758737][ T7771] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.000314][ T7771] EXT4-fs error (device loop2): ext4_get_first_dir_block:3533: inode #12: comm syz.2.685: Attempting to read directory block (0) that is past i_size (3)
[  314.378906][ T7618] veth0_vlan: entered promiscuous mode
[  314.406883][ T5809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.481308][ T7618] veth1_vlan: entered promiscuous mode
[  314.736315][ T7618] veth0_macvtap: entered promiscuous mode
[  314.837152][ T7618] veth1_macvtap: entered promiscuous mode
[  315.006758][ T7618] batman_adv: batadv0: Interface activated: batadv_slave_0
[  315.108103][ T7618] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.210707][ T4941] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.240743][ T4941] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.316517][ T4941] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.362506][ T4941] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.813514][ T7806] sg_write: process 318 (syz.4.700) changed security contexts after opening file descriptor, this is not allowed.
[  315.918334][ T7809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.701'.
[  316.249478][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.260192][ T7809] bridge_slave_1: left allmulticast mode
[  316.266698][ T7809] bridge_slave_1: left promiscuous mode
[  316.283287][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.090170][ T7821] loop5: detected capacity change from 0 to 4096
[  317.139963][ T7830] ptrace attach of "./syz-executor exec"[5816] was attempted by ""[7830]
[  317.239392][ T7832] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  318.285934][ T5872] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  318.477934][ T5872] usb 3-1: Using ep0 maxpacket: 8
[  318.501715][ T5872] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  318.511811][ T5872] usb 3-1: config 179 has no interface number 0
[  318.518481][ T5872] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10
[  318.531041][ T5872] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[  318.543322][ T5872] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  318.555213][ T5872] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  318.565864][ T5872] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  318.579776][ T5872] usb 3-1: config 179 interface 65 has no altsetting 0
[  318.587342][ T5872] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  318.596882][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.705916][ T7855] loop4: detected capacity change from 0 to 4096
[  318.722127][ T7851] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  318.754666][ T7855] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  318.763395][ T7855] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  318.771750][ T7855] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  318.780309][ T7855] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  318.788674][ T7855] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00
[  318.797197][ T7855] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00
[  318.805554][ T7855] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00
[  318.813774][ T7855] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00
[  318.822069][ T7855] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00
[  318.830323][ T7855] ntfs3(loop4): try to read out of volume at offset 0x3fffffe0c00
[  318.891998][ T5872] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input8
[  319.118476][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  319.128176][ T5872] usb 3-1: USB disconnect, device number 6
[  320.174266][ T7876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.724'.
[  320.207254][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.725'.
[  320.216851][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.725'.
[  320.412569][ T4148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.421105][ T4148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.573773][ T4110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.588188][ T4110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.861423][ T7884] loop5: detected capacity change from 0 to 1024
[  321.276633][ T3972] hfsplus: b-tree write err: -5, ino 4
[  321.545288][ T5893] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  321.653558][ T7901] loop4: detected capacity change from 0 to 64
[  321.765546][ T5893] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  321.776389][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.796944][ T7900] Trying to free block not in datazone
[  321.847738][ T5893] usb 7-1: config 0 descriptor??
[  322.097818][ T5893] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  322.311650][ T7911] loop4: detected capacity change from 0 to 1024
[  322.345658][ T5893] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2
[  322.355406][ T7911] EXT4-fs: Ignoring removed bh option
[  322.357686][ T5893] [drm] Initialized udl on minor 2
[  322.363011][ T7911] EXT4-fs: inline encryption not supported
[  322.400806][ T7911] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  322.456177][ T7911] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  322.523714][ T7911] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.739: lblock 2 mapped to illegal pblock 2 (length 1)
[  322.575841][ T7911] __quota_error: 12 callbacks suppressed
[  322.575979][ T7911] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  322.591997][ T7911] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.739: lblock 0 mapped to illegal pblock 48 (length 1)
[  322.615843][ T7911] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  322.633530][ T7911] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.739: Failed to acquire dquot type 0
[  322.731132][ T7911] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  322.783934][ T7911] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.739: mark_inode_dirty error
[  322.876564][ T7911] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  322.887913][ T7911] EXT4-fs (loop4): 1 orphan inode deleted
[  322.895878][ T7911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.383834][ T7921] loop1: detected capacity change from 0 to 32768
[  323.394432][ T5893] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  323.403547][ T5893] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  323.413815][ T7921] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.743 (7921)
[  323.430159][ T5867] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  323.439609][ T1139] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  323.462438][ T7921] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  323.472969][ T7921] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  323.482030][ T7921] BTRFS info (device loop1): using free-space-tree
[  323.490266][ T5867] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  323.498885][ T5867] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  323.508574][ T5893] usb 7-1: USB disconnect, device number 2
[  323.521221][ T1139] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  323.533840][ T1139] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0
[  323.627167][ T7911] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.739: lblock 0 mapped to illegal pblock 48 (length 1)
[  323.648119][ T7935] loop5: detected capacity change from 0 to 8
[  323.697961][ T7911] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117
[  323.714116][ T7935] squashfs image failed sanity check
[  323.772766][ T7911] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  323.840615][ T5816] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  323.912734][ T7947] unknown channel width for channel at 909000KHz?
[  323.997370][ T5813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.085436][ T5872] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  324.290216][ T5872] usb 6-1: Using ep0 maxpacket: 32
[  324.333064][ T5872] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.344752][ T5872] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.453024][ T5872] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  324.462794][ T5872] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  324.472980][ T5872] usb 6-1: Product: syz
[  324.477948][ T5872] usb 6-1: Manufacturer: syz
[  324.572124][ T5872] hub 6-1:4.0: USB hub found
[  324.799561][ T5872] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  325.097581][ T5872] usb 6-1: USB disconnect, device number 3
[  325.245301][ T5866] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  325.416266][ T5866] usb 2-1: Using ep0 maxpacket: 32
[  325.433626][ T5866] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.446227][ T5866] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.456419][ T5866] usb 2-1: config 0 interface 0 has no altsetting 0
[  325.479470][ T5866] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  325.489463][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  325.499381][ T5866] usb 2-1: Product: syz
[  325.590165][ T5866] usb 2-1: config 0 descriptor??
[  325.720183][ T7973] netlink: 60 bytes leftover after parsing attributes in process `syz.2.761'.
[  325.776227][ T7973] netlink: 60 bytes leftover after parsing attributes in process `syz.2.761'.
[  325.830869][ T7976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.761'.
[  326.086105][ T5866] hid_parser_main: 56 callbacks suppressed
[  326.086202][ T5866] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0
[  326.104526][ T5866] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0
[  326.117403][ T5866] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0
[  326.126922][ T5866] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0
[  326.135726][ T5866] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0
[  326.241746][ T5866] waterforce 0003:1044:7A4D.0006: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.1-1/input0
[  326.311971][ T5866] waterforce 0003:1044:7A4D.0006: fw version request failed with -38
[  326.381073][ T5866] usb 2-1: USB disconnect, device number 4
[  326.698904][ T7991] loop6: detected capacity change from 0 to 512
[  326.736374][ T7991] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  326.819347][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'.
[  326.847991][ T7991] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.768: bad orphan inode 131083
[  326.965703][ T7991] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.638925][ T7618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.734701][ T8000] loop4: detected capacity change from 0 to 32768
[  327.760845][ T8000] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  327.785063][ T8001] loop5: detected capacity change from 0 to 4096
[  327.799610][ T8000] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  327.839163][ T5893] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  327.980098][ T8011] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  328.015281][ T8013] loop1: detected capacity change from 0 to 8
[  328.036772][ T8013] SQUASHFS error: lzo decompression failed, data probably corrupt
[  328.043845][ T5813] ocfs2: Unmounting device (7,4) on (node local)
[  328.046052][ T8013] SQUASHFS error: Failed to read block 0x91: -5
[  328.059066][ T8013] SQUASHFS error: Unable to read metadata cache entry [8f]
[  328.066960][ T8013] SQUASHFS error: Unable to read inode 0x11f
[  328.084851][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.6.775'.
[  328.138474][ T5893] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  328.149146][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.199229][ T5893] usb 3-1: config 0 descriptor??
[  328.226015][ T5893] gspca_main: cpia1-2.14.0 probing 0813:0001
[  328.494418][ T8016] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  328.615900][ T8018] sch_tbf: peakrate 32768 is lower than or equals to rate 17436422770158211144 !
[  328.647394][ T5893] cpia1 3-1:0.0: unexpected state after lo power cmd: 00
[  329.052826][ T5893] gspca_cpia1: usb_control_msg 02, error -71
[  329.086716][ T5893] gspca_cpia1: usb_control_msg 05, error -71
[  329.092893][ T5893] cpia1 3-1:0.0: unexpected systemstate: 00
[  329.135098][ T5893] usb 3-1: USB disconnect, device number 7
[  329.141320][ T8024] ip6gretap0: entered promiscuous mode
[  329.211057][ T8024] ip6gretap0: left promiscuous mode
[  329.854808][ T8036] loop6: detected capacity change from 0 to 1024
[  329.941849][ T8036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  329.955841][ T8036] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.129531][ T8046] bond0: entered promiscuous mode
[  330.135678][ T8046] bond_slave_0: entered promiscuous mode
[  330.142748][ T8046] bond_slave_1: entered promiscuous mode
[  330.291957][ T3972] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 15)
[  330.484669][ T8051] loop4: detected capacity change from 0 to 512
[  330.639271][ T8051] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.793: casefold flag without casefold feature
[  330.673101][ T8051] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.793: couldn't read orphan inode 15 (err -117)
[  330.695409][ T3972] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  330.708599][ T3972] EXT4-fs (loop6): This should not happen!! Data will be lost
[  330.708599][ T3972] 
[  330.821663][ T8051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.931524][ T7618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.055771][ T8050] geneve0: entered promiscuous mode
[  331.061524][ T8050] geneve0: entered allmulticast mode
[  331.258658][ T8062] loop6: detected capacity change from 0 to 128
[  331.352840][ T8060] loop1: detected capacity change from 0 to 1024
[  331.407389][ T5813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.007407][ T4110] hfsplus: b-tree write err: -5, ino 4
[  332.040954][ T8066] loop5: detected capacity change from 0 to 4096
[  332.402293][ T8074] loop6: detected capacity change from 0 to 2048
[  332.444601][ T8074] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  333.180039][ T8079] loop2: detected capacity change from 0 to 32768
[  333.191903][ T8079] XFS: attr2 mount option is deprecated.
