last executing test programs:

11m23.398752084s ago: executing program 32 (id=442):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)

10m55.318729087s ago: executing program 33 (id=715):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000003c0))

10m26.414394967s ago: executing program 34 (id=1001):
keyctl$read(0x2, 0x0, &(0x7f00000027c0)=""/4108, 0x100c)

9m57.456112434s ago: executing program 35 (id=1439):
r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000080)='./file0\x00', 0x241, &(0x7f0000000380)={[{@nogrpid}, {@attr2}, {}, {@norecovery}, {@nolazytime}, {@nouuid}, {@swalloc}, {@attr2}, {@nolazytime}]}, 0x0, 0x97f1, &(0x7f0000012e00)="$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")
ioctl$FITRIM(r0, 0xc0185879, 0x0)

9m35.490360931s ago: executing program 36 (id=1655):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

9m7.590272294s ago: executing program 2 (id=1991):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x331, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)

9m7.590066789s ago: executing program 2 (id=1992):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x1004, r2}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000240)='percpu_alloc_percpu\x00', r1}, 0x66)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000180)={'wg2\x00', @local})
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
write$cgroup_devices(r3, 0x0, 0x0)

9m7.527444448s ago: executing program 2 (id=1993):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000490, &(0x7f0000000c80)={[{@nojournal_checksum}, {@usrjquota}, {@errors_remount}, {@barrier}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@mblk_io_submit}, {@minixdf}, {@resuid}, {@nobh}, {}]}, 0x8, 0x7b1, &(0x7f00000004c0)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f0000000080))
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001cc0)=@newtfilter={0x40, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xd}, {}, {0x0, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_ACT={0x4}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}]}, 0x40}}, 0x0)

9m7.366397228s ago: executing program 2 (id=1999):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0)

9m7.280929974s ago: executing program 2 (id=2000):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)

9m7.030759344s ago: executing program 2 (id=2006):
r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc0405668, &(0x7f0000000000)={0x0, 0x0, 0x1})

9m6.928785646s ago: executing program 37 (id=2006):
r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc0405668, &(0x7f0000000000)={0x0, 0x0, 0x1})

9m5.620787399s ago: executing program 7 (id=2021):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private1, 0x7fff}]}, &(0x7f0000000000)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000001580)={0x0, @in6={{0xa, 0x0, 0x0, @private1}}}, &(0x7f0000001640)=0x90)

9m4.720622368s ago: executing program 7 (id=2024):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
close(r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000080), &(0x7f0000000100)=r0}, 0x20)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)

9m4.65081372s ago: executing program 7 (id=2025):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x1c}}, 0x0)

9m4.599672983s ago: executing program 7 (id=2026):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

9m4.233388957s ago: executing program 7 (id=2027):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d6000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r2, 0x12e9d000)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})

9m3.161255362s ago: executing program 7 (id=2030):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r3, &(0x7f0000000440)}, 0x20)

9m3.064614377s ago: executing program 38 (id=2030):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r3, &(0x7f0000000440)}, 0x20)

8m58.540176513s ago: executing program 9 (id=2068):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000280)='./file0\x00', 0x1, &(0x7f00000002c0)={[{@nodiscard}, {@order_relaxed}, {@errors_continue}, {@nodiscard}, {@discard}, {@nodiscard}]}, 0x1, 0xa07, &(0x7f0000000b00)="$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")

8m58.410365733s ago: executing program 9 (id=2069):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$eJzs3U9rK1UUAPAz+TOJukgWrkRwQBeuHu+9rZsUeQ/ErnxkoS60+FqQJggtFKri2JVbNy78DILgB3HjNxDcCu6sUBiZyaRJ2pg2palof79Fe3vnnLlnboZ2WujJx6+O959nsXfy5a/R7SbRGMQgTpPoRyOmvo4Fg28DAPgvOy2K+KOYWCcviYju5soCADboej//W7PhT3dSFgCwQc/e/+Ddre3tJ+9lWTeejr85Gpa/2ZefJ8e39uLTGMVuPIxenEVUDwrtqJ4WyuHToijyVlbqxxvj/GhYZo4/+rk+/9bv9R8LSv3q4/nTRpX/zvaTR9nEXH5e1vFivf6gXP9x9OLl8+SF/MdL8mOYxpuvz9X/IHrxyyfxWYzieVXELP+rR1n2dvHdn198WJZX5if50bBTxc0UzTt8WQAAAAAAAAAAAAAAAAAAAAAA+J97UPfO6UTVv6ecqvvvNM/KL9qRTfUX+/NM8qetfRb6AxVFkVftcib9dR5mWVbUgbP8VrzSmm8sCAAAAAAAAAAAAAAAAAAAAPfX4fHn+zuj0e7BrQym3QBaEfHXs4ibnmcwN/NarA7u1GvujEaNergY05qfieY0JolYWUZ5Ebe0LVcNXrhUcz344cd1T9i9Oqa9fK3D4+ZNX6/84sz07trfSZbvYSemM9160e/TiFlMGtdcPf2nQ0Wsc/ulSw/11t6N9KVqkK+IiWRVYW/9Ntm5eia5eBVptatL09v1YC79wr1xrfs5upP0y98rEt06AAAAAAAAAAAAAAAAAABgo2b//bvk4MnK1EbR2VhZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCnZu//v8Ygj4h2fYIrgtM4OPyXLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB74O8AAAD//0aWVl0=")
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000580)}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000640)}], 0x1}}], 0x2, 0x4080000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b)

8m58.328457197s ago: executing program 9 (id=2072):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x840, &(0x7f0000000540)=ANY=[@ANYBLOB="000002"], 0x3, 0x170, &(0x7f0000000200)="$eJzs201O8nAQx/FfeYfnjUd0Y1xgXOhGKuAbOz0KgUKIRYm4gZgoR/EcHsiNJnoBa0RapSxMjFCk389qpkOZKckfZoMAhFZeeRkydLsuaS2VvcoZQY8EYEYcSc8OgHCKPgY9AYBgPBxLHUn3T5c1ReMT+8Fr/citRxLe9Ts3GEirsVHdSCrl3y9upE33fiMtKT3+/gMp49Uzk/0H0taG2/+XfuuP/uqfsvqvpVG97t2/8j1LERAShgr+fOxCRI2Wbe14eXyYF708McxLvrzs5Uk1dm2rUDuz6/rwIgBzIPLJ+Y/6zn/Md/4B/FzdXv+katvW+SIGCV1L0+/19kk6zjw8MkFogpim2iLobyYA02ZetDtmt9ffbrWrTatpnZYOS5X98l7xoGION39zfP8HsDjef/SDngQAAAAAAAAAAAAAAHxVTstBjwAAAABgRmbxR6WgnxEAAAAAAAAAAAAAAAAAAABYFC8BAAD//2zIId8=")

8m58.165926601s ago: executing program 9 (id=2075):
syz_mount_image$minix(&(0x7f0000000140), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a8b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b3f745176865442c1217f19a67a534064b7236a66600000000005e8d33d35615188d77fb93669ff6f9e9de7655d53422b29b3ae796fdefbc648f3c39979c02ca6082ca2de5"], 0x1, 0x190, &(0x7f0000000e40)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
mkdir(&(0x7f0000000180)='./file0\x00', 0x12a)

8m57.843818047s ago: executing program 9 (id=2077):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0)
ioctl$COMEDI_LOCK(r0, 0x6405)
ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f0000000140))

8m55.978932503s ago: executing program 9 (id=2095):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000002000), 0x4)

8m55.756416544s ago: executing program 39 (id=2095):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000002000), 0x4)

8m29.838607631s ago: executing program 0 (id=2426):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2ffdd934517f3e145fa02e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

8m29.613770862s ago: executing program 0 (id=2429):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
socketpair(0x1, 0x1, 0x0, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000010000000000a"], 0xb8}}, 0x0)

8m29.5779373s ago: executing program 0 (id=2431):
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x8084, 0x2, 0x2}, 0x18, 0x0)
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000340)="c28f", 0x2}, {0x0}], 0x2)

8m29.507313102s ago: executing program 0 (id=2433):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)={[{@nodecompose}, {@nobarrier}, {@nodecompose}, {@force}, {@nobarrier}, {@type={'type', 0x3d, "aff0aae8"}}, {@nls={'nls', 0x3d, 'iso8859-9'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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")
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='tracefs\x00', 0x800, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5006d, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1002c, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0xf18c}}]})

8m29.390078279s ago: executing program 0 (id=2435):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x11, 0x7fffffff}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x8a, &(0x7f00000001c0)=""/138, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x2}, 0x94)

8m29.069861409s ago: executing program 0 (id=2440):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x50)
r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}]}], {0x14}}, 0xd8}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r6)
keyctl$KEYCTL_MOVE(0x1e, r6, r6, r8, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_int(r9, 0x0, 0xf, &(0x7f0000000000)=0x8, 0x4)
bind$inet(r9, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0x7040, 0x0)
syz_open_dev$I2C(&(0x7f0000000040), 0xb54, 0x1)

8m28.937272927s ago: executing program 40 (id=2440):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x50)
r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}]}], {0x14}}, 0xd8}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r6)
keyctl$KEYCTL_MOVE(0x1e, r6, r6, r8, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_int(r9, 0x0, 0xf, &(0x7f0000000000)=0x8, 0x4)
bind$inet(r9, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0x7040, 0x0)
syz_open_dev$I2C(&(0x7f0000000040), 0xb54, 0x1)

6m5.096481285s ago: executing program 8 (id=4588):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r1, 0x1, 0x1, 0x6, @local}, 0x14)

6m5.037054236s ago: executing program 8 (id=4589):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)

6m5.036873565s ago: executing program 8 (id=4590):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25GETINFOOLD(r0, 0x5411, &(0x7f0000000000))

6m4.966946379s ago: executing program 8 (id=4591):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x4444, &(0x7f000000cd00)="$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")
creat(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x104)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
write$cgroup_pressure(r0, &(0x7f0000000340)={'some', 0x20, 0x10000, 0x20, 0x6}, 0x2f)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0)

6m4.600517713s ago: executing program 8 (id=4594):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c000280080003400000001608000140000000000800014000000000080002400000001508000340000000040800014000000002080003400000000d080001400000000a"], 0x110}}, 0x0)

6m3.45676477s ago: executing program 8 (id=4613):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000140)={0xa0000001})
epoll_wait(r4, &(0x7f0000000280)=[{}], 0x1, 0x4000005)
write(0xffffffffffffffff, &(0x7f0000005c00), 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6m3.330030138s ago: executing program 41 (id=4613):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000140)={0xa0000001})
epoll_wait(r4, &(0x7f0000000280)=[{}], 0x1, 0x4000005)
write(0xffffffffffffffff, &(0x7f0000005c00), 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m5.679896443s ago: executing program 4 (id=6489):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x39}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

4m5.679685067s ago: executing program 4 (id=6490):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x100)
readv(r0, &(0x7f00000021c0)=[{&(0x7f0000002180)=""/23, 0x17}], 0x1)

4m5.598889887s ago: executing program 4 (id=6491):
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000300))

4m5.598779206s ago: executing program 4 (id=6492):
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c6e6f646f74732c636865636b3d7374726963742c666c7573682c6e6f646f74732c6e6f646f74732c71756965742c00a8f43e0a9765c2419bbc93d3bb042cde7dc609bd874b9221aab9404318121ead7505cda193a13e6d2fd30034c9c4f457dc798a67d4d30285c0590475ba33482c83a51b42d7f7ea92b35388ec28309e3b4b8a758575baa63a8679030bf6423a4759c2bb9f9353f43cc4c825234e791353a87ed0bcade85e0808d879b38514fafbba"], 0x1, 0x168, &(0x7f0000000a40)="$eJzs27GK1FAUBuAzJqurNluLRcDGalArS0VWEAOKMoVWCrs2Gxlwmmg1z+AT+GI+gihTTXdFo5OZiDgoMbrzfU0O+RM4t0guJ5Bnl1+eHE1nL6YPF7E/GkV+K4pYjuIgzkQWjXkAAKfJMqX4lFJK5+Zx/l2klIbuCADom/0fAHbPL/f/mwM1BgD0xvwPALvn8ZOn92+X5eGjotiP+DCvJ/WkOTb53Xvl4bXiq4P2rkVdT7JVfr3Js818Ly58y280ebGZn42rV5r8S3bnQdnJL8ZR/8sHAACAnTBeje5r8/3Hdr4fj4vvOvN/U619H+jM73lcyv/eOgCA7c1evzl5XlXHrxT/Q5G3Z96//Qf6UfxQ5FV1vDd8G39cDP1mAvrWPvRDdwIAAAAAAAAAAAAAAPzM7/4hFNn2Fw+9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOj6HAAA//8nKlEY")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

4m5.510417669s ago: executing program 4 (id=6494):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040)=0x21f, 0x4)

4m5.171119962s ago: executing program 4 (id=6501):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@bridge_dellink={0x20, 0x13, 0x5, 0x0, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x40850}}, 0x20}, 0x1, 0x0, 0x0, 0x44004}, 0x0)

4m4.7237235s ago: executing program 42 (id=6501):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@bridge_dellink={0x20, 0x13, 0x5, 0x0, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x40850}}, 0x20}, 0x1, 0x0, 0x0, 0x44004}, 0x0)

2m5.070285973s ago: executing program 5 (id=8442):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x5, 0x8, 0x7}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="240000001a0001ff80000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2m4.995589516s ago: executing program 5 (id=8444):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, 0x0, 0x0)
close(0x3)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f)
read$dsp(r2, &(0x7f00000001c0)=""/95, 0x2)