[  333.241664][ T8079] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  333.651996][ T8079] XFS (loop2): Ending clean mount
[  333.743519][ T5809] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  334.109132][ T8105] loop5: detected capacity change from 0 to 1024
[  334.156193][ T8108] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  334.265912][ T8105] hfsplus: xattr searching failed
[  334.487361][ T4148] hfsplus: bad catalog file entry
[  334.517567][ T4148] hfsplus: b-tree write err: -5, ino 3
[  335.281692][   T30] audit: type=1326 audit(1754485918.056:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.1.820" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f322738ebe9 code=0x0
[  335.499889][ T8122] loop2: detected capacity change from 0 to 4096
[  336.183739][ T8129] loop4: detected capacity change from 0 to 32768
[  336.192721][ T8129] XFS: attr2 mount option is deprecated.
[  336.237548][ T8129] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  336.409826][ T8148] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.826'.
[  336.560976][ T8129] XFS (loop4): Ending clean mount
[  336.653714][ T5813] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  337.056518][ T5867] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  337.245999][ T5867] usb 7-1: Using ep0 maxpacket: 8
[  337.289425][ T5867] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  337.299219][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.389186][ T5867] pvrusb2: Hardware description: Terratec Grabster AV400
[  337.396584][ T5867] pvrusb2: **********
[  337.400882][ T5867] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  337.411658][ T5867] pvrusb2: Important functionality might not be entirely working.
[  337.419797][ T5867] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  337.431632][ T5867] pvrusb2: **********
[  337.495581][ T5893] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  337.600762][ T2333] pvrusb2: Invalid write control endpoint
[  337.699746][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  337.711215][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  337.723126][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  337.802400][ T8153] pvrusb2: Invalid write control endpoint
[  337.818510][ T5867] usb 7-1: USB disconnect, device number 3
[  337.838472][ T5893] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  337.848361][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.857437][ T5893] usb 6-1: Product: syz
[  337.861859][ T5893] usb 6-1: Manufacturer: syz
[  337.868009][ T5893] usb 6-1: SerialNumber: syz
[  337.924855][ T2333] pvrusb2: Invalid write control endpoint
[  337.932314][ T2333] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  337.942152][ T2333] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  337.950007][ T2333] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  337.960479][ T2333] pvrusb2: Device being rendered inoperable
[  337.966844][ T2333] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  337.974101][ T2333] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  337.990253][ T2333] pvrusb2: Attached sub-driver cx25840
[  337.999223][ T2333] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  338.010076][ T2333] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  338.037766][ T5893] usb 6-1: config 0 descriptor??
[  338.050069][ T8160] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  338.103246][ T8160] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  338.141539][ T5893] usb 6-1: ucan: probing device on interface #0
[  338.793754][ T5893] ucan 6-1:0.0 can0: registered device
[  338.822324][ T8181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'.
[  338.985783][ T5893] ucan 6-1:0.0 can0: firmware string: unknown
[  339.036620][ T5893] usb 6-1: USB disconnect, device number 4
[  339.361292][ T8192] loop1: detected capacity change from 0 to 512
[  339.410113][ T8192] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  339.429232][ T8193] loop2: detected capacity change from 0 to 2048
[  339.484300][ T8192] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #17: comm syz.1.846: inline data xattr refers to an external xattr inode
[  339.543161][ T8192] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.846: couldn't read orphan inode 17 (err -117)
[  339.569446][ T8199] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  339.599768][ T8192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.679019][   T30] audit: type=1800 audit(1754485922.446:161): pid=8193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.847" name="file2" dev="loop2" ino=16 res=0 errno=0
[  339.699970][ T8193] NILFS (loop2): writing node/leaf block does not appear in b-tree (ino=16) at key=5, level=0
[  339.700357][    C1] vkms_vblank_simulate: vblank timer overrun
[  339.711330][ T8193] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16)
[  339.764728][ T5866] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  339.765679][ T8193] Remounting filesystem read-only
[  339.793911][ T8198] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  340.000057][ T5866] usb 5-1: Using ep0 maxpacket: 8
[  340.022598][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.028977][ T5866] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  340.043156][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.073654][ T5809] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  340.123450][ T5866] pvrusb2: Hardware description: Terratec Grabster AV400
[  340.130838][ T5866] pvrusb2: **********
[  340.137628][ T5866] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  340.151670][ T5866] pvrusb2: Important functionality might not be entirely working.
[  340.159981][ T5866] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  340.172058][ T5866] pvrusb2: **********
[  340.269365][ T8208] netlink: 16 bytes leftover after parsing attributes in process `syz.5.851'.
[  340.278850][ T8208] netlink: 16 bytes leftover after parsing attributes in process `syz.5.851'.
[  340.284699][ T8209] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  340.357756][ T2333] pvrusb2: Invalid write control endpoint
[  340.533048][ T2333] pvrusb2: Invalid write control endpoint
[  340.539273][ T2333] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  340.556672][ T2333] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  340.566856][ T2333] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  340.577264][ T2333] pvrusb2: Device being rendered inoperable
[  340.583623][ T2333] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  340.591154][ T2333] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  340.600579][ T2333] pvrusb2: Attached sub-driver cx25840
[  340.602557][ T5866] usb 5-1: USB disconnect, device number 7
[  340.606934][ T2333] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  340.607000][ T2333] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  341.292777][ T8228] ip6gretap1: entered allmulticast mode
[  341.354180][ T8230] can0: slcan on ttyS3.
[  341.485530][ T8230] can0 (unregistered): slcan off ttyS3.
[  341.592549][ T8232] loop6: detected capacity change from 0 to 512
[  341.628004][ T8232] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  341.697165][ T8232] EXT4-fs (loop6): 1 truncate cleaned up
[  341.705251][ T8232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.764233][ T8236] loop4: detected capacity change from 0 to 2048
[  341.807232][ T8232] fscrypt (loop6, inode 18): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS
[  341.886406][ T8236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.937090][ T7618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.939485][ T8236] EXT4-fs (loop4): shut down requested (2)
[  342.032507][ T5813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.626546][ T5866] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  342.821762][ T5866] usb 5-1: Using ep0 maxpacket: 16
[  342.861180][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.873146][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.883331][ T5866] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  342.895635][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.937365][ T5866] usb 5-1: config 0 descriptor??
[  343.365980][ T8267] Bluetooth: MGMT ver 1.23
[  343.450276][ T5866] hid-multitouch 0003:1FD2:6007.0007: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0
[  343.483155][ T8264] loop5: detected capacity change from 0 to 2048
[  343.678273][ T8268] loop1: detected capacity change from 0 to 4096
[  343.681784][ T5866] usb 5-1: USB disconnect, device number 8
[  343.897991][ T8268] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  344.243692][ T8278] loop2: detected capacity change from 0 to 256
[  344.299126][ T8278] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  344.313109][ T8278] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  344.387840][ T5814] Bluetooth: hci4: command 0x0406 tx timeout
[  344.496262][ T8278] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  344.514602][ T8283] overlayfs: overlapping lowerdir path
[  344.733039][   T30] audit: type=1800 audit(1754485927.476:162): pid=8278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.882" name="file0" dev="loop2" ino=1048626 res=0 errno=0
[  345.006083][ T8280] loop5: detected capacity change from 0 to 32768
[  345.124469][ T8280] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  345.124612][ T8280]   allowing incompatible features above 0.0: (unknown version)
[  345.124692][ T8280]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  345.180636][ T8280] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  345.189101][ T8280] bcachefs (loop5): initializing new filesystem
[  345.206608][ T8280] bcachefs (loop5): going read-write
[  345.249402][ T8280] bcachefs (loop5): marking superblocks
[  345.309527][ T8280] bcachefs (loop5): initializing freespace
[  345.334705][ T8280] bcachefs (loop5): done initializing freespace
[  345.353153][ T8280] bcachefs (loop5): reading snapshots table
[  345.365561][ T8280] bcachefs (loop5): reading snapshots done
[  345.447088][ T8280] bcachefs (loop5): done starting filesystem
[  345.498477][ T8302] loop2: detected capacity change from 0 to 128
[  345.618349][ T6392] bcachefs (loop5): shutting down
[  345.623772][ T6392] bcachefs (loop5): going read-only
[  345.629462][ T6392] bcachefs (loop5): finished waiting for writes to stop
[  345.667570][ T8302] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  345.689120][ T8302] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  345.754254][ T6392] bcachefs (loop5): flushing journal and stopping allocators, journal seq 9
[  345.934793][ T5809] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  346.081342][ T6392] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 14
[  346.102063][ T8313] loop4: detected capacity change from 0 to 1024
[  346.128707][ T6392] bcachefs (loop5): clean shutdown complete, journal seq 15
[  346.142917][ T6392] bcachefs (loop5): marking filesystem clean
[  346.200705][ T8313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.248223][ T6392] bcachefs (loop5): shutdown complete
[  346.319260][ T8319] netlink: 20 bytes leftover after parsing attributes in process `syz.6.895'.
[  346.516308][ T5813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.176102][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.903'.
[  347.242528][ T8330] loop2: detected capacity change from 0 to 2048
[  347.360331][ T8330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.375773][ T8330] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  347.464517][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  347.471288][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  347.841572][ T5809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.928907][ T8346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.907'.
[  348.254422][ T8351] loop2: detected capacity change from 0 to 256
[  348.350908][ T8351] exfat: Deprecated parameter 'utf8'
[  348.357128][ T8351] exfat: Deprecated parameter 'utf8'
[  348.363228][ T8351] exfat: Deprecated parameter 'utf8'
[  348.489821][ T8351] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  349.582882][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'.
[  349.592497][ T8368] netlink: 152 bytes leftover after parsing attributes in process `syz.2.917'.