2m2.783006114s ago: executing program 5 (id=8469):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/rcu_normal', 0x40002, 0x142)
write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x2d, 'cpuacct'}]}, 0x9)

2m2.73088684s ago: executing program 5 (id=8471):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

2m2.603738452s ago: executing program 5 (id=8478):
request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0xfffffffffffffffe)
syz_clone(0x29104200, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m2.302780266s ago: executing program 5 (id=8487):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104)
rmdir(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0)

2m2.121969136s ago: executing program 43 (id=8487):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104)
rmdir(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0)

899.887814ms ago: executing program 1 (id=10495):
syz_usb_connect(0x0, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0xe3, 0x96, 0x37, 0x40, 0x2c7c, 0x700, 0x5fc4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc, 0x0, 0x2, 0xff, 0x10, 0xdc, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x3}}, {{0x9, 0x5, 0x82, 0x2, 0x1ff, 0x40}}]}}]}}]}}, 0x0)

622.196719ms ago: executing program 6 (id=10496):
prctl$PR_MCE_KILL(0x23, 0xb, 0x7ffffffff000)

460.205275ms ago: executing program 6 (id=10498):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000680)=@ethtool_ts_info})

459.952501ms ago: executing program 6 (id=10500):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60)

397.277704ms ago: executing program 6 (id=10502):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getlink={0x3c, 0x12, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x2108, 0x43502}, [@IFLA_EXT_MASK={0x8}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c080}, 0x0)

397.065742ms ago: executing program 6 (id=10503):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x0)

331.994859ms ago: executing program 6 (id=10505):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

279.413372ms ago: executing program 3 (id=10507):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000001514"], 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x8086)

279.139651ms ago: executing program 3 (id=10508):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1000000, r3}, 0x10)

279.035254ms ago: executing program 1 (id=10509):
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r0}, 0x18)

161.454435ms ago: executing program 3 (id=10510):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x1000)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
write(r1, &(0x7f0000000000)='Q', 0x1)
shutdown(r1, 0x1)

66.029759ms ago: executing program 1 (id=10511):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)

65.798698ms ago: executing program 1 (id=10512):
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"00170040", 0x103, 0x5, 0x4, 0xb, 0x2, "000019b1cf000013b09882ffbf2000", '\x00', "0a040006", '\x00', ["8b59b494c1cbd6e4af000700", "ca8cacff5bef5d5a550400", "000000ff0000000000000020", "0000000000000000001000"]})

65.385095ms ago: executing program 3 (id=10513):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x20000)

385.808µs ago: executing program 1 (id=10514):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40000, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00001859c0)={0x1, &(0x7f0000130b40)=[{0xa000002, 0xf00, 0x0, 0xfffeffff, 0x1ff}]})

181.839µs ago: executing program 3 (id=10515):
r0 = epoll_create(0x1ff)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x1000000c})

90.789µs ago: executing program 3 (id=10516):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x1000, 0x4)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
listen(r1, 0x5)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

0s ago: executing program 1 (id=10517):
r0 = semget$private(0x0, 0x6, 0x0)
semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2)
semop(r0, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000001c0))

kernel console output (not intermixed with test programs):