[  349.629761][ T8367] loop6: detected capacity change from 0 to 512
[  349.748199][ T8362] loop4: detected capacity change from 0 to 32768
[  349.825801][ T8367] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.916: iget: bad i_size value: 38620345925642
[  349.826015][ T8362] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  349.865848][ T8367] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.916: couldn't read orphan inode 15 (err -117)
[  349.917077][ T8362] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  349.934407][ T8367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.960629][ T8362] grow_buffers: requested out-of-range block 432345564227567648 for device loop4
[  349.972613][ T8362] (syz.4.914,8362,1):ocfs2_read_blocks:239 ERROR: status = -12
[  349.983062][ T8362] (syz.4.914,8362,1):ocfs2_search_chain:1817 ERROR: status = -12
[  349.991295][ T8362] (syz.4.914,8362,1):ocfs2_search_chain:1940 ERROR: status = -12
[  349.999891][ T8362] (syz.4.914,8362,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -12
[  350.011248][ T8362] (syz.4.914,8362,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -12
[  350.020385][ T8362] (syz.4.914,8362,1):__ocfs2_claim_clusters:2438 ERROR: status = -12
[  350.028858][ T8362] (syz.4.914,8362,1):__ocfs2_claim_clusters:2446 ERROR: status = -12
[  350.039762][ T8362] (syz.4.914,8362,1):ocfs2_local_alloc_new_window:1199 ERROR: status = -12
[  350.048771][ T8362] (syz.4.914,8362,1):ocfs2_local_alloc_new_window:1224 ERROR: status = -12
[  350.057684][ T8362] (syz.4.914,8362,1):ocfs2_local_alloc_slide_window:1298 ERROR: status = -12
[  350.071470][ T8362] (syz.4.914,8362,1):ocfs2_local_alloc_slide_window:1317 ERROR: status = -12
[  350.078457][ T8367] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.916: bg 0: block 5: invalid block bitmap
[  350.080796][ T8362] (syz.4.914,8362,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -12
[  350.104828][ T8362] (syz.4.914,8362,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -12
[  350.113993][ T8362] (syz.4.914,8362,1):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -12
[  350.123766][ T8362] (syz.4.914,8362,1):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -12
[  350.135753][ T8362] (syz.4.914,8362,1):ocfs2_symlink:1926 ERROR: status = -12
[  350.143594][ T8362] (syz.4.914,8362,1):ocfs2_symlink:2080 ERROR: status = -12
[  350.196867][ T8367] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28
[  350.210277][ T8367] EXT4-fs (loop6): This should not happen!! Data will be lost
[  350.210277][ T8367] 
[  350.220655][ T8367] EXT4-fs (loop6): Total free blocks count 0
[  350.227100][ T8367] EXT4-fs (loop6): Free/Dirty block details
[  350.233173][ T8367] EXT4-fs (loop6): free_blocks=0
[  350.238416][ T8367] EXT4-fs (loop6): dirty_blocks=5
[  350.243608][ T8367] EXT4-fs (loop6): Block reservation details
[  350.249998][ T8367] EXT4-fs (loop6): i_reserved_data_blocks=5
[  350.332804][ T5813] ocfs2: Unmounting device (7,4) on (node local)
[  350.732727][ T7618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.395251][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.924'.
[  351.543474][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.924'.
[  351.796204][ T8391] overlayfs: upper fs does not support file handles, falling back to index=off.
[  351.806345][ T8391] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  352.291555][ T8385] loop5: detected capacity change from 0 to 65536
[  352.300522][ T8385] XFS: noikeep mount option is deprecated.
[  352.401515][ T8385] XFS (loop5): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  352.772582][ T8385] XFS (loop5): Ending clean mount
[  352.782227][ T8385] XFS (loop5): Quotacheck needed: Please wait.
[  352.890001][ T8385] XFS (loop5): Quotacheck: Done.
[  352.989546][ T6392] XFS (loop5): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  353.760939][ T8421] veth1_to_bond: entered allmulticast mode
[  353.774083][ T8421] veth1_to_bond: left allmulticast mode
[  354.312367][ T8426] loop2: detected capacity change from 0 to 512
[  354.482430][ T8426] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.936: casefold flag without casefold feature
[  354.510707][ T8426] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.936: couldn't read orphan inode 15 (err -117)
[  354.533016][ T8426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.036505][ T8424] geneve2: entered promiscuous mode
[  355.041925][ T8424] geneve2: entered allmulticast mode
[  355.473763][ T8432] loop1: detected capacity change from 0 to 4096
[  355.547777][ T5809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.023158][ T8443] binder: 8442:8443 ioctl 541b 0 returned -22
[  356.168826][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.402657][ T8448] netlink: 'syz.6.944': attribute type 64 has an invalid length.
[  356.411043][ T8448] netlink: 12 bytes leftover after parsing attributes in process `syz.6.944'.
[  356.458580][ T8450] loop4: detected capacity change from 0 to 256
[  357.348159][ T8468] loop2: detected capacity change from 0 to 24
[  358.308871][ T8474] loop1: detected capacity change from 0 to 32768
[  358.446915][ T8474] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.957 (8474)
[  358.799450][ T8477] loop2: detected capacity change from 0 to 32768
[  358.856652][ T8477] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.958 (8477)
[  358.939469][ T8474] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  358.950519][ T8474] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  358.971042][ T8474] BTRFS info (device loop1): using free-space-tree
[  359.038788][ T8477] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  359.049359][ T8477] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  359.058401][ T8477] BTRFS info (device loop2): disk space caching is enabled
[  359.066370][ T8477] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  359.169817][ T8470] loop4: detected capacity change from 0 to 8192
[  359.468745][ T8481] loop5: detected capacity change from 0 to 32768
[  359.600869][ T8481] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  359.706836][ T8477] BTRFS info (device loop2): rebuilding free space tree
[  359.751947][ T8477] BTRFS info (device loop2): disabling free space tree
[  359.759689][ T8477] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  359.769966][ T8477] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  359.870775][ T5816] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  359.940444][ T6392] ocfs2: Unmounting device (7,5) on (node local)
[  359.974442][ T5809] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  361.390303][ T8532] input: syz1 as /devices/virtual/input/input9
[  361.572388][ T8536] binder: binder_mmap: 8535 200000001000-20000000b000 bad vm_flags failed -1
[  362.013765][ T8547] loop6: detected capacity change from 0 to 1024
[  362.080221][ T8549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.973'.
[  362.220664][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.974'.
[  362.413432][ T4941] hfsplus: b-tree write err: -5, ino 4
[  362.550072][ T8555] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  362.679304][ T8557] tipc: Started in network mode
[  362.684780][ T8557] tipc: Node identity , cluster identity 4711
[  362.691598][ T8557] tipc: Failed to set node id, please configure manually
[  362.699412][ T8557] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  362.947008][ T8561] netlink: 20 bytes leftover after parsing attributes in process `syz.5.979'.
[  363.451733][ T8565] loop6: detected capacity change from 0 to 2048
[  363.649356][ T8573] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  363.935559][   T30] audit: type=1800 audit(1754485946.696:163): pid=8565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.981" name="file2" dev="loop6" ino=16 res=0 errno=0
[  364.150437][ T8565] NILFS (loop6): writing node/leaf block does not appear in b-tree (ino=16) at key=5, level=0
[  364.161836][ T8565] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=16)
[  364.220442][ T8569] loop5: detected capacity change from 0 to 32768
[  364.229757][ T8569] XFS: attr2 mount option is deprecated.
[  364.240596][ T8565] Remounting filesystem read-only
[  364.297399][ T8569] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  364.475918][ T8569] XFS (loop5): Ending clean mount
[  364.529395][ T8569] XFS (loop5): Quotacheck needed: Please wait.
[  364.559637][ T7618] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer
[  364.605124][ T8569] XFS (loop5): Quotacheck: Done.
[  364.759488][ T6392] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  365.311815][ T8588] loop2: detected capacity change from 0 to 4096
[  365.362800][ T8588] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  365.717817][ T8588] ntfs3(loop2): ino=19, mi_enum_attr
[  365.987944][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.992'.