bytes leftover after parsing attributes in process `syz.1.7365'.
[  593.924124][T26795] loop5: detected capacity change from 0 to 512
[  593.956916][T26795] EXT4-fs: Ignoring removed nomblk_io_submit option
[  593.982340][T26795] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  594.004142][T26795] EXT4-fs (loop5): 1 truncate cleaned up
[  594.009014][T26795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  594.042345][T26803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7389'.
[  594.068953][T23766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  594.097006][T26805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7391'.
[  594.405677][ T5903] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  594.574884][ T5903] usb 6-1: Using ep0 maxpacket: 16
[  594.583994][ T5903] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  594.588967][ T5903] usb 6-1: config 1 has no interface number 0
[  594.591546][ T5903] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  594.599187][ T5903] usb 6-1: config 1 interface 105 has no altsetting 0
[  594.604226][ T5903] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  594.608964][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.614544][ T5903] usb 6-1: Product: syz
[  594.616284][ T5903] usb 6-1: Manufacturer: syz
[  594.618898][ T5903] usb 6-1: SerialNumber: syz
[  594.624415][T26813] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  594.855449][ T5903] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22
[  595.073549][ T5903] usb 6-1: USB disconnect, device number 13
[  597.055475][T26948] loop5: detected capacity change from 0 to 2048
[  597.069922][T26948] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  597.394380][T26956] loop5: detected capacity change from 0 to 32768
[  597.703635][T26994] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7451'.
[  597.888711][ T5903] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  598.051170][ T5903] usb 6-1: unable to get BOS descriptor or descriptor too short
[  598.055224][ T5903] usb 6-1: config 5 has an invalid interface number: 58 but max is 0
[  598.058782][ T5903] usb 6-1: config 5 has no interface number 0
[  598.062677][ T5903] usb 6-1: config 5 interface 58 has no altsetting 0
[  598.068860][ T5903] usb 6-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= a.af
[  598.076849][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.079698][ T5903] usb 6-1: Product: syz
[  598.083205][ T5903] usb 6-1: Manufacturer: syz
[  598.085123][ T5903] usb 6-1: SerialNumber: syz
[  598.323332][ T5903] usb 6-1: USB disconnect, device number 14
[  599.587209][T27032] netlink: 'syz.3.7466': attribute type 2 has an invalid length.
[  599.748668][T27045] io-wq is not configured for unbound workers
[  600.187296][ T5884] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  600.250676][T27071] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7483'.
[  600.347535][ T5884] usb 6-1: Using ep0 maxpacket: 16
[  600.350724][ T5884] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  600.353332][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  600.358234][ T5884] usb 6-1: config 0 has no interface number 0
[  600.361396][ T5884] usb 6-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  600.367135][ T5884] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  600.371896][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  600.374615][ T5884] usb 6-1: Product: syz
[  600.376113][ T5884] usb 6-1: SerialNumber: syz
[  600.386317][ T5884] usb 6-1: config 0 descriptor??
[  600.394340][ T5884] usbhid 6-1:0.8: couldn't find an input interrupt endpoint
[  600.619156][ T5884] usb 6-1: USB disconnect, device number 15
[  601.304147][T27112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7496'.
[  601.308025][T27112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7496'.
[  601.618825][T27136] loop5: detected capacity change from 0 to 4096
[  601.648190][T27136] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  601.936547][T27170] overlayfs: failed to clone upperpath
[  603.385626][T27210] netlink: 'syz.5.7532': attribute type 1 has an invalid length.
[  603.388941][T27210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7532'.
[  603.553433][T27226] [U] 1WT`8H$09\
[  603.557363][T27226] [U] ;2}UGVĥ#O9ե>-ߴSݢP
[  603.561487][T27225] [U] 4XZ^Y)MC.OȞPOW
[  603.627706][T27235] loop5: detected capacity change from 0 to 128
[  603.630860][T27235] EXT4-fs: Ignoring removed nobh option
[  603.638902][T27235] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  603.644790][T27235] ext4 filesystem being mounted at /254/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  603.678461][T23766] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  604.024607][T27266] loop5: detected capacity change from 0 to 32768
[  604.037303][T27266] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  604.043152][T27266] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  604.054322][T27266] XFS (loop5): Ending clean mount
[  604.061160][T27266] XFS (loop5): Quotacheck needed: Please wait.
[  604.109273][T27266] XFS (loop5): Quotacheck: Done.
[  604.126598][T23766] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  604.407509][T27290] loop5: detected capacity change from 0 to 4096
[  604.585220][T27308] netlink: 'syz.5.7561': attribute type 2 has an invalid length.
[  604.588320][T27308] netlink: 'syz.5.7561': attribute type 1 has an invalid length.
[  604.648356][T27314] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20004
[  605.036378][T27329] loop5: detected capacity change from 0 to 32768
[  605.044874][T27329] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7569 (27329)
[  605.055316][T27329] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  605.059467][T27329] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  605.064129][T27329] BTRFS info (device loop5): using free-space-tree
[  605.122836][T23766] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  605.586199][   T33] audit: type=1800 audit(2000001049.150:164): pid=27387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7583" name="/" dev="9p" ino=2 res=0 errno=0
[  605.727892][T27409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7591'.
[  605.938816][ T5918] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  606.099287][ T5918] usb 6-1: Using ep0 maxpacket: 8
[  606.111424][ T5918] usb 6-1: unable to get BOS descriptor or descriptor too short
[  606.117123][ T5918] usb 6-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8
[  606.121697][ T5918] usb 6-1: config 8 interface 0 has no altsetting 0
[  606.126633][ T5918] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  606.130498][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.134616][ T5918] usb 6-1: Product: syz
[  606.136577][ T5918] usb 6-1: Manufacturer: syz
[  606.138714][ T5918] usb 6-1: SerialNumber: syz
[  606.153932][T27400] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  606.400625][ T5918] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  606.403122][ T5918] usb 6-1: selecting invalid altsetting 0
[  606.449448][ T5918] usb 6-1: USB disconnect, device number 16
[  606.493456][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  608.560894][T27597] wg1 speed is unknown, defaulting to 1000
[  608.952425][T27635] netlink: 'syz.1.7666': attribute type 21 has an invalid length.
[  608.955789][T27635] IPv6: NLM_F_CREATE should be specified when creating new route
[  608.959090][T27635] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  608.961931][T27635] IPv6: NLM_F_CREATE should be set when creating new route
[  608.964951][T27635] IPv6: NLM_F_CREATE should be set when creating new route
[  608.967838][T27635] IPv6: NLM_F_CREATE should be set when creating new route
[  609.325269][T27645] loop5: detected capacity change from 0 to 512
[  609.370179][T27645] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.7671: corrupted inode contents
[  609.384684][T27645] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.7671: mark_inode_dirty error
[  609.396362][T27645] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.7671: corrupted inode contents
[  609.404756][T27645] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.7671: mark_inode_dirty error
[  609.432273][T27645] Quota error (device loop5): write_blk: dquota write failed
[  609.438649][T27645] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  609.442013][T27645] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7671: Failed to acquire dquot type 0
[  609.452578][T27662] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  609.458075][T27645] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.7671: corrupted inode contents
[  609.464223][T27645] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.7671: mark_inode_dirty error
[  609.474421][T27645] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.7671: corrupted inode contents
[  609.479601][T27645] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.7671: mark_inode_dirty error
[  609.489452][T27645] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.7671: corrupted inode contents
[  609.499236][T27645] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  609.502694][T27645] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.7671: corrupted inode contents
[  609.508151][T27645] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.7671: mark_inode_dirty error
[  609.515169][T27645] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  609.524386][T27645] EXT4-fs (loop5): 1 truncate cleaned up
[  609.527712][T27645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  609.541436][T27645] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  609.570922][T23766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.905028][T27677] netlink: set zone limit has 4 unknown bytes
[  610.572649][T27701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7689'.
[  610.575813][T27701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  611.171931][   T33] audit: type=1326 audit(2000001054.369:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27722 comm="syz.3.7698" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d2978ebe9 code=0x0
[  611.400545][T27728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7700'.
[  612.525675][T27771] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  613.152753][T27778] loop5: detected capacity change from 0 to 32768
[  613.172367][T27778] XFS (loop5): alignment check failed: sunit/swidth vs. blocksize(4096)
[  613.437790][T27800] loop5: detected capacity change from 0 to 64
[  613.453967][T27800] minix_free_block (loop5:21): bit already cleared
[  614.249870][T27835] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  614.289630][T27835] bond3: entered promiscuous mode
[  614.295834][T27835] bond3: entered allmulticast mode
[  614.298481][T27835] 8021q: adding VLAN 0 to HW filter on device bond3
[  614.517721][   T33] audit: type=1326 audit(2000001057.503:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27875 comm="syz.5.7741" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9d658ebe9 code=0x0
[  615.407815][T27892] loop5: detected capacity change from 0 to 2
[  615.414873][T27892] jffs2: Bad value for 'rp_size'
[  615.848120][T27906] loop5: detected capacity change from 0 to 32768
[  615.860299][T27906] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  615.891254][T27906] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  615.900741][T27906] XFS (loop5): Starting recovery (logdev: internal)
[  615.908897][T27906] XFS (loop5): Ending recovery (logdev: internal)
[  615.933133][T23766] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  616.195076][T27921] loop5: detected capacity change from 0 to 2048
[  617.220471][T27959] loop5: detected capacity change from 0 to 1024
[  617.290674][T14821] hfsplus: b-tree write err: -5, ino 3
[  617.304381][T23766] hfsplus: node 4:3 still has 3 user(s)!
[  617.488365][   T33] audit: type=1800 audit(2000001060.281:167): pid=27978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7767" name="nullb0" dev="tmpfs" ino=6396 res=0 errno=0
[  617.567850][T27982] loop5: detected capacity change from 0 to 4096
[  617.605991][T27982] ntfs3(loop5): ino=1f, mi_enum_attr
[  617.608250][T27982] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  617.619562][T27982] ntfs3(loop5): ino=9, attr_set_size
[  617.784259][T28004] loop5: detected capacity change from 0 to 512
[  617.802958][T28004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  617.812310][T28004] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  617.897355][T23766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.324665][T28018] loop5: detected capacity change from 0 to 32768
[  618.359754][T28018] JBD2: Ignoring recovery information on journal
[  618.388130][T28018] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  618.448383][T23766] ocfs2: Unmounting device (7,5) on (node local)
[  619.192083][T28054] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  620.289364][T28098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7807'.
[  620.292369][T28098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7807'.
[  620.295551][T28098] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7807'.
[  620.978285][T28138] loop5: detected capacity change from 0 to 16
[  620.983623][T28138] erofs (device loop5): mounted with root inode @ nid 36.
[  620.998297][   T33] audit: type=1800 audit(2000001063.555:168): pid=28138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7823" name="file1" dev="loop5" ino=86 res=0 errno=0
[  621.191723][T28157] loop5: detected capacity change from 0 to 4096
[  621.199509][T28157] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  621.814206][T28186] netlink: 'syz.5.7839': attribute type 1 has an invalid length.
[  621.855496][T28190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7840'.
[  622.463382][   T33] audit: type=1326 audit(2000001064.930:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28198 comm="syz.3.7843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  622.473469][   T33] audit: type=1326 audit(2000001064.939:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28198 comm="syz.3.7843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  622.484476][   T33] audit: type=1326 audit(2000001064.948:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28198 comm="syz.3.7843" exe="/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  622.496083][   T33] audit: type=1326 audit(2000001064.948:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28198 comm="syz.3.7843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  622.510840][   T33] audit: type=1326 audit(2000001064.948:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28198 comm="syz.3.7843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  623.389894][T28221] netlink: 'syz.5.7851': attribute type 3 has an invalid length.
[  623.393211][T28221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7851'.
[  623.426476][T28224] loop5: detected capacity change from 0 to 512
[  623.431220][T28224] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  623.443786][T28224] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  623.480284][T28230] loop5: detected capacity change from 0 to 512
[  623.484644][T28230] EXT4-fs: Ignoring removed oldalloc option
[  623.494587][T28230] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  623.497523][T28230] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  623.673922][T28239] loop5: detected capacity change from 0 to 32768
[  623.687283][T28239] find_entry called with index = 0
[  625.606667][T28268] loop5: detected capacity change from 0 to 512
[  625.612221][T28268] EXT4-fs (loop5): external journal device major/minor numbers have changed
[  625.650446][T28268] block device autoloading is deprecated and will be removed.
[  625.657655][T28268] syz.5.7864: attempt to access beyond end of device
[  625.657655][T28268] md185: rw=0, sector=2, nr_sectors = 2 limit=0
[  625.665040][T28268] EXT4-fs (loop5): couldn't read superblock of external journal
[  625.865298][T28289] loop5: detected capacity change from 0 to 16
[  625.868945][T28290] netlink: 'syz.1.7868': attribute type 1 has an invalid length.
[  625.872329][T28290] netlink: 'syz.1.7868': attribute type 2 has an invalid length.
[  625.874857][T28289] erofs (device loop5): mounted with root inode @ nid 36.
[  625.879285][T28290] netlink: 'syz.1.7868': attribute type 1 has an invalid length.
[  625.882511][T28290] netlink: 'syz.1.7868': attribute type 2 has an invalid length.
[  626.082137][T28289] erofs (device loop5): invalid de[0].nameoff 0 @ nid 36
[  627.656504][T28324] bridge_slave_1: left allmulticast mode
[  627.659153][T28324] bridge_slave_1: left promiscuous mode
[  627.661711][T28324] bridge0: port 2(bridge_slave_1) entered disabled state
[  627.681923][T28324] bridge_slave_0: left allmulticast mode
[  627.691621][T28324] bridge_slave_0: left promiscuous mode
[  627.712970][T28324] bridge0: port 1(bridge_slave_0) entered disabled state
[  628.395086][T28337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7883'.
[  628.973791][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  628.980387][T28344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7885'.
[  628.980640][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  628.984703][T28344] veth0_to_bond: entered allmulticast mode
[  629.056175][T28351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7888'.
[  629.973446][T28377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  629.990288][T28379] loop5: detected capacity change from 0 to 1024
[  630.049295][ T4584] hfsplus: b-tree write err: -5, ino 4
[  630.332417][T28404] futex_wake_op: syz.3.7910 tries to shift op by -1; fix this program
[  631.646169][T28435] vlan0: entered allmulticast mode
[  631.851748][   T33] audit: type=1326 audit(2000001074.708:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28454 comm="syz.1.7927" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x0
[  631.879955][T28456] loop5: detected capacity change from 0 to 1024
[  631.889665][T28456] EXT4-fs: Ignoring removed oldalloc option
[  631.892223][T28456] EXT4-fs: Ignoring removed bh option
[  631.918805][T28456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  632.097267][T28456] EXT4-fs: Ignoring removed orlov option
[  632.103727][T28456] EXT4-fs (loop5): can't enable nombcache during remount
[  632.537550][T23766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.708503][T28487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7937'.
[  632.758511][T28491] tipc: Started in network mode
[  632.760569][T28491] tipc: Node identity 7, cluster identity 4711
[  632.765781][T28491] tipc: Node number set to 7
[  632.804288][T28495] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  632.807450][T28495] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  632.990704][T28510] loop5: detected capacity change from 0 to 16
[  632.999649][T28510] erofs (device loop5): mounted with root inode @ nid 36.
[  633.006716][T28510] erofs (device loop5): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  633.012497][T28510] erofs (device loop5): big pcluster head1/2 of compact indexes should be consistent for nid 36
[  633.015864][T28510] erofs (device loop5): read error -117 @ 72 of nid 36
[  633.531394][T28540] wg1 speed is unknown, defaulting to 1000
[  633.533938][T28544] netlink: 'syz.3.7957': attribute type 1 has an invalid length.
[  633.537271][T28544] netlink: 'syz.3.7957': attribute type 1 has an invalid length.
[  634.032455][T28575] loop5: detected capacity change from 0 to 512
[  634.054766][T28575] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.7961: bad orphan inode 15
[  634.065252][T28575] ext4_test_bit(bit=14, block=18) = 1
[  634.068713][T28575] is_bad_inode(inode)=0
[  634.070701][T28575] NEXT_ORPHAN(inode)=1023
[  634.074649][T28575] max_ino=32
[  634.078468][T28575] i_nlink=0
[  634.084299][T28575] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.7961: corrupted xattr block 19: invalid header
[  634.098751][T28575] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[  634.105475][T28575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  634.121128][T28575] ext4 filesystem being mounted at /396/qY3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  634.150215][T23766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  634.371646][T28601] netlink: 'syz.3.7969': attribute type 10 has an invalid length.
[  634.378687][T28601] dummy0: left allmulticast mode
[  634.392250][T28601] dummy0: entered allmulticast mode
[  634.395659][T28601] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  635.566844][T28638] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7981'.
[  635.633579][T28642] netlink: 'syz.3.7983': attribute type 9 has an invalid length.
[  635.874103][T28660] loop5: detected capacity change from 0 to 128
[  635.889900][T28660] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  635.897809][T28660] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  636.147704][T28681] loop5: detected capacity change from 0 to 8
[  636.152779][T28681] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  637.519066][T28706] netlink: 'syz.5.7999': attribute type 12 has an invalid length.
[  638.162207][T28727] overlayfs: failed to clone upperpath
[  639.194833][T28747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8012'.
[  639.547025][T28766] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.8021'.
[  639.964542][   T33] audit: type=1326 audit(2000001082.294:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28789 comm="syz.1.8032" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  639.975156][   T33] audit: type=1326 audit(2000001082.313:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28789 comm="syz.1.8032" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  639.988256][   T33] audit: type=1326 audit(2000001082.313:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28789 comm="syz.1.8032" exe="/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  639.996907][   T33] audit: type=1326 audit(2000001082.313:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28789 comm="syz.1.8032" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  640.011325][   T33] audit: type=1326 audit(2000001082.313:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28789 comm="syz.1.8032" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  641.086247][T28872] netlink: 'syz.3.8065': attribute type 1 has an invalid length.
[  641.090675][T28872] netlink: 'syz.3.8065': attribute type 4 has an invalid length.
[  641.093929][T28872] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8065'.
[  641.098766][T28872] netlink: 'syz.3.8065': attribute type 1 has an invalid length.
[  641.102319][T28872] netlink: 'syz.3.8065': attribute type 4 has an invalid length.
[  641.105744][T28872] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8065'.
[  641.142879][ T5918] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  641.303503][ T5918] usb 6-1: Using ep0 maxpacket: 32
[  641.311531][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  641.317085][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  641.322455][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  641.329601][ T5918] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  641.333106][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.341551][ T5918] usb 6-1: config 0 descriptor??
[  641.351897][T28857] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  641.357777][ T5918] hub 6-1:0.0: USB hub found
[  641.586864][ T5918] hub 6-1:0.0: 11 ports detected
[  641.590070][ T5918] hub 6-1:0.0: insufficient power available to use all downstream ports
[  641.803431][ T5918] hub 6-1:0.0: hub_hub_status failed (err = -71)
[  641.809295][ T5918] hub 6-1:0.0: config failed, can't get hub status (err -71)
[  641.815826][ T5918] usbhid 6-1:0.0: can't add hid device: -71
[  641.819018][ T5918] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  641.849085][ T5918] usb 6-1: USB disconnect, device number 17
[  642.718772][T28958] sctp: [Deprecated]: syz.1.8094 (pid 28958) Use of struct sctp_assoc_value in delayed_ack socket option.
[  642.718772][T28958] Use struct sctp_sack_info instead
[  642.725637][T28955] loop5: detected capacity change from 0 to 1024
[  642.730513][T28955] ext4: Unknown parameter 'uid<00000000000000000000'
[  642.750320][   T33] audit: type=1326 audit(2000001084.904:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28953 comm="syz.5.8093" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d658ebe9 code=0x7ffc0000
[  642.772292][   T33] audit: type=1326 audit(2000001084.904:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28953 comm="syz.5.8093" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d658ebe9 code=0x7ffc0000
[  642.797643][   T33] audit: type=1326 audit(2000001084.904:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28953 comm="syz.5.8093" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe9d658ebe9 code=0x7ffc0000
[  642.812391][   T33] audit: type=1326 audit(2000001084.932:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28953 comm="syz.5.8093" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d658ebe9 code=0x7ffc0000
[  642.896121][   T33] audit: type=1326 audit(2000001084.932:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28953 comm="syz.5.8093" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d658ebe9 code=0x7ffc0000
[  643.272652][T29021] loop5: detected capacity change from 0 to 128
[  644.057797][T29046] loop5: detected capacity change from 0 to 32768
[  644.138411][T29046] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  644.138431][T29046]   allowing incompatible features above 0.0: (unknown version)
[  644.138439][T29046]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  644.157348][T29046] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  644.161284][T29046] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  644.164724][T29046] bcachefs (loop5): Version upgrade required:
[  644.164724][T29046] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  644.164724][T29046] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  644.164724][T29046]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  644.269690][T29046] bcachefs (loop5): dropping and reconstructing all alloc info
[  644.289103][T29046] bcachefs (loop5): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4099:U32_MAX len 0 ver 0: (unpack error)
[  644.289143][T29046]   invalid variable length fields, deleting
[  644.311292][T29046] bcachefs (loop5): accounting_read... done
[  644.317009][T29046] bcachefs (loop5): alloc_read... done
[  644.321958][T29046] bcachefs (loop5): snapshots_read... done
[  644.325174][T29046] bcachefs (loop5): check_allocations... done
[  644.343734][T29046] bcachefs (loop5): going read-write
[  644.417453][T29046] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean
[  644.425339][T29046] bcachefs (loop5): done starting filesystem
[  644.452927][   T68] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  644.453009][   T68]   u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing
[  644.506208][T29065] openvswitch: netlink: Actions may not be safe on all matching packets
[  644.508581][   T68] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  644.514278][   T68]   u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing
[  644.526937][   T68] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  644.527023][   T68]   u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing
[  644.538789][   T68] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  644.538803][   T68]   u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing
[  644.569293][T23766] bcachefs (loop5): shutting down
[  644.583243][T23766] bcachefs (loop5): going read-only
[  644.599500][T23766] bcachefs (loop5): finished waiting for writes to stop
[  644.617183][T23766] bcachefs (loop5): flushing journal and stopping allocators, journal seq 12
[  644.640429][   T68] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  644.640442][   T68]   u64s 5 type deleted 0:40:0 len 0 ver 0, , continuing
[  644.662377][T23766] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 12
[  644.677995][T23766] bcachefs (loop5): unclean shutdown complete, journal seq 13
[  644.683750][T23766] bcachefs (loop5): done going read-only, filesystem not clean
[  644.725215][T23766] bcachefs (loop5): shutdown complete
[  645.374902][T29116] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8150'.
[  645.505415][T29131] wg2: entered promiscuous mode
[  645.507082][T29131] wg2: entered allmulticast mode
[  645.552467][T29133] bond4: entered promiscuous mode
[  645.560282][T29133] 8021q: adding VLAN 0 to HW filter on device bond4
[  645.652809][   T33] kauditd_printk_skb: 23 callbacks suppressed
[  645.652817][   T33] audit: type=1326 audit(2000001087.617:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29174 comm="syz.3.8161" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  645.663128][   T33] audit: type=1326 audit(2000001087.626:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29174 comm="syz.3.8161" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  645.672784][   T33] audit: type=1326 audit(2000001087.645:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29174 comm="syz.3.8161" exe="/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  645.683686][   T33] audit: type=1326 audit(2000001087.645:211): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=29174 comm="syz.3.8161" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  645.710727][   T33] audit: type=1326 audit(2000001087.645:212): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=29174 comm="syz.3.8161" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  646.368076][T29229] netlink: 'syz.5.8180': attribute type 1 has an invalid length.
[  646.373047][T29229] netlink: 'syz.5.8180': attribute type 2 has an invalid length.
[  646.505208][T29240] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8183'.
[  646.749796][T29255] loop5: detected capacity change from 0 to 32768
[  646.767150][T29255] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  646.829373][T23766] ocfs2: Unmounting device (7,5) on (node local)
[  647.178998][T29304] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  647.418311][T11632] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  647.578610][T11632] usb 6-1: Using ep0 maxpacket: 32
[  647.582790][T11632] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  647.587132][T11632] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  647.591079][T11632] usb 6-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00
[  647.595006][T11632] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.601261][T11632] usb 6-1: config 0 descriptor??
[  647.823989][T11632] usb 6-1: USB disconnect, device number 18
[  648.401037][T29358] loop5: detected capacity change from 0 to 1024
[  648.416198][T29358] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  648.430309][T29358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  648.480833][T23766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  648.523481][T29373] nfs: Deprecated parameter 'nointr'
[  648.856834][T29403] loop5: detected capacity change from 0 to 512
[  648.864027][T29403] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.8238: corrupted in-inode xattr: invalid ea_ino
[  648.870218][T29403] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.8238: couldn't read orphan inode 15 (err -117)
[  648.877475][T29403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  649.066782][T29426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8248'.
[  649.744680][T23766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.049097][ T5903] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  650.102520][T29454] openvswitch: netlink: Message has 8 unknown bytes.
[  650.104753][T29454] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  650.129020][T29456] sock: sock_set_timeout: `syz.3.8259' (pid 29456) tries to set negative timeout
[  650.219725][ T5903] usb 6-1: Using ep0 maxpacket: 16
[  650.283745][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  650.289702][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  650.304713][ T5903] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  650.308573][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  650.320424][ T5903] usb 6-1: config 0 descriptor??
[  650.765328][ T5903] gt683r_led 0003:1770:FF00.0012: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.5-1/input0
[  650.970324][ T5903] usb 6-1: USB disconnect, device number 19
[  650.984168][T11632] gt683r_led 0003:1770:FF00.0012: failed to send set report request: -19
[  651.719223][T29595] __vm_enough_memory: pid: 29595, comm: syz.1.8313, bytes: 4503599627366400 not enough memory for the allocation
[  651.848552][T29611] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8319'.
[  651.966594][T29621] netlink: 240 bytes leftover after parsing attributes in process `syz.5.8320'.
[  652.492619][T29647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8333'.
[  653.057491][T29691] loop5: detected capacity change from 0 to 136
[  653.108677][T29697] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.8353'.
[  653.145464][T29700] loop5: detected capacity change from 0 to 512
[  653.149453][T29700] EXT4-fs: Ignoring removed mblk_io_submit option
[  653.152702][T29700] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  653.163643][T29700] EXT4-fs (loop5): 1 truncate cleaned up
[  653.166184][T29700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  654.104770][T23766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  654.247705][T29747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8373'.
[  655.992476][T11632] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  656.157014][T11632] usb 6-1: config 0 has an invalid interface number: 52 but max is 0
[  656.159894][T11632] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  656.164599][T11632] usb 6-1: config 0 has no interface number 0
[  656.166750][T11632] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  656.170514][T11632] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  656.177477][T11632] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  656.182656][T11632] usb 6-1: config 0 interface 52 has no altsetting 0
[  656.187027][T11632] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  656.190299][T11632] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[  656.193232][T11632] usb 6-1: SerialNumber: syz
[  656.203243][T11632] usb 6-1: config 0 descriptor??
[  656.444402][ T9860] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.445083][T11632] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  656.455568][T11632] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -5
[  656.545284][ T9860] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.586626][   T33] audit: type=1800 audit(2000001097.850:213): pid=29818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8400" name="nullb0" dev="tmpfs" ino=15342 res=0 errno=0
[  656.656162][T11632] usb 6-1: USB disconnect, device number 20
[  656.698490][ T9860] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.043441][ T9860] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.219835][ T9860] macvlan2: left promiscuous mode
[  657.222504][ T9860] bond0: left promiscuous mode
[  657.224712][ T9860] bridge0: port 3(macvlan2) entered disabled state
[  657.240032][ T9860] bridge_slave_1: left allmulticast mode
[  657.245348][ T9860] bridge_slave_1: left promiscuous mode
[  657.252107][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.268302][ T9860] bridge_slave_0: left allmulticast mode
[  657.270444][ T9860] bridge_slave_0: left promiscuous mode
[  657.273116][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.304177][ T9860] bond_slave_0: left promiscuous mode
[  657.311213][ T9860] bond_slave_1: left promiscuous mode
[  657.412280][ T9860] bond2 (unregistering): (slave ip6gre1): Releasing backup interface
[  657.415941][ T9860] ip6gre1 (unregistering): left promiscuous mode
[  657.859122][ T9860] bond0 (unregistering): left allmulticast mode
[  657.861896][ T9860] bond_slave_0: left allmulticast mode
[  657.864329][ T9860] bond_slave_1: left allmulticast mode
[  657.881647][ T9860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  657.886625][ T9860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  657.890751][ T9860] bond0 (unregistering): Released all slaves
[  658.025301][ T9860] bond1 (unregistering): (slave veth3): Releasing backup interface
[  658.028950][ T9860] bond1 (unregistering): Released all slaves
[  658.165330][ T9860] bond2 (unregistering): Released all slaves
[  658.297925][ T9860] bond3 (unregistering): Released all slaves
[  658.317648][T29881] batadv_slave_1: entered promiscuous mode
[  658.336605][T29880] batadv_slave_1: left promiscuous mode
[  658.339508][T29865] wg1 speed is unknown, defaulting to 1000
[  658.351147][T29866] wg1 speed is unknown, defaulting to 1000
[  658.404971][ T9860] bridge: left promiscuous mode
[  658.592130][ T9860] tipc: Disabling bearer <udp:syz2>
[  658.594046][ T9860] tipc: Left network mode
[  659.000355][ T9860] hsr_slave_0: left promiscuous mode
[  659.005153][ T9860] hsr_slave_1: left promiscuous mode