[  366.014480][ T8599] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  366.153547][ T8588] ntfs3: Cannot load iocharset cp94./file1
[  366.240823][ T8604] loop4: detected capacity change from 0 to 1024
[  366.999416][ T8615] loop1: detected capacity change from 0 to 2048
[  367.087148][ T8619] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  367.135490][   T30] audit: type=1800 audit(1754485949.906:164): pid=8615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.999" name="file2" dev="loop1" ino=16 res=0 errno=0
[  367.186308][ T8615] NILFS (loop1): writing node/leaf block does not appear in b-tree (ino=16) at key=5, level=0
[  367.197512][ T8615] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16)
[  367.995956][ T8623] loop2: detected capacity change from 0 to 32768
[  368.105650][ T8615] Remounting filesystem read-only
[  368.140422][ T8623] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  368.462138][ T8626] loop6: detected capacity change from 0 to 32768
[  368.617968][ T5816] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  368.657945][ T5816] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  368.791165][ T8626] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  368.791301][ T8626]   allowing incompatible features above 0.0: (unknown version)
[  368.791374][ T8626]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  368.822243][ T8623] XFS (loop2): Ending clean mount
[  368.828673][ T8626] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  368.828815][ T8626] bcachefs (loop6): initializing new filesystem
[  368.857551][ T8626] bcachefs (loop6): going read-write
[  368.939833][ T8626] bcachefs (loop6): marking superblocks
[  368.990113][ T8626] bcachefs (loop6): initializing freespace
[  369.021544][ T8626] bcachefs (loop6): done initializing freespace
[  369.042750][ T8626] bcachefs (loop6): reading snapshots table
[  369.049535][ T8626] bcachefs (loop6): reading snapshots done
[  369.071098][ T5809] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  369.142761][ T8626] bcachefs (loop6): done starting filesystem
[  369.435749][ T7618] bcachefs (loop6): shutting down
[  369.440986][ T7618] bcachefs (loop6): going read-only
[  369.446748][ T7618] bcachefs (loop6): finished waiting for writes to stop
[  369.482138][ T7618] bcachefs (loop6): flushing journal and stopping allocators, journal seq 6
[  369.798795][ T7618] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 11
[  369.822450][   T30] audit: type=1326 audit(1754485952.596:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.1.1007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f322738ebe9 code=0x0
[  369.864139][ T7618] bcachefs (loop6): clean shutdown complete, journal seq 12
[  369.886409][ T7618] bcachefs (loop6): marking filesystem clean
[  370.075665][ T7618] bcachefs (loop6): shutdown complete
[  371.031762][ T8663] loop1: detected capacity change from 0 to 512
[  371.100496][ T8663] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  371.146983][ T8666] loop4: detected capacity change from 0 to 256
[  371.178078][ T8663] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  371.192833][ T8663] System zones: 1-12
[  371.210812][ T8663] EXT4-fs (loop1): 1 truncate cleaned up
[  371.220576][ T8663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  371.295766][ T8663] EXT4-fs warning (device loop1): ext4_group_add:1736: No reserved GDT blocks, can't resize
[  371.362932][ T8670] vlan2: entered allmulticast mode
[  371.375201][ T8670] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  371.425858][ T8666] FAT-fs (loop4): Directory bread(block 64) failed
[  371.432702][ T8666] FAT-fs (loop4): Directory bread(block 65) failed
[  371.439901][ T8666] FAT-fs (loop4): Directory bread(block 66) failed
[  371.448047][ T8666] FAT-fs (loop4): Directory bread(block 67) failed
[  371.455230][ T8666] FAT-fs (loop4): Directory bread(block 68) failed
[  371.462129][ T8666] FAT-fs (loop4): Directory bread(block 69) failed
[  371.476195][ T8666] FAT-fs (loop4): Directory bread(block 70) failed
[  371.482950][ T8666] FAT-fs (loop4): Directory bread(block 71) failed
[  371.492156][ T8666] FAT-fs (loop4): Directory bread(block 72) failed
[  371.499100][ T8666] FAT-fs (loop4): Directory bread(block 73) failed
[  371.567483][ T8672] loop5: detected capacity change from 0 to 2048
[  371.574729][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.699994][ T8673] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  371.766054][   T30] audit: type=1800 audit(1754485954.526:166): pid=8672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1014" name="file2" dev="loop5" ino=16 res=0 errno=0
[  371.877964][ T8672] NILFS (loop5): writing node/leaf block does not appear in b-tree (ino=16) at key=5, level=0
[  371.902913][ T8672] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=16)
[  371.971750][ T8672] Remounting filesystem read-only
[  372.355985][ T6392] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  372.808237][ T8678] loop2: detected capacity change from 0 to 32768
[  372.890205][ T8686] loop1: detected capacity change from 0 to 1024
[  372.917989][ T8686] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  373.047904][ T8695] hfsplus: xattr searching failed
[  373.068845][ T8678] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  373.068989][ T8678]   allowing incompatible features above 0.0: (unknown version)
[  373.069067][ T8678]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  373.123553][ T8678] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  373.132398][ T8678] bcachefs (loop2): initializing new filesystem
[  373.153315][ T8678] bcachefs (loop2): going read-write
[  373.193164][ T8678] bcachefs (loop2): marking superblocks
[  373.252509][ T8678] bcachefs (loop2): initializing freespace
[  373.277554][ T8678] bcachefs (loop2): done initializing freespace
[  373.296568][ T8678] bcachefs (loop2): reading snapshots table
[  373.302812][ T8678] bcachefs (loop2): reading snapshots done
[  373.393708][ T8678] bcachefs (loop2): done starting filesystem
[  373.692326][ T5809] bcachefs (loop2): shutting down
[  373.699041][ T5809] bcachefs (loop2): going read-only
[  373.776369][ T5809] bcachefs (loop2): finished waiting for writes to stop
[  373.831041][ T5809] bcachefs (loop2): flushing journal and stopping allocators, journal seq 5
[  373.875867][ T8705] mkiss: ax0: crc mode is auto.
[  374.095756][ T5809] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 8
[  374.150962][ T5809] bcachefs (loop2): clean shutdown complete, journal seq 9
[  374.198072][ T5809] bcachefs (loop2): marking filesystem clean
[  374.386436][ T5809] bcachefs (loop2): shutdown complete
[  374.711012][ T8714] loop6: detected capacity change from 0 to 512
[  374.853167][ T8714] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1006: casefold flag without casefold feature
[  374.905977][ T8714] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1006: couldn't read orphan inode 15 (err -117)
[  374.977126][ T8714] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  374.999270][ T8721] loop1: detected capacity change from 0 to 1024
[  375.039068][ T8722] loop4: detected capacity change from 0 to 2048
[  375.122754][ T8724] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  375.177137][   T30] audit: type=1800 audit(1754485957.956:167): pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1030" name="file2" dev="loop4" ino=16 res=0 errno=0
[  375.242883][ T7618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.253412][ T8722] NILFS (loop4): writing node/leaf block does not appear in b-tree (ino=16) at key=5, level=0
[  375.266709][ T8722] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16)
[  375.303801][   T58] hfsplus: b-tree write err: -5, ino 4
[  375.333705][ T8722] Remounting filesystem read-only
[  375.636776][ T5813] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  375.699024][ T5813] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  376.418087][ T8729] loop6: detected capacity change from 0 to 40427
[  376.967337][ T8731] loop1: detected capacity change from 0 to 32768
[  377.027502][ T8729] F2FS-fs (loop6): Image doesn't support compression
[  377.034865][ T8729] F2FS-fs (loop6): build fault injection rate: 690
[  377.049886][ T8729] F2FS-fs (loop6): invalid crc value
[  377.125452][ T8731] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  377.125595][ T8731]   allowing incompatible features above 0.0: (unknown version)
[  377.125675][ T8731]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  377.173253][ T8731] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  377.181707][ T8731] bcachefs (loop1): initializing new filesystem
[  377.199834][ T8731] bcachefs (loop1): going read-write
[  377.318933][ T8731] bcachefs (loop1): marking superblocks
[  377.366192][ T8731] bcachefs (loop1): initializing freespace
[  377.390782][ T8731] bcachefs (loop1): done initializing freespace
[  377.402337][ T8729] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  377.418963][ T8731] bcachefs (loop1): reading snapshots table
[  377.428014][ T8731] bcachefs (loop1): reading snapshots done
[  377.441525][ T8729] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  377.534792][ T8731] bcachefs (loop1): done starting filesystem
[  378.073799][ T5816] bcachefs (loop1): shutting down
[  378.079936][ T5816] bcachefs (loop1): going read-only
[  378.085810][ T5816] bcachefs (loop1): finished waiting for writes to stop
[  378.186104][ T5816] bcachefs (loop1): flushing journal and stopping allocators, journal seq 6
[  378.311768][ T5816] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 8
[  378.351120][ T5816] bcachefs (loop1): clean shutdown complete, journal seq 9
[  378.361044][ T5816] bcachefs (loop1): marking filesystem clean
[  378.499757][ T5816] bcachefs (loop1): shutdown complete
[  379.410439][ T8767] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.530470][ T8771] loop5: detected capacity change from 0 to 256
[  379.612332][ T8771] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0x503f8760, utbl_chksum : 0xe619d30d)
[  379.694103][ T8775] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1039'.
[  379.760016][   T30] audit: type=1800 audit(1754485962.526:168): pid=8771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1047" name="file2" dev="loop5" ino=1048629 res=0 errno=0
[  380.115360][ T5893] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  380.289986][ T5893] usb 5-1: Using ep0 maxpacket: 32
[  380.349853][ T8782] loop5: detected capacity change from 0 to 8192
[  380.357554][ T5893] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  380.367301][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.375832][ T5893] usb 5-1: Product: syz
[  380.389453][ T5893] usb 5-1: Manufacturer: syz
[  380.394266][ T5893] usb 5-1: SerialNumber: syz
[  380.428436][ T8782]  loop5: p2 p4
[  380.432117][ T8782] loop5: partition table partially beyond EOD, truncated
[  380.442426][ T5893] usb 5-1: config 0 descriptor??
[  380.448708][ T8782] loop5: p2 size 8388352 extends beyond EOD, truncated
[  380.462312][ T8782] loop5: p4 start 100663300 is beyond EOD, truncated
[  380.661152][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.671816][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.721487][ T5893] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  380.730270][ T5893] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  380.790364][ T5866] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  380.867430][ T5893] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71
[  380.919211][ T5893] usb 5-1: USB disconnect, device number 9
[  380.995363][ T5866] usb 7-1: Using ep0 maxpacket: 8
[  381.042388][ T5866] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  381.052171][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.111900][ T5866] pvrusb2: Hardware description: Terratec Grabster AV400
[  381.119726][ T5866] pvrusb2: **********
[  381.124110][ T5866] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  381.137212][ T5866] pvrusb2: Important functionality might not be entirely working.
[  381.145464][ T5866] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  381.157255][ T5866] pvrusb2: **********
[  381.395550][ T2333] pvrusb2: Invalid write control endpoint
[  381.648710][ T5866] usb 7-1: USB disconnect, device number 4
[  381.883409][ T8791] loop5: detected capacity change from 0 to 32768
[  381.922209][ T8791] (syz.5.1053,8791,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  381.940214][ T8791] (syz.5.1053,8791,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  382.043103][ T8791] JBD2: Ignoring recovery information on journal
[  382.060182][ T2333] pvrusb2: Invalid write control endpoint
[  382.069080][ T2333] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  382.079275][ T2333] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  382.087824][ T2333] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  382.100738][ T2333] pvrusb2: Device being rendered inoperable
[  382.107376][ T2333] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  382.115617][ T2333] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  382.126311][ T2333] pvrusb2: Attached sub-driver cx25840
[  382.127291][ T8791] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  382.132343][ T2333] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  382.132406][ T2333] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  382.352122][ T8800] loop1: detected capacity change from 0 to 512
[  382.373413][ T8800] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  382.406413][ T8800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.443817][ T6392] ocfs2: Unmounting device (7,5) on (node local)
[  383.113921][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.569929][ T8822] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1068'.
[  384.671508][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  384.951929][ T8848] loop6: detected capacity change from 0 to 1024
[  385.069373][ T8848] hfsplus: request for non-existent node 134217728 in B*Tree
[  385.078194][ T8848] hfsplus: request for non-existent node 134217728 in B*Tree
[  385.147301][ T8848] hfsplus: hfsplus: Invalid key length: 30878
[  385.204385][ T8847] loop4: detected capacity change from 0 to 4096
[  385.228600][ T8847] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  385.453912][ T8847] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  385.687473][ T4110] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[  385.720249][ T5813] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  385.727995][ T5813] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  385.736516][ T5813] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  385.745564][ T4110] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[  386.015466][ T5866] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  386.165679][ T8868] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1087'.