[  659.008087][ T9860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  659.015861][ T9860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  659.026768][T29978] Dead loop on virtual device ip6_vti0, fix it urgently!
[  659.031589][T29978] Dead loop on virtual device ip6_vti0, fix it urgently!
[  659.034856][T29978] Dead loop on virtual device ip6_vti0, fix it urgently!
[  659.040111][T29978] Dead loop on virtual device ip6_vti0, fix it urgently!
[  659.051275][T29978] Dead loop on virtual device ip6_vti0, fix it urgently!
[  659.060593][T29978] Dead loop on virtual device ip6_vti0, fix it urgently!
[  659.067811][ T9860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  659.079652][ T9860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  659.106981][ T9860] veth1_macvtap: left promiscuous mode
[  659.108779][ T9860] veth0_macvtap: left promiscuous mode
[  659.110749][ T9860] veth1_vlan: left promiscuous mode
[  659.113348][ T9860] veth0_vlan: left promiscuous mode
[  659.162380][T29989] loop5: detected capacity change from 0 to 256
[  659.174748][T29989] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  659.564013][T30013] openvswitch: netlink: Message has 4 unknown bytes.
[  659.623689][T30015] sctp: [Deprecated]: syz.3.8439 (pid 30015) Use of struct sctp_assoc_value in delayed_ack socket option.
[  659.623689][T30015] Use struct sctp_sack_info instead
[  661.184017][ T9860] IPVS: stop unused estimator thread 0...
[  661.484307][T30059] sctp: [Deprecated]: syz.1.8457 (pid 30059) Use of struct sctp_assoc_value in delayed_ack socket option.
[  661.484307][T30059] Use struct sctp_sack_info instead
[  662.121643][T30089] loop5: detected capacity change from 0 to 1024
[  662.147799][T30089] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  662.152178][T30093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  662.157442][T30089] hfsplus: xattr searching failed
[  662.212831][T30089] loop5: detected capacity change from 1024 to 64
[  662.221800][   T90] kworker/u9:3: attempt to access beyond end of device
[  662.221800][   T90] loop5: rw=1, sector=206, nr_sectors = 8 limit=64
[  662.231472][   T90] hfsplus: b-tree write err: -5, ino 4
[  662.241598][   T90] kworker/u9:3: attempt to access beyond end of device
[  662.241598][   T90] loop5: rw=2049, sector=206, nr_sectors = 8 limit=64
[  662.263158][T23766] hfsplus: bad catalog entry type
[  662.319335][   T90] kworker/u9:3: attempt to access beyond end of device
[  662.319335][   T90] loop5: rw=1, sector=206, nr_sectors = 8 limit=64
[  662.330544][   T90] hfsplus: b-tree write err: -5, ino 4
[  662.737118][ T9860] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.825883][ T9860] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.913286][ T9860] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  662.922798][T30139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8492'.
[  663.013619][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  663.035840][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  663.042213][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  663.045598][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  663.047797][ T9860] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.055385][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  663.117037][T30142] wg1 speed is unknown, defaulting to 1000
[  663.314997][ T9860] bridge_slave_1: left allmulticast mode
[  663.321463][ T9860] bridge_slave_1: left promiscuous mode
[  663.323821][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.338334][ T9860] bridge_slave_0: left allmulticast mode
[  663.340768][ T9860] bridge_slave_0: left promiscuous mode
[  663.343418][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.995703][ T9860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  664.003030][ T9860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  664.009131][ T9860] bond0 (unregistering): Released all slaves
[  664.030088][T30142] chnl_net:caif_netlink_parms(): no params data found
[  664.227571][T30142] bridge0: port 1(bridge_slave_0) entered blocking state
[  664.230695][T30142] bridge0: port 1(bridge_slave_0) entered disabled state
[  664.233838][T30142] bridge_slave_0: entered allmulticast mode
[  664.238933][T30142] bridge_slave_0: entered promiscuous mode
[  664.243355][T30142] bridge0: port 2(bridge_slave_1) entered blocking state
[  664.253993][T30142] bridge0: port 2(bridge_slave_1) entered disabled state
[  664.263967][T30142] bridge_slave_1: entered allmulticast mode
[  664.268686][T30142] bridge_slave_1: entered promiscuous mode
[  664.383063][T30142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  664.428738][T30396] tmpfs: Bad value for 'usrquota_block_hardlimit'
[  664.446180][T30142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  664.541274][T30142] team0: Port device team_slave_0 added
[  664.549159][T30142] team0: Port device team_slave_1 added
[  664.638005][T30142] batman_adv: batadv0: Adding interface: batadv_slave_0
[  664.641202][T30142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  664.649539][T30142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  664.654873][T30142] batman_adv: batadv0: Adding interface: batadv_slave_1
[  664.657732][T30142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  664.671216][T30142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  664.732476][ T9860] hsr_slave_0: left promiscuous mode
[  664.738875][ T9860] hsr_slave_1: left promiscuous mode
[  664.741788][ T9860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  664.744913][ T9860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  664.751211][ T9860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  664.754247][ T9860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  664.775127][ T9860] veth1_macvtap: left promiscuous mode
[  664.777505][ T9860] veth0_macvtap: left promiscuous mode
[  664.781110][ T9860] veth1_vlan: left promiscuous mode
[  664.783446][ T9860] veth0_vlan: left promiscuous mode
[  665.232439][ T5239] Bluetooth: hci0: command tx timeout
[  665.442945][ T9860] team0 (unregistering): Port device team_slave_1 removed
[  665.489033][ T9860] team0 (unregistering): Port device team_slave_0 removed
[  665.736480][T30511] overlayfs: failed to clone upperpath
[  666.200366][T30142] hsr_slave_0: entered promiscuous mode
[  666.203994][T30142] hsr_slave_1: entered promiscuous mode
[  666.206902][T30142] debugfs: 'hsr0' already exists in 'hsr'
[  666.209313][T30142] Cannot create hsr debugfs directory
[  666.236041][T30548] netlink: 'syz.1.8546': attribute type 83 has an invalid length.
[  666.530537][T30571] smc: net device bond0 applied user defined pnetid SYZ2
[  666.622116][T30615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8550'.
[  666.640703][T30615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8550'.
[  666.664042][T30617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8551'.
[  666.667984][T30617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8551'.
[  666.718097][T30624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8553'.
[  666.721902][T30623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8552'.
[  666.729722][T30623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8552'.
[  666.740227][ T9860] IPVS: stop unused estimator thread 0...
[  666.835811][T30643] team0: No ports can be present during mode change
[  666.956851][T30142] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  666.964281][T30142] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  666.970123][T30142] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  666.977491][T30142] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  667.068164][T30142] 8021q: adding VLAN 0 to HW filter on device bond0
[  667.093444][T30142] 8021q: adding VLAN 0 to HW filter on device team0
[  667.104735][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.107840][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  667.114287][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.117384][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  667.329656][T30142] 8021q: adding VLAN 0 to HW filter on device batadv0
[  667.449782][T30695] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8570'.
[  667.466928][ T5239] Bluetooth: hci0: command tx timeout
[  667.579547][T30142] veth0_vlan: entered promiscuous mode
[  667.588774][T30142] veth1_vlan: entered promiscuous mode
[  667.607073][T30707] 9pnet_fd: Insufficient options for proto=fd
[  667.620484][T30142] veth0_macvtap: entered promiscuous mode
[  667.633497][T30142] veth1_macvtap: entered promiscuous mode
[  667.647852][T30142] batman_adv: batadv0: Interface activated: batadv_slave_0
[  667.659112][T30142] batman_adv: batadv0: Interface activated: batadv_slave_1
[  667.666945][T30709] overlay: ./file0 is not a directory
[  667.681130][ T9860] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  667.691462][ T9860] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  667.695049][ T9860] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  667.712754][ T9860] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  667.780632][   T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.786742][   T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  667.807722][   T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  667.810914][   T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  668.947457][T30762] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8591'.
[  668.993134][T30767] netlink: 'syz.6.8592': attribute type 10 has an invalid length.
[  669.048232][T30770] loop6: detected capacity change from 0 to 2048
[  669.070348][T30770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  669.115295][T30142] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  669.722646][ T5239] Bluetooth: hci0: command tx timeout
[  670.504858][T30835] loop6: detected capacity change from 0 to 512
[  670.551306][T30835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  670.556698][T30835] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  670.586164][T30142] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  671.097157][ T5859] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  671.121013][ T5859] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  671.899805][ T5239] Bluetooth: hci0: command tx timeout
[  672.162933][   T33] audit: type=1326 audit(2000001112.414:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30921 comm="syz.3.8643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  672.172932][   T33] audit: type=1326 audit(2000001112.414:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30921 comm="syz.3.8643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  672.182981][   T33] audit: type=1326 audit(2000001112.414:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30921 comm="syz.3.8643" exe="/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  672.192533][   T33] audit: type=1326 audit(2000001112.414:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30921 comm="syz.3.8643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  672.202226][   T33] audit: type=1326 audit(2000001112.414:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30921 comm="syz.3.8643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  672.212210][   T33] audit: type=1326 audit(2000001112.414:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30921 comm="syz.3.8643" exe="/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  672.236264][   T33] audit: type=1326 audit(2000001112.489:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30921 comm="syz.3.8643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  672.245855][   T33] audit: type=1326 audit(2000001112.489:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30921 comm="syz.3.8643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2978ebe9 code=0x7ffc0000
[  672.481756][T30932] loop6: detected capacity change from 0 to 2048
[  672.695061][T30932] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=3932051, location=3932051
[  672.702084][T30932] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  673.109500][ T5298] udevd[5298]: worker [15467] terminated by signal 33 (Unknown signal 33)
[  673.115194][ T5298] udevd[5298]: worker [15467] failed while handling '/devices/virtual/block/loop6'
[  673.405712][T31000] loop6: detected capacity change from 0 to 1764
[  674.439486][   T33] audit: type=1326 audit(2000001114.547:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31030 comm="+}[@" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808cd8ebe9 code=0x7ffc0000
[  674.455094][   T33] audit: type=1326 audit(2000001114.566:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31030 comm="+}[@" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808cd8ebe9 code=0x7ffc0000
[  674.590323][T31041] bridge0: port 2(bridge_slave_1) entered disabled state
[  674.600607][T31041] bridge_slave_1: left allmulticast mode
[  674.603034][T31041] bridge_slave_1: left promiscuous mode
[  674.605678][T31041] bridge0: port 2(bridge_slave_1) entered disabled state
[  674.622320][T31041] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  675.166266][T31067] loop6: detected capacity change from 0 to 40427
[  675.173327][T31067] F2FS-fs (loop6): invalid crc value
[  675.249770][T31067] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  675.254442][T31067] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  675.502170][T31109] loop6: detected capacity change from 0 to 4096
[  675.511763][T31109] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  675.610737][T31123] loop6: detected capacity change from 0 to 16
[  675.621540][T31123] erofs (device loop6): mounted with root inode @ nid 36.
[  675.971395][T31156] loop6: detected capacity change from 0 to 128
[  675.975590][T31156] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  675.982728][T31156] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  675.993921][T31156] EXT4-fs error (device loop6): htree_dirblock_to_tree:1051: inode #2: comm syz.6.8722: Directory block failed checksum
[  676.029234][T30142] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  676.100250][T31167] netlink: 'syz.6.8724': attribute type 5 has an invalid length.
[  676.103693][T31167] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.8724'.
[  676.158459][T31173] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  676.204470][T31179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8728'.
[  676.207288][T31179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8728'.
[  676.678183][T31217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8743'.
[  677.011186][T11632] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  677.066590][T31243] netlink: 6 bytes leftover after parsing attributes in process `syz.3.8754'.
[  677.070402][T31243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  677.182757][T11632] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  677.187821][T11632] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  677.196187][T11632] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  677.200153][T11632] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.206726][T11632] usb 7-1: Product: syz
[  677.208533][T11632] usb 7-1: Manufacturer: syz
[  677.210435][T11632] usb 7-1: SerialNumber: syz
[  677.223464][T11632] usb 7-1: config 0 descriptor??
[  677.231097][T31220] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  677.234077][T31220] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  677.465002][T31220] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  677.468396][T31220] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  677.902545][T11632] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  678.330541][T11632] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  678.338515][T11632] usb 7-1: USB disconnect, device number 2
[  678.655260][T31322] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  678.658201][T31322] mac80211_hwsim hwsim8 wlan0: left allmulticast mode
[  678.919104][T31336] loop6: detected capacity change from 0 to 4096
[  678.929344][T31342] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  679.002510][T31339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8791'.
[  679.108338][T31360] overlayfs: failed to clone upperpath
[  680.480231][T31395] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8809'.
[  680.485932][T31395] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8809'.
[  680.645644][T31402] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8811'.
[  681.735590][T31464] loop6: detected capacity change from 0 to 16
[  681.743376][T31464] erofs (device loop6): mounted with root inode @ nid 36.
[  682.216315][ T5859] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  682.378904][ T5859] usb 7-1: unable to get BOS descriptor or descriptor too short
[  682.382350][ T5859] usb 7-1: config 250 has an invalid interface number: 222 but max is 1
[  682.385491][ T5859] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  682.390229][ T5859] usb 7-1: config 250 has no interface number 1
[  682.393730][ T5859] usb 7-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping
[  682.400765][ T5859] usb 7-1: config 250 interface 222 altsetting 22 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  682.405549][ T5859] usb 7-1: config 250 interface 222 altsetting 22 endpoint 0x8 has invalid maxpacket 983, setting to 64
[  682.410273][ T5859] usb 7-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping
[  682.414870][ T5859] usb 7-1: config 250 interface 222 altsetting 22 has a duplicate endpoint with address 0x6, skipping
[  682.419497][ T5859] usb 7-1: config 250 interface 222 has no altsetting 0
[  682.424612][ T5859] usb 7-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd
[  682.428685][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.432110][ T5859] usb 7-1: Product: syz
[  682.433891][ T5859] usb 7-1: Manufacturer: syz
[  682.435750][ T5859] usb 7-1: SerialNumber: syz
[  682.449057][T31493] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  682.488001][T31511] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8846'.
[  682.491695][T31511] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8846'.
[  682.494967][T31511] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8846'.
[  682.693542][ T5859] usb 7-1: USB disconnect, device number 3
[  682.952929][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  682.952945][   T33] audit: type=1326 audit(2000001122.507:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31550 comm="syz.1.8859" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  682.975742][   T33] audit: type=1326 audit(2000001122.507:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31550 comm="syz.1.8859" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  682.984771][   T33] audit: type=1326 audit(2000001122.526:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31550 comm="syz.1.8859" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  682.997446][   T33] audit: type=1326 audit(2000001122.526:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31550 comm="syz.1.8859" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  683.025255][   T33] audit: type=1326 audit(2000001122.526:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31550 comm="syz.1.8859" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  683.040530][   T33] audit: type=1326 audit(2000001122.526:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31550 comm="syz.1.8859" exe="/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  683.052995][   T33] audit: type=1326 audit(2000001122.526:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31550 comm="syz.1.8859" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  683.063457][T31555] rdma_rxe: rxe_newlink: failed to add ipvlan1
[  683.063819][   T33] audit: type=1326 audit(2000001122.526:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31550 comm="syz.1.8859" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  683.395877][T31586] loop6: detected capacity change from 0 to 1024
[  683.399034][T31586] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  683.453394][T31593] loop6: detected capacity change from 0 to 512
[  683.471037][T31593] EXT4-fs: old and new quota format mixing
[  684.062331][T31613] loop6: detected capacity change from 0 to 1024
[  684.089014][   T33] audit: type=1800 audit(2000001123.564:237): pid=31613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8879" name="file2" dev="loop6" ino=2 res=0 errno=0
[  684.109010][T14821] hfsplus: b-tree write err: -5, ino 3
[  684.213113][T31623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  684.523230][T31650] loop6: detected capacity change from 0 to 4096
[  684.552210][T31653] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  685.488323][ T5886] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  685.646768][T31704] overlayfs: failed to resolve './file0': -2
[  685.660538][ T5886] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  685.664689][ T5886] usb 7-1: config 0 has no interface number 0
[  685.667314][ T5886] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  685.675642][ T5886] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  685.682902][ T5886] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  685.686579][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.695245][ T5886] usb 7-1: config 0 descriptor??
[  686.139430][ T5886] uclogic 0003:256C:006D.0014: interface is invalid, ignoring
[  686.392876][ T5884] usb 7-1: USB disconnect, device number 4
[  686.792723][T31755] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  687.618285][T31784] loop6: detected capacity change from 0 to 32768
[  687.670419][T31784]  loop6: p9 p11 p16
[  687.979614][T31819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8952'.
[  688.052600][T31821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8952'.
[  688.219486][T15470] udevd[15470]: inotify_add_watch(7, /dev/loop6p11, 10) failed: No such file or directory
[  688.227347][T15468] udevd[15468]: inotify_add_watch(7, /dev/loop6p16, 10) failed: No such file or directory
[  688.231161][T31825] loop6: detected capacity change from 0 to 1024
[  688.272202][T31825] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  688.276435][T31825] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  688.283812][   T33] audit: type=1800 audit(2000001127.502:238): pid=31825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8958" name="file1" dev="loop6" ino=15 res=0 errno=0
[  688.309086][T31825] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 1: comm syz.6.8958: lblock 1 mapped to illegal pblock 1 (length 3)
[  688.319751][T31825] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.8958: lblock 3 mapped to illegal pblock 3 (length 1)
[  688.326021][T31825] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  688.330216][T31825] EXT4-fs (loop6): This should not happen!! Data will be lost
[  688.330216][T31825] 
[  688.700853][ T1206] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  688.711114][ T1206] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 28
[  688.718227][ T1206] EXT4-fs (loop6): This should not happen!! Data will be lost
[  688.718227][ T1206] 
[  688.722411][ T1206] EXT4-fs (loop6): Total free blocks count 0
[  688.724879][ T1206] EXT4-fs (loop6): Free/Dirty block details
[  688.728030][ T1206] EXT4-fs (loop6): free_blocks=4293918720
[  688.730454][ T1206] EXT4-fs (loop6): dirty_blocks=48
[  688.732615][ T1206] EXT4-fs (loop6): Block reservation details
[  688.950061][T31859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8969'.
[  688.956224][T31859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8969'.
[  690.274992][T31895] netdevsim netdevsim6: Direct firmware load for .. failed with error -2
[  690.279476][T31895] netdevsim netdevsim6: Falling back to sysfs fallback for: ..
[  690.504890][T31897] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  690.508130][T31897] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  691.041258][T31935] netlink: 'syz.1.8997': attribute type 12 has an invalid length.
[  691.044732][T31935] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8997'.
[  691.506602][T11632] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  691.691083][T11632] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  691.695859][T11632] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  691.700925][T11632] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  691.704801][T11632] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.718676][T11632] usb 7-1: config 0 descriptor??
[  692.184551][T11632] savu 0003:1E7D:2D5A.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0
[  692.485379][T11632] usb 7-1: USB disconnect, device number 5
[  692.833846][T32003] Invalid option length (1047378) for dns_resolver key
[  693.084476][T32016] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9022'.
[  693.520033][T32045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9033'.
[  693.637672][T32062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9039'.
[  693.699964][T32069] bridge_slave_0: invalid flags given to default FDB implementation
[  694.210094][T32077] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9047'.
[  694.789992][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  694.794273][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  695.049547][T32115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9059'.
[  695.065723][T32115] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  695.069693][T32115] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  695.618855][   T33] audit: type=1326 audit(2000001134.349:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32123 comm="syz.1.9063" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  695.641284][   T33] audit: type=1326 audit(2000001134.349:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32123 comm="syz.1.9063" exe="/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  695.667096][   T33] audit: type=1326 audit(2000001134.349:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32123 comm="syz.1.9063" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  695.733491][T32122] loop6: detected capacity change from 0 to 32768
[  695.735725][   T33] audit: type=1326 audit(2000001134.349:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32123 comm="syz.1.9063" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  695.745695][   T33] audit: type=1326 audit(2000001134.349:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32123 comm="syz.1.9063" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  695.757621][   T33] audit: type=1326 audit(2000001134.349:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32123 comm="syz.1.9063" exe="/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  695.765552][   T33] audit: type=1326 audit(2000001134.349:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32123 comm="syz.1.9063" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  695.777187][   T33] audit: type=1326 audit(2000001134.349:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32123 comm="syz.1.9063" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  695.784890][   T33] audit: type=1326 audit(2000001134.359:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32123 comm="syz.1.9063" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  695.793080][   T33] audit: type=1326 audit(2000001134.359:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32123 comm="syz.1.9063" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3752f8d550 code=0x7ffc0000
[  695.794077][T32122] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  695.851709][T30142] ocfs2: Unmounting device (7,6) on (node local)
[  696.167893][T32151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  696.171122][T32151] IPv6: NLM_F_CREATE should be set when creating new route
[  696.178215][T32151] IPv6: NLM_F_CREATE should be set when creating new route
[  696.186398][T32151] IPv6: NLM_F_CREATE should be set when creating new route
[  697.658151][T32165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9074'.
[  697.662509][T32165] nbd: must specify an index to disconnect
[  698.142175][T32205] loop6: detected capacity change from 0 to 1024
[  698.151376][T32205] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  699.498213][T32276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9117'.
[  699.646632][T32275] loop6: detected capacity change from 0 to 32768
[  699.665370][T32275] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  699.675019][T32275] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  700.991274][T30142] ocfs2: Unmounting device (7,6) on (node local)
[  701.154241][T32314] bond0: Unable to set up delay as MII monitoring is disabled
[  701.214994][T32319] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9134'.
[  701.218505][T32319] netlink: 216 bytes leftover after parsing attributes in process `syz.6.9134'.
[  701.221809][T32319] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9134'.
[  701.349634][T32325] 9pnet_fd: Insufficient options for proto=fd
[  701.701962][T32334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9140'.
[  701.706516][T32334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9140'.
[  702.305234][T32348] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  703.369268][T32397] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  703.464609][T32406] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9168'.
[  703.468839][T32404] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9168'.
[  703.474104][T32404] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9168'.
[  703.478197][T32404] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9168'.
[  703.729041][T32431] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  704.192359][T32475] loop6: detected capacity change from 0 to 4096
[  704.200368][T32475] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  704.206539][T32475] ntfs3(loop6): Failed to load $MFTMirr (-22).
[  704.568857][T32513] bond0: Removing last ns target with arp_interval on
[  704.574849][T32513] bond0: left allmulticast mode
[  704.574860][T11605] bond0: (slave bond_slave_0): interface is now down
[  704.577113][T32513] dummy0: left allmulticast mode
[  704.580619][T11605] bond0: (slave bond_slave_1): interface is now down
[  704.589296][T32513] 8021q: adding VLAN 0 to HW filter on device bond0
[  704.592414][T11605] bond0: (slave dummy0): interface is now down
[  704.616019][T11605] bond0: now running without any active interface!
[  704.730723][T17957] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  704.923217][T17957] usb 7-1: Using ep0 maxpacket: 16
[  704.930139][T17957] usb 7-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[  704.935085][T17957] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.938387][T17957] usb 7-1: Product: syz
[  704.940216][T17957] usb 7-1: Manufacturer: syz
[  704.943014][T17957] usb 7-1: SerialNumber: syz
[  704.947982][T17957] usb 7-1: config 0 descriptor??
[  704.952469][T17957] usb-storage 7-1:0.0: USB Mass Storage device detected
[  704.960904][T17957] usb-storage 7-1:0.0: Quirks match for vid 054c pid 002e: 1
[  704.965366][T17957] usb-storage 7-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty)
[  704.965366][T17957]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  705.170201][T17957] usb 7-1: USB disconnect, device number 6
[  705.991271][T32552] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[  705.994698][T32552] PKCS7: Only support pkcs7_signedData type
[  706.540820][T32572] @: renamed from bond_slave_0 (while UP)
[  706.557534][T32574] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  707.580237][T32642] __nla_validate_parse: 1 callbacks suppressed
[  707.580247][T32642] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9251'.
[  708.758075][T32681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9266'.
[  709.733571][T32724] overlayfs: failed to clone upperpath
[  710.360834][  T317] sctp: [Deprecated]: syz.3.9307 (pid 317) Use of struct sctp_assoc_value in delayed_ack socket option.
[  710.360834][  T317] Use struct sctp_sack_info instead
[  710.573965][  T318] loop6: detected capacity change from 0 to 32768
[  710.599350][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  710.599364][   T33] audit: type=1800 audit(2000001148.371:253): pid=318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9308" name="file1" dev="loop6" ino=4 res=0 errno=0
[  711.002063][  T318] ERROR: (device loop6): dbAdjCtl: the maximum free buddy is not the old root
[  711.002063][  T318] 
[  711.010973][  T318] ERROR: (device loop6): remounting filesystem as read-only
[  711.407316][  T372] loop6: detected capacity change from 0 to 1024
[  711.446120][  T372] hfsplus: bad catalog file entry
[  711.463192][  T376] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.9330'.
[  711.470133][ T1091] hfsplus: b-tree write err: -5, ino 3
[  711.472517][ T1091] hfsplus: bad catalog file entry
[  711.623847][  T389] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9335'.
[  711.633913][  T389] tipc: Invalid UDP bearer configuration
[  711.633957][  T389] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  712.117128][  T402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9339'.
[  712.176485][  T408] netlink: 'syz.1.9342': attribute type 11 has an invalid length.
[  712.423168][  T432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9351'.
[  712.563567][  T446] cgroup: noprefix used incorrectly
[  712.866253][ T5886] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  713.058097][ T5886] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  713.063117][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  713.067691][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 255, setting to 64
[  713.091056][ T5886] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  713.095201][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.112865][ T5886] usb 7-1: config 0 descriptor??
[  713.116200][  T450] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  713.120850][ T5886] hub 7-1:0.0: bad descriptor, ignoring hub
[  713.123873][ T5886] hub 7-1:0.0: probe with driver hub failed with error -5
[  713.143866][  T484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9372'.
[  713.148881][  T484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9372'.
[  713.154000][  T484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9372'.
[  713.157947][  T484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9372'.
[  713.559899][ T5886] elan 0003:04F3:0755.0016: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0
[  713.767041][ T5886] usb 7-1: USB disconnect, device number 7
[  714.392842][  T524] loop6: detected capacity change from 0 to 512
[  714.412022][  T524] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  714.443629][T30142] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  714.543445][  T534] loop6: detected capacity change from 0 to 4096
[  714.721342][  T550] netlink: 'syz.3.9389': attribute type 1 has an invalid length.
[  714.848344][  T565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9395'.
[  715.058223][ T5884] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  715.223149][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  715.227388][ T5884] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  715.238333][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.244033][  T598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9411'.
[  715.247610][  T598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9411'.
[  715.256116][ T5884] usb 7-1: config 0 descriptor??
[  715.285895][  T600] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9412'.
[  715.409568][  T613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9417'.
[  715.412817][  T613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9417'.
[  715.702264][ T5884] lg-g15 0003:046D:C222.0017: unbalanced delimiter at end of report description
[  715.709433][ T5884] lg-g15 0003:046D:C222.0017: probe with driver lg-g15 failed with error -22
[  715.837045][  T654] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  715.912396][ T5884] usb 7-1: USB disconnect, device number 8
[  716.570164][  T715] overlayfs: failed to clone upperpath
[  716.599856][  T718] loop6: detected capacity change from 0 to 1024
[  717.530164][  T747] overlayfs: missing 'lowerdir'
[  717.841425][  T745] loop6: detected capacity change from 0 to 32768
[  717.865388][  T745] JBD2: Ignoring recovery information on journal
[  717.899984][  T745] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  717.925350][  T745] (syz.6.9459,745,0):ocfs2_get_suballoc_slot_bit:2819 ERROR: invalid inode 8192 requested
[  717.929678][  T745] (syz.6.9459,745,0):ocfs2_get_suballoc_slot_bit:2844 ERROR: status = -22
[  717.933193][  T745] (syz.6.9459,745,0):ocfs2_test_inode_bit:2926 ERROR: get alloc slot and bit failed -22
[  717.942609][  T745] (syz.6.9459,745,0):ocfs2_test_inode_bit:2967 ERROR: status = -22
[  717.959873][T30142] ocfs2: Unmounting device (7,6) on (node local)
[  718.069410][  T779] netlink: 'syz.1.9469': attribute type 4 has an invalid length.
[  718.096665][  T779] netlink: 'syz.1.9469': attribute type 4 has an invalid length.