[  386.205868][ T5866] usb 3-1: Using ep0 maxpacket: 8
[  386.251677][ T5866] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  386.261437][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.318546][ T5866] pvrusb2: Hardware description: Terratec Grabster AV400
[  386.331507][ T5866] pvrusb2: **********
[  386.338311][ T5866] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  386.348833][ T5866] pvrusb2: Important functionality might not be entirely working.
[  386.358886][ T5866] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  386.375153][ T5866] pvrusb2: **********
[  386.579138][ T2333] pvrusb2: Invalid write control endpoint
[  386.803057][ T5893] usb 3-1: USB disconnect, device number 8
[  386.826145][ T2333] pvrusb2: Invalid write control endpoint
[  386.834278][ T2333] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  386.846982][ T2333] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  386.854710][ T2333] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  386.865471][ T2333] pvrusb2: Device being rendered inoperable
[  386.871571][ T2333] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  386.881447][ T2333] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  386.890275][ T2333] pvrusb2: Attached sub-driver cx25840
[  386.896112][ T2333] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  386.909360][ T2333] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  387.116662][ T8875] netlink: 'syz.5.1090': attribute type 25 has an invalid length.
[  387.124775][ T8875] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1090'.
[  387.466295][ T5866] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  387.709576][ T5866] usb 5-1: config 0 has no interfaces?
[  387.809679][ T5866] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  387.819972][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  387.828427][ T5866] usb 5-1: Product: syz
[  387.834020][ T5866] usb 5-1: Manufacturer: syz
[  388.053612][ T5866] usb 5-1: config 0 descriptor??
[  388.277549][ T8879] loop5: detected capacity change from 0 to 32768
[  388.288838][ T8879] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1092 (8879)
[  388.299204][ T8877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.312079][ T8877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.345147][ T8879] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  388.357229][ T8879] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  388.374594][ T8879] BTRFS info (device loop5): using free-space-tree
[  388.392250][ T5893] usb 5-1: USB disconnect, device number 10
[  388.402271][ T5821] Bluetooth: hci1: Dropping invalid advertising data
[  388.412531][ T5821] Bluetooth: hci1: Malformed LE Event: 0x02
[  388.605332][ T5866] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  388.680445][ T6392] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  388.781810][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.794049][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.807357][ T5866] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  388.817630][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.857138][ T5866] usb 2-1: config 0 descriptor??
[  389.366446][ T5866] petalynx 0003:18B1:0037.0008: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.1-1/input0
[  389.562732][ T5866] usb 2-1: USB disconnect, device number 5
[  389.666752][ T8914] team0: Device gtp0 is of different type
[  390.129061][ T8922] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  390.246859][ T8924] program syz.2.1107 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  390.697030][ T8934] loop2: detected capacity change from 0 to 256
[  390.762674][ T8934] exfat: Deprecated parameter 'utf8'
[  390.900246][ T8934] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  391.262432][ T8931] loop6: detected capacity change from 0 to 32768
[  391.276268][ T5866] usb 5-1: new low-speed USB device number 11 using dummy_hcd
[  391.286120][ T8931] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1109 (8931)
[  391.312415][ T8931] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  391.323289][ T8931] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  391.337166][ T8931] BTRFS info (device loop6): using free-space-tree
[  391.514179][ T8957] loop1: detected capacity change from 0 to 512
[  391.564668][ T8957] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  391.581103][ T5866] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  391.586777][ T8957] System zones: 0-7
[  391.595224][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.609895][ T7618] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  391.633579][ T8957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  391.719872][ T5866] usb 5-1: config 0 descriptor??
[  391.895802][ T8964] loop2: detected capacity change from 0 to 16
[  391.935362][ T8964] erofs (device loop2): mounted with root inode @ nid 36.
[  391.977285][ T5866] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  391.991818][ T8964] erofs (device loop2): corrupted dir block 8200 @ nid 36
[  392.025714][ T8964] erofs (device loop2): readahead error at folio 6 @ nid 36
[  392.034270][ T8964] erofs (device loop2): readahead error at folio 4 @ nid 36
[  392.042783][ T8964] syz.2.1118: attempt to access beyond end of device
[  392.042783][ T8964] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  392.068757][ T8964] syz.2.1118: attempt to access beyond end of device
[  392.068757][ T8964] loop2: rw=524288, sector=16, nr_sectors = 8 limit=16
[  392.083592][ T8964] syz.2.1118: attempt to access beyond end of device
[  392.083592][ T8964] loop2: rw=524288, sector=376, nr_sectors = 16 limit=16
[  392.098639][ T8964] erofs (device loop2): invalid de[0].nameoff 0 @ nid 36
[  392.184674][ T5866] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  392.195513][ T5866] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  392.209543][ T5866] asix 5-1:0.0: probe with driver asix failed with error -71
[  392.269291][ T5866] usb 5-1: USB disconnect, device number 11
[  392.376393][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.478182][ T5872] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  392.604389][ T8968] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  392.647900][ T5872] usb 6-1: Using ep0 maxpacket: 16
[  392.692123][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.703716][ T5872] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  392.713607][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.769785][ T5872] usb 6-1: config 0 descriptor??
[  393.243487][ T5872] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  393.631039][ T5872] usb 6-1: USB disconnect, device number 5
[  393.944352][ T5893] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  394.021516][ T5893] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  394.389471][ T8985] loop2: detected capacity change from 0 to 32768
[  394.403304][ T8985] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1127 (8985)
[  394.442018][ T8985] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  394.453632][ T8985] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  394.465183][ T8985] BTRFS info (device loop2): using free-space-tree
[  394.564771][ T8987] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  394.690442][ T5809] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  394.851909][ T9014] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  395.181561][   T30] audit: type=1326 audit(1754485977.956:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9017 comm="syz.5.1137" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f114cf8ebe9 code=0x0
[  395.470094][ T9023] syz.6.1139: attempt to access beyond end of device
[  395.470094][ T9023] loop13: rw=0, sector=2, nr_sectors = 2 limit=0
[  395.484139][ T9023] syz.6.1139: attempt to access beyond end of device
[  395.484139][ T9023] loop13: rw=0, sector=16, nr_sectors = 2 limit=0
[  396.512704][ T5872] kernel read not supported for file /dsp (pid: 5872 comm: kworker/1:5)
[  396.894760][ T9049] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  397.209986][ T9053] netlink: 'syz.2.1153': attribute type 3 has an invalid length.
[  397.218181][ T9053] netlink: 'syz.2.1153': attribute type 3 has an invalid length.
[  398.424609][ T9075] loop5: detected capacity change from 0 to 1024
[  398.435785][ T9075] EXT4-fs: Ignoring removed orlov option
[  398.439724][ T9078] loop1: detected capacity change from 0 to 1024
[  398.441643][ T9075] EXT4-fs: Ignoring removed mblk_io_submit option
[  398.483915][ T9075] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  398.563861][ T9075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  398.564789][ T9078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  398.671266][ T9078] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  398.742055][ T9078] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28
[  398.755221][ T9078] EXT4-fs (loop1): This should not happen!! Data will be lost
[  398.755221][ T9078] 
[  398.765141][ T9078] EXT4-fs (loop1): Total free blocks count 0
[  398.771403][ T9078] EXT4-fs (loop1): Free/Dirty block details
[  398.777887][ T9078] EXT4-fs (loop1): free_blocks=68451041280
[  398.784055][ T9078] EXT4-fs (loop1): dirty_blocks=16
[  398.789483][ T9078] EXT4-fs (loop1): Block reservation details
[  398.795841][ T9078] EXT4-fs (loop1): i_reserved_data_blocks=1
[  398.892936][ T6392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.945390][ T5872] kernel read not supported for file /dsp1 (pid: 5872 comm: kworker/1:5)
[  399.162772][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.250228][ T9121] loop2: detected capacity change from 0 to 32768
[  401.584527][ T5893] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  401.765463][ T5893] usb 6-1: Using ep0 maxpacket: 32
[  401.834697][ T5893] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  401.844448][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.852777][ T5893] usb 6-1: Product: syz
[  401.857251][ T5893] usb 6-1: Manufacturer: syz
[  401.862033][ T5893] usb 6-1: SerialNumber: syz
[  401.895536][ T5893] usb 6-1: config 0 descriptor??
[  401.911228][ T5893] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  402.154566][ T9143] loop1: detected capacity change from 0 to 64
[  402.306950][ T5821] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  402.741953][ T5893] gspca_stk1135: reg_w 0x5 err -71
[  402.748754][ T5893] gspca_stk1135: serial bus timeout: status=0x00
[  402.755436][ T5893] gspca_stk1135: Sensor write failed
[  402.760911][ T5893] gspca_stk1135: serial bus timeout: status=0x00
[  402.767614][ T5893] gspca_stk1135: Sensor write failed
[  402.773093][ T5893] gspca_stk1135: serial bus timeout: status=0x00
[  402.779776][ T5893] gspca_stk1135: Sensor read failed
[  402.785277][ T5893] gspca_stk1135: serial bus timeout: status=0x00
[  402.791852][ T5893] gspca_stk1135: Sensor read failed
[  402.797453][ T5893] gspca_stk1135: Detected sensor type unknown (0x0)
[  402.812946][ T5893] gspca_stk1135: serial bus timeout: status=0x00
[  402.822558][ T5893] gspca_stk1135: Sensor read failed
[  402.828085][ T5893] gspca_stk1135: serial bus timeout: status=0x00
[  402.834663][ T5893] gspca_stk1135: Sensor read failed
[  402.840167][ T5893] gspca_stk1135: serial bus timeout: status=0x00
[  402.846957][ T5893] gspca_stk1135: Sensor write failed
[  402.852544][ T5893] gspca_stk1135: serial bus timeout: status=0x00
[  402.859198][ T5893] gspca_stk1135: Sensor write failed
[  402.864848][ T5893] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[  402.891903][ T9149] loop2: detected capacity change from 0 to 2048
[  402.917201][ T5872] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  402.923125][ T5893] usb 6-1: USB disconnect, device number 6
[  402.982187][ T9149] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  403.126155][ T5872] usb 5-1: Using ep0 maxpacket: 8
[  403.146547][ T5872] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  403.156257][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.207260][ T5872] usb 5-1: config 0 descriptor??
[  403.441037][ T9158] loop2: detected capacity change from 0 to 64
[  404.092067][ T5872] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  404.095419][ T9170] pim6reg0: tun_chr_ioctl cmd 1074025677
[  404.105980][ T5872] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9
[  404.108871][ T9170] pim6reg0: linktype set to 778
[  404.120624][ T9171] loop2: detected capacity change from 0 to 64
[  404.169544][ T5872] asix 5-1:0.0: probe with driver asix failed with error -71
[  404.187423][ T5872] usb 5-1: USB disconnect, device number 12
[  404.238013][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  404.248962][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  404.260797][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  404.269807][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  404.278766][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  404.290030][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  404.298922][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  404.308409][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  404.319687][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  404.328907][ T5866] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  404.337413][ T5866] hid-generic 0000:0000:0000.000B: item fetching failed at offset 16/83
[  404.356774][ T5866] hid-generic 0000:0000:0000.000B: probe with driver hid-generic failed with error -22
[  404.692144][ T9176] loop2: detected capacity change from 0 to 512
[  404.713451][ T9176] EXT4-fs: Ignoring removed oldalloc option
[  404.737858][ T9176] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  404.791209][ T9176] EXT4-fs (loop2): 1 truncate cleaned up
[  404.801729][ T9176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  404.963089][ T9187] loop4: detected capacity change from 0 to 2048
[  405.025692][ T9187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  405.130214][ T5809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.235231][ T9187] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.1211: inline data xattr refers to an external xattr inode
[  405.254841][ T9187] EXT4-fs (loop4): Remounting filesystem read-only
[  405.411698][ T9196] program syz.1.1213 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  405.438313][ T5813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.524706][ T9198] loop2: detected capacity change from 0 to 64
[  405.807504][ T9179] loop5: detected capacity change from 0 to 8192
[  405.845672][ T9201] loop6: detected capacity change from 0 to 1024
[  406.151632][ T5866] kernel read not supported for file /input/event1 (pid: 5866 comm: kworker/1:4)
[  406.243288][ T4941] hfsplus: b-tree write err: -5, ino 4
[  406.330688][ T9209] input: syz0 as /devices/virtual/input/input10
[  406.798607][ T5866] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  406.880391][ T9222] loop4: detected capacity change from 0 to 2048
[  406.991501][ T5866] usb 7-1: Using ep0 maxpacket: 16
[  407.028025][ T9222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  407.067378][ T5866] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  407.080328][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  407.091780][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  407.102281][ T5866] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  407.117216][ T5866] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  407.277844][ T5866] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  407.287568][ T5866] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  407.298323][ T5866] usb 7-1: Manufacturer: syz
[  407.324296][ T5866] usb 7-1: config 0 descriptor??
[  407.390345][ T5813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.452459][ T9238] loop2: detected capacity change from 0 to 512
[  407.503104][ T9238] vfat: Unknown parameter '�U�
�Vv�S�+ ��&;Sw//S��� �0x�R�Ck̕.����'
[  407.687846][ T9244] loop4: detected capacity change from 0 to 64
[  407.748217][ T9244] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  407.773672][ T9246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1234'.
[  407.885430][ T5866] rc_core: IR keymap rc-hauppauge not found
[  407.891788][ T5866] Registered IR keymap rc-empty
[  407.897602][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  407.971860][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  408.003549][ T5866] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  408.018465][ T5866] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input11
[  408.125891][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  408.170188][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  408.200984][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  408.247265][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  408.321896][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  408.346405][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  408.366103][ T5872] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  408.378220][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  408.407011][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  408.437956][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  408.494253][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  408.523321][ T5866] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  408.533297][ T5866] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  408.575661][ T5872] usb 3-1: Using ep0 maxpacket: 16
[  408.601703][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  408.624795][ T5866] usb 7-1: USB disconnect, device number 5
[  408.689185][ T5872] usb 3-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc
[  408.699012][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.707466][ T5872] usb 3-1: Product: syz
[  408.711826][ T5872] usb 3-1: Manufacturer: syz
[  408.719397][ T5872] usb 3-1: SerialNumber: syz
[  408.829991][ T5872] usb 3-1: config 0 descriptor??
[  408.856493][ T5872] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  408.910653][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  408.917844][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  409.057864][ T5872] usb 3-1: USB disconnect, device number 9
[  409.391599][ T9269] loop6: detected capacity change from 0 to 16
[  409.456498][ T9269] erofs (device loop6): mounted with root inode @ nid 36.
[  409.514763][ T9269] erofs (device loop6): corrupted dir block 8200 @ nid 36
[  409.542582][ T9269] erofs (device loop6): readahead error at folio 26 @ nid 36
[  409.551398][ T9269] erofs (device loop6): readahead error at folio 25 @ nid 36
[  409.566982][ T9269] erofs (device loop6): readahead error at folio 24 @ nid 36
[  409.574595][ T9269] erofs (device loop6): readahead error at folio 23 @ nid 36
[  409.584619][ T9269] erofs (device loop6): readahead error at folio 22 @ nid 36
[  409.592625][ T9269] erofs (device loop6): readahead error at folio 21 @ nid 36
[  409.600425][ T9269] erofs (device loop6): readahead error at folio 20 @ nid 36
[  409.608463][ T9269] erofs (device loop6): readahead error at folio 18 @ nid 36
[  409.616411][ T9269] erofs (device loop6): readahead error at folio 16 @ nid 36
[  409.624434][ T9269] erofs (device loop6): readahead error at folio 12 @ nid 36
[  409.632556][ T9269] syz.6.1244: attempt to access beyond end of device
[  409.632556][ T9269] loop6: rw=524288, sector=720, nr_sectors = 16 limit=16
[  409.647293][ T9269] syz.6.1244: attempt to access beyond end of device
[  409.647293][ T9269] loop6: rw=524288, sector=525144, nr_sectors = 16 limit=16
[  409.661730][ T9269] syz.6.1244: attempt to access beyond end of device
[  409.661730][ T9269] loop6: rw=524288, sector=16, nr_sectors = 8 limit=16
[  409.682127][ T9269] syz.6.1244: attempt to access beyond end of device
[  409.682127][ T9269] loop6: rw=524288, sector=13716630376, nr_sectors = 8 limit=16
[  411.119539][ T9306] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1262'.
[  411.877167][ T9323] loop2: detected capacity change from 0 to 64
[  412.213802][ T9330] loop4: detected capacity change from 0 to 256
[  412.261261][ T9330] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  412.273006][ T9330] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  412.384194][ T9330] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  412.502061][ T9332] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1274'.
[  412.685461][ T9336] loop1: detected capacity change from 0 to 256
[  413.084074][ T9342] loop4: detected capacity change from 0 to 512
[  413.193904][ T9342] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  413.382466][ T9342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.398406][ T9342] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  413.482076][ T9338] loop2: detected capacity change from 0 to 32768
[  413.514999][ T9338] 
[  413.514999][ T9338]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  413.514999][ T9338] 
[  413.562779][ T9338] 
[  413.562779][ T9338]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  413.562779][ T9338] 
[  413.575950][ T9338] 
[  413.575950][ T9338]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  413.575950][ T9338] 
[  413.586905][ T9338] 
[  413.586905][ T9338]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  413.586905][ T9338] 
[  413.597936][ T9338] 
[  413.597936][ T9338]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  413.597936][ T9338] 
[  413.609113][ T9338] 
[  413.609113][ T9338]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  413.609113][ T9338] 
[  413.619980][ T9338] 
[  413.619980][ T9338]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  413.619980][ T9338] 
[  413.634008][  T112] 
[  413.634008][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  413.634008][  T112] 
[  413.722170][ T5809] 
[  413.722170][ T5809]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  413.722170][ T5809] 
[  413.774184][ T5809] 
[  413.774184][ T5809]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  413.774184][ T5809] 
[  413.925323][ T5813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.249979][ T9353] netlink: 'syz.4.1283': attribute type 1 has an invalid length.
[  414.258030][ T9353] netlink: 'syz.4.1283': attribute type 4 has an invalid length.
[  415.243050][ T9371] C: renamed from veth0_to_batadv (while UP)
[  415.263283][ T5893] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  415.283429][ T9371] netlink: 'syz.6.1291': attribute type 4 has an invalid length.
[  415.291785][ T9371] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1291'.
[  415.307960][ T9371] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  415.446275][ T5893] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  415.455845][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.464033][ T5893] usb 5-1: Product: syz
[  415.468623][ T5893] usb 5-1: Manufacturer: syz
[  415.473402][ T5893] usb 5-1: SerialNumber: syz
[  415.529938][ T5893] usb 5-1: config 0 descriptor??
[  415.767558][ T9378] loop2: detected capacity change from 0 to 4096
[  415.785322][ T9381] loop6: detected capacity change from 0 to 512
[  415.800221][ T9378] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  415.822628][ T9381] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  415.843171][ T9383] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1296'.
[  415.884597][ T9381] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  415.917924][ T9381] EXT4-fs (loop6): 1 truncate cleaned up
[  415.928647][ T9381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.152937][ T9387] loop1: detected capacity change from 0 to 2048
[  416.351412][ T7618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.372162][ T5893] usb 5-1: f81604_write: reg: 105 data: 92 failed: -EPROTO
[  416.379742][ T5893] f81604 5-1:0.0: Setting termination of CH#1 failed: -EPROTO
[  416.389259][ T5893] f81604 5-1:0.0: probe with driver f81604 failed with error -71
[  416.469296][ T5893] usb 5-1: USB disconnect, device number 13
[  416.757649][ T9393] netlink: 'syz.2.1300': attribute type 14 has an invalid length.
[  417.070174][ T9398] loop6: detected capacity change from 0 to 512
[  417.080489][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1303'.