[  718.503838][   T33] audit: type=1326 audit(2000001155.667:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=812 comm="syz.1.9483" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  718.517206][   T33] audit: type=1326 audit(2000001155.667:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=812 comm="syz.1.9483" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  718.550096][   T33] audit: type=1326 audit(2000001155.667:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=812 comm="syz.1.9483" exe="/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  718.558004][   T33] audit: type=1326 audit(2000001155.667:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=812 comm="syz.1.9483" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  718.567191][   T33] audit: type=1326 audit(2000001155.667:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=812 comm="syz.1.9483" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3752f8ebe9 code=0x7ffc0000
[  719.172800][  T849] loop6: detected capacity change from 0 to 512
[  719.177976][  T849] EXT4-fs: Ignoring removed oldalloc option
[  719.187155][  T849] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.9496: inode #13: comm syz.6.9496: iget: illegal inode #
[  719.191771][  T849] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.9496: couldn't read orphan inode 13 (err -117)
[  719.199427][  T849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  719.206191][  T849] EXT4-fs error (device loop6): ext4_resize_begin:60: comm syz.6.9496: resize_inode disabled but reserved GDT blocks non-zero
[  719.226829][T30142] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  719.697160][  T881] bond0: left promiscuous mode
[  719.705716][  T881] @: left promiscuous mode
[  719.707872][  T881] bond_slave_1: left promiscuous mode
[  719.717616][  T881] 8021q: adding VLAN 0 to HW filter on device bond0
[  719.740715][  T881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  720.227292][  T916] sp0: Synchronizing with TNC
[  722.520541][ T1006] __nla_validate_parse: 1 callbacks suppressed
[  722.520551][ T1006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9532'.
[  722.659458][ T1013] loop6: detected capacity change from 0 to 512
[  722.667337][ T1013] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  722.706076][ T1013] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  722.708607][ T1013] System zones: 0-2, 18-18, 34-34
[  722.711832][ T1013] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  722.720617][ T1013] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  722.749607][T30142] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  722.909397][T17957] kernel read not supported for file /audio1 (pid: 17957 comm: kworker/0:7)
[  723.607908][ T1049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9544'.
[  723.672342][ T1056] vlan1: entered allmulticast mode
[  723.677586][ T1056] veth0_vlan: entered allmulticast mode
[  724.388810][ T1097] loop6: detected capacity change from 0 to 256
[  724.398169][ T1097] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  724.409969][ T1097] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  724.424299][ T1097] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  724.485279][ T1097] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff)
[  724.489269][ T1097] exFAT-fs (loop6): Filesystem has been set read-only
[  724.492636][ T1097] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff)
[  724.496365][ T1097] exFAT-fs (loop6): error, invalid access to FAT (entry 0xffffffff)
[  724.581645][ T1113] netlink: 'syz.6.9560': attribute type 9 has an invalid length.
[  724.606085][ T1113] netlink: 211988 bytes leftover after parsing attributes in process `syz.6.9560'.
[  725.441175][ T1147] dummy0: mtu less than device minimum
[  725.676978][ T1148] loop6: detected capacity change from 0 to 40427
[  725.696125][ T1148] F2FS-fs (loop6): invalid crc value
[  725.751973][ T1148] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  725.757134][ T1148] F2FS-fs (loop6): Start checkpoint disabled!
[  725.767316][ T1148] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  726.567762][   T33] audit: type=1800 audit(2000001163.150:259): pid=1152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9568" name="file1" dev="loop6" ino=10 res=0 errno=0
[  726.751134][ T1152] syz.6.9568: attempt to access beyond end of device
[  726.751134][ T1152] loop6: rw=2049, sector=77824, nr_sectors = 984 limit=40427
[  726.838047][ T1156] netlink: zone id is out of range
[  726.840625][ T1156] netlink: zone id is out of range
[  726.842367][ T1156] netlink: zone id is out of range
[  726.844184][ T1156] netlink: zone id is out of range
[  726.845881][ T1156] netlink: zone id is out of range
[  726.848467][ T1156] netlink: zone id is out of range
[  726.850389][ T1156] netlink: zone id is out of range
[  726.852411][ T1156] netlink: zone id is out of range
[  726.853628][  T157] kworker/u10:3: attempt to access beyond end of device
[  726.853628][  T157] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  726.854170][ T1156] netlink: zone id is out of range
[  726.874612][  T157] CPU: 1 UID: 0 PID: 157 Comm: kworker/u10:3 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  726.874624][  T157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  726.874629][  T157] Workqueue: writeback wb_workfn (flush-7:6)
[  726.874643][  T157] Call Trace:
[  726.874647][  T157]  <TASK>
[  726.874651][  T157]  dump_stack_lvl+0x189/0x250
[  726.874662][  T157]  ? __pfx_dump_stack_lvl+0x10/0x10
[  726.874671][  T157]  ? __pfx_queue_work_on+0x10/0x10
[  726.874677][  T157]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  726.874688][  T157]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  726.874701][  T157]  f2fs_handle_critical_error+0x37c/0x540
[  726.874737][  T157]  f2fs_write_end_io+0x886/0xb60
[  726.874755][  T157]  __submit_merged_bio+0x27a/0x6a0
[  726.874768][  T157]  __submit_merged_write_cond+0x255/0x530
[  726.874781][  T157]  f2fs_write_data_pages+0x261d/0x3000
[  726.874806][  T157]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  726.874822][  T157]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  726.874845][  T157]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  726.874861][  T157]  ? trace_f2fs_writepages+0x7f/0x200
[  726.874870][  T157]  ? f2fs_write_node_pages+0x478/0x6e0
[  726.874882][  T157]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  726.874897][  T157]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  726.874907][  T157]  do_writepages+0x32e/0x550
[  726.874919][  T157]  ? reacquire_held_locks+0x127/0x1d0
[  726.874926][  T157]  ? writeback_sb_inodes+0x384/0x1010
[  726.874939][  T157]  __writeback_single_inode+0x145/0xff0
[  726.874948][  T157]  ? do_raw_spin_unlock+0x4d/0x240
[  726.874958][  T157]  writeback_sb_inodes+0x6c7/0x1010
[  726.874979][  T157]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  726.875007][  T157]  ? rcu_is_watching+0x15/0xb0
[  726.875019][  T157]  wb_writeback+0x43b/0xaf0
[  726.875031][  T157]  ? queue_io+0x3c1/0x590
[  726.875042][  T157]  ? __pfx_wb_writeback+0x10/0x10
[  726.875054][  T157]  ? _raw_spin_unlock_irq+0x23/0x50
[  726.875065][  T157]  wb_workfn+0x409/0xef0
[  726.875080][  T157]  ? __pfx_wb_workfn+0x10/0x10
[  726.875089][  T157]  ? __lock_acquire+0xab9/0xd20
[  726.875104][  T157]  ? process_scheduled_works+0x9ef/0x17b0
[  726.875114][  T157]  ? _raw_spin_unlock_irq+0x23/0x50
[  726.875121][  T157]  ? process_scheduled_works+0x9ef/0x17b0
[  726.875127][  T157]  ? process_scheduled_works+0x9ef/0x17b0
[  726.875135][  T157]  process_scheduled_works+0xae1/0x17b0
[  726.875156][  T157]  ? __pfx_process_scheduled_works+0x10/0x10
[  726.875171][  T157]  worker_thread+0x8a0/0xda0
[  726.875180][  T157]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  726.875192][  T157]  ? __kthread_parkme+0x7b/0x200
[  726.875205][  T157]  kthread+0x711/0x8a0
[  726.875215][  T157]  ? __pfx_worker_thread+0x10/0x10
[  726.875222][  T157]  ? __pfx_kthread+0x10/0x10
[  726.875231][  T157]  ? _raw_spin_unlock_irq+0x23/0x50
[  726.875239][  T157]  ? lockdep_hardirqs_on+0x9c/0x150
[  726.875249][  T157]  ? __pfx_kthread+0x10/0x10
[  726.875258][  T157]  ret_from_fork+0x3fc/0x770
[  726.875268][  T157]  ? __pfx_ret_from_fork+0x10/0x10
[  726.875278][  T157]  ? __switch_to_asm+0x39/0x70
[  726.875286][  T157]  ? __switch_to_asm+0x33/0x70
[  726.875293][  T157]  ? __pfx_kthread+0x10/0x10
[  726.875302][  T157]  ret_from_fork_asm+0x1a/0x30
[  726.875318][  T157]  </TASK>
[  726.875321][  T157] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  727.410911][ T1199] loop6: detected capacity change from 0 to 64
[  727.712943][ T1222] veth3: entered promiscuous mode
[  728.130206][ T1253] sp0: Synchronizing with TNC
[  728.136316][ T1252] [U] 
[  728.208145][ T1264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9605'.
[  728.248992][ T1272] loop6: detected capacity change from 0 to 512
[  728.263639][ T1272] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  728.272245][ T1272] EXT4-fs (loop6): warning: maximal mount count reached, running e2fsck is recommended
[  728.277173][ T1272] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.9607: inode #15: comm syz.6.9607: iget: illegal inode #
[  728.282755][ T1272] EXT4-fs (loop6): Remounting filesystem read-only
[  728.285907][ T1272] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  728.312577][T30142] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  728.820796][ T5884] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  728.976976][ T5884] usb 7-1: Using ep0 maxpacket: 16
[  728.980088][ T5884] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  728.983491][ T5884] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  728.989430][ T5884] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  728.992625][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.996877][ T5884] usb 7-1: Product: syz
[  729.000185][ T5884] usb 7-1: Manufacturer: syz
[  729.001868][ T5884] usb 7-1: SerialNumber: syz
[  729.242051][ T5884] usb 7-1: 0:2 : does not exist
[  729.247436][ T5884] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  729.248973][ T1358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9635'.
[  729.265787][ T5884] usb 7-1: USB disconnect, device number 9
[  729.299937][T15470] udevd[15470]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  729.873735][ T1386] loop6: detected capacity change from 0 to 4096
[  729.881215][ T1386] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  730.328137][ T1429] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  730.358046][T17957] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  730.527101][T17957] usb 7-1: Using ep0 maxpacket: 8
[  730.530925][T17957] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  730.537816][T17957] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  730.541920][T17957] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  730.546059][T17957] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  730.558681][T17957] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  730.561860][T17957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.689199][ T1455] bond0: (slave dummy0): Releasing backup interface
[  730.794616][T17957] usb 7-1: GET_CAPABILITIES returned 0
[  730.803107][T17957] usbtmc 7-1:16.0: can't read capabilities
[  730.963957][ T1478] netlink: 340 bytes leftover after parsing attributes in process `syz.3.9675'.
[  731.011994][ T5886] usb 7-1: USB disconnect, device number 10
[  731.390369][ T1507] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9685'.
[  731.983761][ T1535] netlink: 'syz.1.9698': attribute type 29 has an invalid length.
[  731.986878][ T1535] netlink: 'syz.1.9698': attribute type 29 has an invalid length.
[  731.996941][ T1524] loop6: detected capacity change from 0 to 32768
[  732.019563][ T1524] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  732.085414][T30142] ocfs2: Unmounting device (7,6) on (node local)
[  732.972917][ T1586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9717'.
[  733.691613][ T5884] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  734.014775][ T5884] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  734.018584][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.024659][ T5884] usb 7-1: config 0 descriptor??
[  734.252132][ T1614] pimreg: entered allmulticast mode
[  734.313342][ T1630] tipc: Failed to remove unknown binding: 66,3,3/0:466284492/466284493
[  736.268767][ T1639] netlink: 'syz.1.9737': attribute type 3 has an invalid length.
[  736.272143][ T1639] netlink: 'syz.1.9737': attribute type 3 has an invalid length.
[  736.679124][ T5884] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  736.697273][ T5884] [drm:udl_init] *ERROR* Selecting channel failed
[  736.724043][ T1655] loop6: detected capacity change from 0 to 2048
[  736.724937][ T5884] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 3
[  736.732591][ T1655] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  736.737744][ T1655] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  736.743960][ T5884] [drm] Initialized udl on minor 3
[  736.752662][ T1655] UDF-fs: Scanning with blocksize 512 failed
[  736.754823][ T5884] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  736.769306][ T1655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  736.779317][ T5884] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  736.795939][ T5884] usb 7-1: USB disconnect, device number 11
[  736.798850][ T5903] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  736.808562][ T5903] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  737.643832][ T1687] nfs: Unknown parameter 'ntext'
[  737.716456][ T1693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9753'.
[  741.424553][ T1802] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9794'.
[  741.925652][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803f57f800: rx timeout, send abort
[  742.465742][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803f57f800: abort rx timeout. Force session deactivation
[  742.657163][    C1] vcan0: j1939_tp_rxtimer: 0xffff888027adac00: rx timeout, send abort
[  742.660511][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888027adac00: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session.
[  742.666634][    C1] vcan0: j1939_tp_rxtimer: 0xffff888027ada800: rx timeout, send abort
[  742.670239][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888027ada800: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session.
[  742.757555][ T1833] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9806'.
[  743.741086][ T1877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9828'.
[  743.970327][ T1902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9835'.
[  743.974134][ T1902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9835'.
[  744.061561][ T5884] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  744.243658][ T5884] usb 7-1: Using ep0 maxpacket: 8
[  744.251351][ T5884] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  744.257717][ T5884] usb 7-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  744.261245][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  744.268336][ T5884] usb 7-1: config 0 descriptor??
[  744.297937][ T1913] netlink: 'syz.3.9839': attribute type 2 has an invalid length.
[  744.309839][ T1913] : entered promiscuous mode
[  744.491265][ T5886] usb 7-1: USB disconnect, device number 12
[  744.737082][ T1955] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9855'.
[  744.740649][ T1955] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9855'.
[  744.744265][ T1955] netlink: 'syz.3.9855': attribute type 5 has an invalid length.
[  744.751113][ T1955] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9855'.
[  744.859120][ T1967] nftables ruleset with unbound chain
[  744.907904][ T1970] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.9860'.
[  744.911121][ T1970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9860'.
[  747.041245][ T2022] loop6: detected capacity change from 0 to 512
[  747.080948][ T2022] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  747.086001][ T2022] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  747.130786][T30142] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  747.443189][ T2044] loop6: detected capacity change from 0 to 32768
[  747.465167][ T2044] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.9887 (2044)
[  747.485631][ T2044] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  747.489179][ T2044] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  747.492049][ T2044] BTRFS info (device loop6): using free-space-tree
[  747.583949][ T2044] BTRFS info (device loop6): rebuilding free space tree
[  747.584604][ T2070] netlink: 'syz.3.9891': attribute type 30 has an invalid length.
[  747.589575][ T2070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9891'.
[  747.592727][ T2070] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  747.621957][T30142] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  747.714317][ T2078] netlink: 'syz.1.9894': attribute type 46 has an invalid length.
[  747.724102][ T2078] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9894'.
[  748.338571][   T33] audit: type=1800 audit(2000001183.654:260): pid=2093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9898" name="file1" dev="tmpfs" ino=1768 res=0 errno=0
[  748.765530][ T5903] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  748.936481][ T5903] usb 7-1: Using ep0 maxpacket: 32
[  748.942732][ T5903] usb 7-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f
[  748.946313][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.950149][ T5903] usb 7-1: Product: syz
[  748.951991][ T5903] usb 7-1: Manufacturer: syz
[  748.953914][ T5903] usb 7-1: SerialNumber: syz
[  748.958757][ T5903] usb 7-1: config 0 descriptor??
[  748.965590][ T5903] ums-onetouch 7-1:0.0: USB Mass Storage device detected
[  749.015438][ T5903] usb 7-1: Found UVC 0.00 device syz (0d49:7000)
[  749.017922][ T5903] usb 7-1: No valid video chain found.
[  749.186381][ T5903] usb 7-1: USB disconnect, device number 13
[  750.149691][ T2170] __nla_validate_parse: 3 callbacks suppressed
[  750.149816][ T2170] netlink: 192 bytes leftover after parsing attributes in process `syz.6.9922'.
[  750.374351][ T2190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9930'.
[  750.497443][ T5859] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  750.657615][ T5859] usb 7-1: Using ep0 maxpacket: 16
[  750.661706][ T5859] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  750.664879][ T5859] usb 7-1: config 0 has no interface number 0
[  750.669999][ T5859] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  750.673761][ T5859] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  750.677117][ T5859] usb 7-1: config 0 interface 41 has no altsetting 0