[  417.117934][ T9398] EXT4-fs: Ignoring removed oldalloc option
[  417.156113][ T9398] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  417.193987][ T9401] loop1: detected capacity change from 0 to 1024
[  417.232063][ T9398] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.1302: inode #11: comm syz.6.1302: iget: illegal inode #
[  417.239271][ T9401] EXT4-fs: Ignoring removed orlov option
[  417.259413][ T9401] EXT4-fs: Ignoring removed nomblk_io_submit option
[  417.319069][ T9398] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1302: couldn't read orphan inode 11 (err -117)
[  417.340956][ T9398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.391434][ T9409] loop5: detected capacity change from 0 to 512
[  417.417719][ T9401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  417.450128][ T9409] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  417.478092][ T9398] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters
[  417.523181][ T9409] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  417.579991][ T9409] EXT4-fs (loop5): 1 truncate cleaned up
[  417.587843][ T9409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.645373][ T7618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.847594][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.046844][ T9419] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1310'.
[  418.138122][ T6392] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /188/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  418.257658][ T6392] EXT4-fs error (device loop5): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  418.339703][ T6392] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  418.402857][ T6392] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /188/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  418.520002][ T6392] EXT4-fs error (device loop5): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  418.610559][ T6392] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  418.653733][ T6392] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /188/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  418.749460][ T6392] EXT4-fs error (device loop5): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  418.844494][ T6392] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  418.891178][ T6392] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /188/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  418.999876][ T6392] EXT4-fs error (device loop5): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  419.025433][ T6392] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  419.045411][   T30] audit: type=1326 audit(1754486001.796:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.4.1323" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24c658ebe9 code=0x0
[  419.066348][ T6392] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /188/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  419.142977][ T6392] EXT4-fs error (device loop5): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  419.224210][ T6392] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  419.283144][ T6392] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  419.344571][ T6392] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  419.376404][ T6392] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  419.488798][ T6392] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  419.628699][ T6392] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  419.986054][ T9450] loop6: detected capacity change from 0 to 32768
[  420.182410][ T9455] Falling back ldisc for ptm0.
[  420.634212][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'.
[  420.644107][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'.
[  420.669165][ T9461] bridge0: port 2(vlan2) entered blocking state
[  420.676060][ T9461] bridge0: port 2(vlan2) entered disabled state
[  420.683056][ T9461] vlan2: entered allmulticast mode
[  420.688826][ T9461] bridge0: entered allmulticast mode
[  420.729553][ T9461] vlan2: left allmulticast mode
[  420.734624][ T9461] bridge0: left allmulticast mode
[  420.985968][ T5872] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  421.232161][ T5872] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  421.243368][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.252189][ T5872] usb 5-1: Product: syz
[  421.256702][ T5872] usb 5-1: Manufacturer: syz
[  421.261492][ T5872] usb 5-1: SerialNumber: syz
[  421.279931][ T5872] usb 5-1: config 0 descriptor??
[  421.293296][ T5872] ch341 5-1:0.0: ch341-uart converter detected
[  421.463577][ T9469] loop2: detected capacity change from 0 to 4096
[  421.508279][ T9469] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  421.513572][ T9473] program syz.6.1337 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  421.627217][ T9469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.089588][ T9481] loop1: detected capacity change from 0 to 512
[  422.139103][ T5872] usb 5-1: failed to send control message: -71
[  422.147047][ T5872] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  422.194292][ T5872] usb 5-1: USB disconnect, device number 14
[  422.197583][ T5809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.202961][ T5872] ch341 5-1:0.0: device disconnected
[  422.323867][ T9481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.338472][ T9481] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  422.474511][ T6392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.619023][ T9481] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  422.792126][ T5824] Bluetooth: hci2: link tx timeout
[  422.797995][ T5824] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  422.962630][ T5816] VFS: Lookup of '��' in ext4 loop1 would have caused loop
[  422.971870][ T5816] VFS: Lookup of '��' in ext4 loop1 would have caused loop
[  423.152261][ T6894] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.416180][   T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.514565][   T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.650874][   T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  423.810285][   T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.130494][   T58] bridge_slave_0: left allmulticast mode
[  424.136506][   T58] bridge_slave_0: left promiscuous mode
[  424.143567][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.489450][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  424.505936][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  424.519565][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  424.548634][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  424.733258][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  424.865475][ T5824] Bluetooth: hci2: command 0x0406 tx timeout
[  424.908946][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  424.942646][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  424.959366][   T58] bond0 (unregistering): Released all slaves
[  425.760350][ T9505] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1349'.
[  425.788007][ T9504] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1349'.
[  425.865563][ T9506] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1349'.
[  426.347389][   T58] hsr_slave_0: left promiscuous mode
[  426.388814][   T58] hsr_slave_1: left promiscuous mode
[  426.398161][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  426.406547][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  426.447834][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  426.460660][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.554703][   T58] veth1_macvtap: left promiscuous mode
[  426.568831][   T58] veth0_macvtap: left promiscuous mode
[  426.574716][   T58] veth1_vlan: left promiscuous mode
[  426.580422][   T58] veth0_vlan: left promiscuous mode
[  426.602930][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  426.716560][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  426.726206][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  426.739687][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  426.751280][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  426.945131][ T5821] Bluetooth: hci3: command tx timeout
[  427.582232][ T9526] loop2: detected capacity change from 0 to 256
[  427.850043][ T9526] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  428.080770][ T9524] loop6: detected capacity change from 0 to 40427
[  428.087105][   T58] team0 (unregistering): Port device team_slave_1 removed
[  428.100566][ T9524] F2FS-fs (loop6): Image doesn't support compression
[  428.107674][ T9524] F2FS-fs (loop6): build fault injection rate: 690
[  428.117310][ T9524] F2FS-fs (loop6): invalid crc value
[  428.188791][   T58] team0 (unregistering): Port device team_slave_0 removed
[  428.512202][ T9524] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  428.524474][ T9524] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  428.676361][ T9496] chnl_net:caif_netlink_parms(): no params data found
[  428.946587][ T5821] Bluetooth: hci4: command tx timeout
[  429.030910][ T5821] Bluetooth: hci3: command tx timeout
[  429.362450][ T9514] loop4: detected capacity change from 0 to 32768
[  429.435559][ T9514] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1353 (9514)
[  429.466815][   T58] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  429.995851][ T9515] chnl_net:caif_netlink_parms(): no params data found
[  430.327102][ T9496] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.334715][ T9496] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.345096][ T9496] bridge_slave_0: entered allmulticast mode
[  430.356744][ T9496] bridge_slave_0: entered promiscuous mode
[  430.398884][ T9543] netlink: 612 bytes leftover after parsing attributes in process `syz.2.1362'.
[  430.427741][ T9496] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.435642][ T9496] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.443335][ T9496] bridge_slave_1: entered allmulticast mode
[  430.458373][ T9496] bridge_slave_1: entered promiscuous mode
[  430.781728][ T9496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.831769][ T9496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.029459][ T5821] Bluetooth: hci4: command tx timeout
[  431.087493][ T9496] team0: Port device team_slave_0 added
[  431.107303][ T5821] Bluetooth: hci3: command tx timeout
[  431.306627][ T9496] team0: Port device team_slave_1 added
[  431.325866][ T9515] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.333339][ T9515] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.342876][ T9515] bridge_slave_0: entered allmulticast mode
[  431.352408][ T9515] bridge_slave_0: entered promiscuous mode
[  431.448483][ T9515] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.456251][ T9515] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.463973][ T9515] bridge_slave_1: entered allmulticast mode
[  431.473409][ T9515] bridge_slave_1: entered promiscuous mode
[  431.568412][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_0
[  431.575717][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.610575][ T9496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.729822][ T9515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  431.743657][ T9496] batman_adv: batadv0: Adding interface: batadv_slave_1
[  431.752089][ T9496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.782782][ T9496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.825747][ T9515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  432.113611][ T9515] team0: Port device team_slave_0 added
[  432.328277][ T9515] team0: Port device team_slave_1 added
[  432.659521][ T9496] hsr_slave_0: entered promiscuous mode
[  432.669294][ T9496] hsr_slave_1: entered promiscuous mode
[  432.677972][ T9496] debugfs: 'hsr0' already exists in 'hsr'
[  432.683954][ T9496] Cannot create hsr debugfs directory
[  432.696302][ T9515] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.708494][ T9515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  432.737204][ T9515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.820602][ T9515] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.828408][ T9515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  432.855174][ T9515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  433.110513][ T5821] Bluetooth: hci4: command tx timeout
[  433.193872][ T5821] Bluetooth: hci3: command tx timeout
[  433.218248][ T9579] loop6: detected capacity change from 0 to 128
[  433.243886][ T9515] hsr_slave_0: entered promiscuous mode
[  433.254397][ T9515] hsr_slave_1: entered promiscuous mode
[  433.263364][ T9515] debugfs: 'hsr0' already exists in 'hsr'
[  433.269520][ T9515] Cannot create hsr debugfs directory
[  433.293233][ T9579] EXT4-fs: Ignoring removed nobh option
[  433.382061][ T9579] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  433.429071][ T9579] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  433.733218][ T9587] netlink: 'syz.4.1378': attribute type 21 has an invalid length.
[  433.746035][ T9587] netlink: 'syz.4.1378': attribute type 1 has an invalid length.
[  433.754106][ T9587] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1378'.
[  433.777078][ T7618] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  433.848826][ T9589] loop2: detected capacity change from 0 to 128
[  434.042436][ T9496] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  434.100172][ T9496] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  434.172429][ T9496] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  434.234220][ T9496] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  434.419248][ T9515] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  434.498957][ T9515] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  434.556587][ T9515] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  434.612283][ T9515] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  434.776916][ T9598] usb usb1: check_ctrlrecip: process 9598 (syz.4.1383) requesting ep 01 but needs 81
[  434.787313][ T9598] usb usb1: usbfs: process 9598 (syz.4.1383) did not claim interface 0 before use
[  435.185975][ T5821] Bluetooth: hci4: command tx timeout
[  435.217130][ T9496] 8021q: adding VLAN 0 to HW filter on device bond0
[  435.295784][ T9496] 8021q: adding VLAN 0 to HW filter on device team0
[  435.358862][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.366401][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  435.490620][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.498340][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.023372][ T9515] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.145804][ T9515] 8021q: adding VLAN 0 to HW filter on device team0
[  436.197785][ T4110] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.205523][ T4110] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.273708][ T4110] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.281888][ T4110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.862308][ T9628] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  437.316899][ T9496] 8021q: adding VLAN 0 to HW filter on device batadv0
[  437.837249][ T9644] loop6: detected capacity change from 0 to 1024
[  438.013981][ T9644] hfsplus: invalid extended attribute record
[  438.067697][ T9515] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.080311][ T9644] =====================================================
[  438.088052][ T9644] BUG: KMSAN: uninit-value in hfsplus_rename_cat+0x1173/0x17e0
[  438.096036][ T9644]  hfsplus_rename_cat+0x1173/0x17e0
[  438.101433][ T9644]  hfsplus_rename+0x1fc/0x2f0
[  438.106974][ T9644]  vfs_rename+0x1f51/0x2530
[  438.111786][ T9644]  do_renameat2+0x1484/0x1a50
[  438.117095][ T9644]  __x64_sys_rename+0xd7/0x140
[  438.122667][ T9644]  x64_sys_call+0x269/0x3e20
[  438.127807][ T9644]  do_syscall_64+0xd9/0x210
[  438.133598][ T9644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.140839][ T9644] 
[  438.143583][ T9644] Uninit was stored to memory at:
[  438.149216][ T9644]  hfsplus_rename_cat+0x10a9/0x17e0
[  438.155153][ T9644]  hfsplus_rename+0x1fc/0x2f0
[  438.160202][ T9644]  vfs_rename+0x1f51/0x2530
[  438.165832][ T9644]  do_renameat2+0x1484/0x1a50
[  438.170730][ T9644]  __x64_sys_rename+0xd7/0x140
[  438.176036][ T9644]  x64_sys_call+0x269/0x3e20
[  438.180903][ T9644]  do_syscall_64+0xd9/0x210
[  438.186082][ T9644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.192307][ T9644] 
[  438.195476][ T9644] Uninit was stored to memory at:
[  438.200808][ T9644]  hfsplus_create_cat+0x18fb/0x1910
[  438.206367][ T9644]  hfsplus_mknod+0x208/0x560
[  438.211331][ T9644]  hfsplus_mkdir+0x5a/0x80
[  438.216393][ T9644]  vfs_mkdir+0x4ea/0x850
[  438.220996][ T9644]  do_mkdirat+0x41a/0xf30
[  438.225842][ T9644]  __x64_sys_mkdirat+0xc1/0x140
[  438.230948][ T9644]  x64_sys_call+0x338/0x3e20
[  438.236865][ T9644]  do_syscall_64+0xd9/0x210
[  438.241768][ T9644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.248463][ T9644] 
[  438.250857][ T9644] Uninit was stored to memory at:
[  438.256625][ T9644]  hfsplus_create_cat+0x18fb/0x1910
[  438.262350][ T9644]  hfsplus_fill_super+0x211d/0x2730
[  438.268092][ T9644]  get_tree_bdev_flags+0x6e3/0x920
[  438.273382][ T9644]  get_tree_bdev+0x38/0x50
[  438.278176][ T9644]  hfsplus_get_tree+0x35/0x40
[  438.283181][ T9644]  vfs_get_tree+0xb0/0x5c0
[  438.288113][ T9644]  do_new_mount+0x733/0x1420
[  438.292873][ T9644]  path_mount+0x6db/0x1e90
[  438.297800][ T9644]  __se_sys_mount+0x6eb/0x7d0
[  438.302783][ T9644]  __x64_sys_mount+0xe4/0x150
[  438.308290][ T9644]  x64_sys_call+0x3604/0x3e20
[  438.313154][ T9644]  do_syscall_64+0xd9/0x210
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  438.318168][ T9644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.324219][ T9644] 
[  438.326776][ T9644] Uninit was created at:
[  438.331324][ T9644]  __alloc_frozen_pages_noprof+0x689/0xf00
[  438.338296][ T9644]  alloc_pages_mpol+0x328/0x860
[  438.343317][ T9644]  alloc_frozen_pages_noprof+0xf7/0x200
[  438.349905][ T9644]  allocate_slab+0x24d/0x1220
[  438.354783][ T9644]  ___slab_alloc+0x1024/0x34e0
[  438.360005][ T9644]  kmem_cache_alloc_lru_noprof+0x922/0xed0
[  438.366146][ T9644]  hfsplus_alloc_inode+0x5a/0xd0
[  438.371334][ T9644]  alloc_inode+0x8a/0x4a0
[  438.376150][ T9644]  iget_locked+0x239/0x12d0
[  438.380917][ T9644]  hfsplus_iget+0x5c/0xb80
[  438.385711][ T9644]  hfsplus_btree_open+0x128/0x1cf0
[  438.391023][ T9644]  hfsplus_fill_super+0x1161/0x2730
[  438.396670][ T9644]  get_tree_bdev_flags+0x6e3/0x920
[  438.402067][ T9644]  get_tree_bdev+0x38/0x50
[  438.407070][ T9644]  hfsplus_get_tree+0x35/0x40
[  438.411886][ T9644]  vfs_get_tree+0xb0/0x5c0
[  438.416675][ T9644]  do_new_mount+0x733/0x1420
[  438.421430][ T9644]  path_mount+0x6db/0x1e90
[  438.426160][ T9644]  __se_sys_mount+0x6eb/0x7d0
[  438.431088][ T9644]  __x64_sys_mount+0xe4/0x150
[  438.436673][ T9644]  x64_sys_call+0x3604/0x3e20
[  438.442658][ T9644]  do_syscall_64+0xd9/0x210
[  438.448090][ T9644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.454158][ T9644] 
[  438.456834][ T9644] CPU: 1 UID: 0 PID: 9644 Comm: syz.6.1398 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(none) 
[  438.469073][ T9644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  438.479888][ T9644] =====================================================
[  438.487143][ T9644] Disabling lock debugging due to kernel taint
[  438.493571][ T9644] Kernel panic - not syncing: kmsan.panic set ...
[  438.500385][ T9644] CPU: 1 UID: 0 PID: 9644 Comm: syz.6.1398 Tainted: G    B               6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(none) 
[  438.513856][ T9644] Tainted: [B]=BAD_PAGE
[  438.518443][ T9644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  438.528718][ T9644] Call Trace:
[  438.532186][ T9644]  <TASK>
[  438.535192][ T9644]  __dump_stack+0x26/0x30
[  438.539675][ T9644]  dump_stack_lvl+0x53/0x270
[  438.544424][ T9644]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  438.550574][ T9644]  dump_stack+0x1e/0x25
[  438.554982][ T9644]  vpanic+0x361/0xc50
[  438.559145][ T9644]  panic+0x15d/0x160
[  438.563283][ T9644]  kmsan_report+0x31c/0x320
[  438.567959][ T9644]  ? __msan_warning+0x1b/0x30
[  438.572791][ T9644]  ? hfsplus_rename_cat+0x1173/0x17e0
[  438.578572][ T9644]  ? hfsplus_rename+0x1fc/0x2f0
[  438.583585][ T9644]  ? vfs_rename+0x1f51/0x2530
[  438.588421][ T9644]  ? do_renameat2+0x1484/0x1a50
[  438.593419][ T9644]  ? __x64_sys_rename+0xd7/0x140
[  438.598615][ T9644]  ? x64_sys_call+0x269/0x3e20
[  438.603540][ T9644]  ? do_syscall_64+0xd9/0x210
[  438.608341][ T9644]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.614562][ T9644]  ? kmsan_get_metadata+0xfb/0x160
[  438.620187][ T9644]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  438.626326][ T9644]  ? hfsplus_bnode_dump+0x50a/0x560
[  438.631752][ T9644]  ? kmsan_get_metadata+0xfb/0x160
[  438.637082][ T9644]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  438.643334][ T9644]  ? hfsplus_brec_remove+0x92f/0xa60
[  438.648833][ T9644]  ? kmsan_get_metadata+0xfb/0x160
[  438.654129][ T9644]  __msan_warning+0x1b/0x30
[  438.658784][ T9644]  hfsplus_rename_cat+0x1173/0x17e0
[  438.664401][ T9644]  ? kfree+0x141/0xec0
[  438.668747][ T9644]  ? filter_irq_stacks+0x49/0x190
[  438.674681][ T9644]  ? stack_depot_save_flags+0x35/0x7b0
[  438.680313][ T9644]  ? kmsan_get_metadata+0xfb/0x160
[  438.685570][ T9644]  ? kmsan_get_metadata+0xfb/0x160
[  438.691058][ T9644]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  438.698317][ T9644]  ? kmsan_get_metadata+0xfb/0x160
[  438.703574][ T9644]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  438.709624][ T9644]  ? kmsan_get_metadata+0xfb/0x160
[  438.714869][ T9644]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  438.720951][ T9644]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  438.727573][ T9644]  hfsplus_rename+0x1fc/0x2f0
[  438.732546][ T9644]  ? __pfx_hfsplus_rename+0x10/0x10
[  438.737898][ T9644]  vfs_rename+0x1f51/0x2530
[  438.742599][ T9644]  ? end_current_label_crit_section+0x112/0x290
[  438.749181][ T9644]  do_renameat2+0x1484/0x1a50
[  438.754163][ T9644]  __x64_sys_rename+0xd7/0x140
[  438.759302][ T9644]  x64_sys_call+0x269/0x3e20
[  438.764066][ T9644]  do_syscall_64+0xd9/0x210
[  438.768719][ T9644]  ? irqentry_exit+0x16/0x60
[  438.773745][ T9644]  ? clear_bhb_loop+0x40/0x90
[  438.778714][ T9644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  438.784853][ T9644] RIP: 0033:0x7f1723f8ebe9
[  438.789371][ T9644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  438.809108][ T9644] RSP: 002b:00007f1724ea0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  438.817686][ T9644] RAX: ffffffffffffffda RBX: 00007f17241b5fa0 RCX: 00007f1723f8ebe9
[  438.825766][ T9644] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000
[  438.833839][ T9644] RBP: 00007f1724011e19 R08: 0000000000000000 R09: 0000000000000000
[  438.842101][ T9644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  438.850254][ T9644] R13: 00007f17241b6038 R14: 00007f17241b5fa0 R15: 00007ffec8dfc538
[  438.858381][ T9644]  </TASK>
[  438.861848][ T9644] Kernel Offset: disabled
[  438.866252][ T9644] Rebooting in 86400 seconds..