[  750.691416][ T5859] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  750.694943][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.698005][ T5859] usb 7-1: Product: syz
[  750.705786][ T5859] usb 7-1: Manufacturer: syz
[  750.707760][ T5859] usb 7-1: SerialNumber: syz
[  750.716856][ T5859] usb 7-1: config 0 descriptor??
[  750.725235][ T2180] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  750.728447][ T2180] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  750.949082][ T5859] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71
[  750.969913][ T5859] usb 7-1: USB disconnect, device number 14
[  751.045007][ T2239] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  751.049065][ T2239] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  751.700533][ T2280] loop6: detected capacity change from 0 to 1024
[  751.704235][ T2280] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (4096), stripe is disabled
[  751.710374][ T2280] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  751.716474][ T2280] EXT4-fs (loop6): orphan cleanup on readonly fs
[  751.719956][ T2280] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  751.729168][ T2280] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  751.731631][ T2280] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.9965: Freeing blocks not in datazone - block = 0, count = 4096
[  751.750525][ T2280] EXT4-fs (loop6): Remounting filesystem read-only
[  751.753812][ T2280] EXT4-fs (loop6): 1 orphan inode deleted
[  751.757621][ T2280] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  751.830149][  T792] IPVS: starting estimator thread 0...
[  751.860189][T30142] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  751.919106][ T2287] IPVS: using max 49 ests per chain, 117600 per kthread
[  751.960066][ T2292] loop6: detected capacity change from 0 to 512
[  751.975220][ T2292] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  751.996629][ T2292] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002]
[  752.003278][ T2292] System zones: 1-12
[  752.010847][ T2292] EXT4-fs (loop6): 1 truncate cleaned up
[  752.021040][ T2292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  752.066159][T30142] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  752.563144][ T2324] loop6: detected capacity change from 0 to 32768
[  752.571766][ T2324] XFS: attr2 mount option is deprecated.
[  752.609784][ T2324] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  752.615031][ T2324] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  752.633784][ T2324] XFS (loop6): Ending clean mount
[  752.644847][ T2324] XFS (loop6): Quotacheck needed: Please wait.
[  752.692813][ T2324] XFS (loop6): Quotacheck: Done.
[  752.749972][T30142] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  753.032345][ T2357] loop6: detected capacity change from 0 to 1024
[  753.044932][ T2357] EXT4-fs: Ignoring removed oldalloc option
[  753.070981][ T2357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  753.095537][T30142] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  753.918577][ T2378] loop6: detected capacity change from 0 to 131072
[  753.978022][ T2378] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  753.983099][ T2378] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  755.524477][ T2474] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10022'.
[  755.690111][ T2484] loop6: detected capacity change from 0 to 2048
[  755.716872][ T2484] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  755.749200][T15470] udevd[15470]: incorrect nilfs2 checksum on /dev/loop6
[  755.755004][ T2484] NILFS (loop6): too large checkpoint size: 1741 bytes
[  755.758947][ T2484] NILFS (loop6): error -22 while loading super root
[  755.764561][T15470] udevd[15470]: incorrect nilfs2 checksum on /dev/loop6
[  757.159525][ T5886] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  757.328578][ T5886] usb 7-1: Using ep0 maxpacket: 8
[  757.334852][ T5886] usb 7-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5
[  757.338812][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.342059][ T5886] usb 7-1: Product: syz
[  757.343651][ T5886] usb 7-1: Manufacturer: syz
[  757.345054][ T5886] usb 7-1: SerialNumber: syz
[  757.351341][ T5886] usb 7-1: config 0 descriptor??
[  757.355246][ T5886] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected.
[  757.573342][ T5886] pwc: Failed to set LED on/off time (-71)
[  757.575970][ T5886] pwc: send_video_command error -71
[  757.581366][ T5886] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  757.584150][ T5886] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71
[  757.593136][ T5886] usb 7-1: USB disconnect, device number 15
[  757.767373][ T2608] could not allocate digest TFM handle sm3
[  757.913529][ T2630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10070'.
[  758.656582][ T2660] netlink: 'syz.6.10079': attribute type 1 has an invalid length.
[  758.711212][ T2665] netlink: 168 bytes leftover after parsing attributes in process `syz.1.10080'.
[  759.317032][ T5859] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  759.510189][ T5859] usb 7-1: Using ep0 maxpacket: 8
[  759.528078][ T5859] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  759.550969][ T5859] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  759.559792][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.562559][ T5859] usb 7-1: Product: syz
[  759.565066][ T5859] usb 7-1: Manufacturer: syz
[  759.567003][ T5859] usb 7-1: SerialNumber: syz
[  759.578139][ T5859] usb 7-1: bad CDC descriptors
[  759.790609][ T5859] usb 7-1: USB disconnect, device number 16
[  759.815998][ T2763] netlink: 'syz.3.10110': attribute type 12 has an invalid length.
[  760.049070][ T2779] netlink: 596 bytes leftover after parsing attributes in process `syz.3.10116'.
[  760.336120][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  760.338602][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  760.382891][ T2800] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10124'.
[  760.391830][ T2805] FAT-fs (loop7): bogus number of reserved sectors
[  760.394298][ T2805] FAT-fs (loop7): Can't find a valid FAT filesystem
[  761.442746][ T2850] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10142'.
[  761.570500][ T2858] netlink: 'syz.6.10145': attribute type 74 has an invalid length.
[  762.037405][ T2898] loop6: detected capacity change from 0 to 512
[  762.050710][ T2898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  762.055962][ T2898] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  762.088850][T30142] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  762.145483][ T2914] loop6: detected capacity change from 0 to 2048
[  762.173547][T15470] GPT:first_usable_lbas don't match.
[  762.175796][T15470] GPT:34 != 290
[  762.177203][T15470] GPT: Use GNU Parted to correct GPT errors.
[  762.179132][T15470]  loop6: p1 p2 p3
[  762.193118][ T2914] GPT:first_usable_lbas don't match.
[  762.195090][ T2914] GPT:34 != 290
[  762.197170][ T2914] GPT: Use GNU Parted to correct GPT errors.
[  762.199578][ T2914]  loop6: p1 p2 p3
[  762.253060][T15470] udevd[15470]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  762.262591][ T6261] udevd[6261]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  762.264001][T15468] udevd[15468]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  762.287672][T15470] udevd[15470]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  762.295157][ T6261] udevd[6261]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  762.295662][T15468] udevd[15468]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  762.603364][ T2970] overlayfs: failed to clone upperpath
[  762.712869][ T2964] loop6: detected capacity change from 0 to 32768
[  762.750303][ T2964] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  762.778600][ T2964] XFS (loop6): Ending clean mount
[  762.876492][T30142] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  763.727012][ T3030] netlink: 'syz.6.10185': attribute type 21 has an invalid length.
[  763.729921][ T3030] netlink: 'syz.6.10185': attribute type 1 has an invalid length.
[  763.742894][ T3030] netlink: 100 bytes leftover after parsing attributes in process `syz.6.10185'.
[  763.836987][ T3033] serio: Serial port ptm0
[  764.382790][ T3055] loop6: detected capacity change from 0 to 32768
[  764.407458][ T3055] JBD2: Ignoring recovery information on journal
[  764.430635][ T3055] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  764.476725][T30142] ocfs2: Unmounting device (7,6) on (node local)
[  764.600551][ T3080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10201'.
[  764.603987][ T3080] netlink: 'syz.3.10201': attribute type 3 has an invalid length.
[  765.216081][ T3099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10210'.
[  765.222580][ T3099] net_ratelimit: 62 callbacks suppressed
[  765.222593][ T3099] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  765.228649][ T3099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  765.606050][ T3119] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  766.214169][ T3122] loop6: detected capacity change from 0 to 32768
[  766.239108][ T3129] netlink: 'syz.3.10221': attribute type 1 has an invalid length.
[  766.253974][ T3122] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  766.296442][ T3122] XFS (loop6): Ending clean mount
[  766.345202][T30142] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  766.733370][ T3153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  766.736639][ T3153] IPv6: NLM_F_CREATE should be set when creating new route
[  768.272420][ T3225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10244'.
[  769.658164][ T3272] overlayfs: failed to clone lowerpath
[  769.682909][ T3272] overlayfs: failed to clone upperpath
[  769.938513][ T3273] loop6: detected capacity change from 0 to 32768
[  769.968850][ T3273] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only
[  769.968862][ T3273]   allowing incompatible features above 0.0: (unknown version)
[  769.968866][ T3273]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  769.982855][ T3273] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  769.989633][ T3273] bcachefs (loop6): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, shutting down
[  769.989666][ T3273]   error not marked as autofix and not in fsck
[  769.989671][ T3273]   run fsck, and forward to devs so error can be marked for self-healing
[  769.989675][ T3273]   emergency read only at seq 0
[  770.001132][ T3273] bcachefs (loop6): error in recovery: fsck_errors_not_fixed
[  770.003683][ T3273] bcachefs (loop6): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed
[  770.007158][ T3273] bcachefs (loop6): shutting down
[  770.016628][ T3273] bcachefs (loop6): shutdown complete
[  771.288577][ T3273] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed
[  771.548709][ T3308] netem: change failed
[  771.868435][ T3336] sit1: entered promiscuous mode
[  771.870626][ T3336] sit1: entered allmulticast mode
[  773.179013][ T3385] cgroup: name respecified
[  773.292045][ T3401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10306'.
[  773.303053][ T3401] team_slave_0: entered promiscuous mode
[  773.305957][ T3401] team_slave_1: entered promiscuous mode
[  773.308267][ T3401] geneve0: entered promiscuous mode
[  773.313936][ T3401] macvtap1: entered promiscuous mode
[  773.316440][ T3401] team0: entered promiscuous mode
[  773.319378][ T3401] macvtap1: entered allmulticast mode
[  773.321840][ T3401] team0: entered allmulticast mode
[  773.323869][ T3401] team_slave_0: entered allmulticast mode
[  773.326186][ T3401] team_slave_1: entered allmulticast mode
[  773.328394][ T3401] geneve0: entered allmulticast mode
[  773.331418][ T3401] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  773.340036][ T3401] team0: left allmulticast mode
[  773.342058][ T3401] team_slave_0: left allmulticast mode
[  773.344726][ T3401] team_slave_1: left allmulticast mode
[  773.347011][ T3401] geneve0: left allmulticast mode
[  773.349020][ T3401] team0: left promiscuous mode
[  773.351436][ T3401] team_slave_0: left promiscuous mode
[  773.354229][ T3401] team_slave_1: left promiscuous mode
[  773.356492][ T3401] geneve0: left promiscuous mode
[  773.392326][ T3405] overlayfs: failed to clone upperpath
[  773.429484][ T5859] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  773.589100][ T5859] usb 7-1: Using ep0 maxpacket: 16
[  773.593499][ T5859] usb 7-1: too many configurations: 97, using maximum allowed: 8
[  773.611652][ T5859] usb 7-1: string descriptor 0 read error: -71
[  773.616632][ T5859] usb 7-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c
[  773.621423][ T5859] usb 7-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224
[  773.628228][ T5859] usb 7-1: rejected 8 configurations due to insufficient available bus power
[  773.633435][ T5859] usb 7-1: no configuration chosen from 8 choices
[  773.637936][ T5859] usb 7-1: USB disconnect, device number 17
[  774.141751][ T3433] bridge6: the hash_elasticity option has been deprecated and is always 16
[  774.628741][ T3473] loop6: detected capacity change from 0 to 32768
[  774.635132][ T3473] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section journal_seq_blacklist: entry 1 out of order with next entry (56 > 0)
[  774.635132][ T3473] journal_seq_blacklist (size 640):
[  774.635132][ T3473] 0-56 0-0 0-34 0-0 0-0 45-0 45-26 6-11 0-0 0-11 33-11 5-0 0-0 0-4 4-8 0-0 0-0 0-0 0-0 0-0 0-2 0-0 0-0 0-0 0-0 0-0 0-0 1-12 0-2 0-0 0-0 0-0 0-0 0-1 0-0 2-17 182-41 0-0 0-0
[  774.635132][ T3473] 
[  774.660044][ T3473] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal_seq_blacklist
[  774.962959][ T3491] loop6: detected capacity change from 0 to 32768
[  774.975709][ T3491] JBD2: Ignoring recovery information on journal
[  775.010045][ T3491] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  775.046240][T30142] ocfs2: Unmounting device (7,6) on (node local)
[  775.376013][ T3525] binder: 3523:3525 ioctl c0306201 200000000240 returned -14
[  776.048313][ T3533] loop6: detected capacity change from 0 to 32768
[  776.053234][ T3533] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.10343 (3533)
[  776.064545][ T3533] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  776.069353][ T3533] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  776.073306][ T3533] BTRFS info (device loop6): using free-space-tree
[  776.153567][T30142] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  776.420945][ T3560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10346'.
[  776.482537][ T3567] loop6: detected capacity change from 0 to 1764
[  777.661309][ T3628] ip_vti0: Master is either lo or non-ether device
[  778.042446][ T3654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10384'.
[  778.052442][ T3656] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  778.808109][   T33] audit: type=1804 audit(2000001212.175:261): pid=3681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.10397" name="file0" dev="tmpfs" ino=19571 res=1 errno=0
[  778.879789][ T3686] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  779.189022][ T3690] macsec1: entered promiscuous mode
[  779.191589][ T3690] macvlan1: entered promiscuous mode
[  779.194972][ T3690] macvlan1: left promiscuous mode
[  779.443674][ T3722] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10411'.
[  780.085171][ T3754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10421'.
[  781.225686][ T3802] netlink: 108 bytes leftover after parsing attributes in process `syz.6.10441'.
[  781.229479][ T3802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10441'.
[  781.258130][ T3805] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  781.262742][ T3805] batman_adv: batadv0: Removing interface: batadv_slave_0
[  781.269655][ T3805] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  781.387851][ T3818] program syz.6.10447 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  781.493486][ T3827] binder: 3826:3827 ioctl 80286722 0 returned -22
[  781.598936][ T3837] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10452'.
[  781.642069][ T3840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10454'.
[  781.646004][ T3840] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  781.649010][ T3840] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  781.808721][ T3850] loop6: detected capacity change from 0 to 32768
[  781.824672][ T3850] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  781.897797][T30142] ocfs2: Unmounting device (7,6) on (node local)
[  782.865131][ T3904] loop6: detected capacity change from 0 to 256
[  782.868128][ T3904] exfat: Deprecated parameter 'utf8'
[  782.871303][ T3904] exfat: Deprecated parameter 'utf8'
[  782.873791][ T3904] exfat: Deprecated parameter 'utf8'
[  782.883932][ T3904] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x743489c8, utbl_chksum : 0xe619d30d)
[  784.104068][ T3955] loop6: detected capacity change from 0 to 40427
[  784.109997][ T3955] F2FS-fs (loop6): build fault injection rate: 771
[  784.114479][ T3955] F2FS-fs (loop6): invalid crc value
[  784.166175][ T3955] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  784.170094][ T3955] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  784.366439][ T3968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  784.484600][ T3986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10504'.
[  784.771415][  T792] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  784.877493][ T4018] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  784.902178][ T4022] ==================================================================
[  784.904834][ T4022] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  784.907486][ T4022] Read of size 4 at addr ffff8881070676c4 by task syz.3.10518/4022
[  784.911613][ T4022] 
[  784.912680][ T4022] CPU: 0 UID: 0 PID: 4022 Comm: syz.3.10518 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  784.912697][ T4022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  784.912706][ T4022] Call Trace:
[  784.912712][ T4022]  <TASK>
[  784.912718][ T4022]  dump_stack_lvl+0x189/0x250
[  784.912737][ T4022]  ? __kasan_check_byte+0x12/0x40
[  784.912755][ T4022]  ? __pfx_dump_stack_lvl+0x10/0x10
[  784.912770][ T4022]  ? lock_release+0x4b/0x3e0
[  784.912789][ T4022]  ? __virt_addr_valid+0x4a5/0x5c0
[  784.912806][ T4022]  print_report+0xca/0x240
[  784.912819][ T4022]  ? xfrm_alloc_spi+0x570/0xf30
[  784.912833][ T4022]  kasan_report+0x118/0x150
[  784.912849][ T4022]  ? xfrm_alloc_spi+0x570/0xf30
[  784.912864][ T4022]  xfrm_alloc_spi+0x570/0xf30
[  784.912876][ T4022]  ? xfrm_alloc_spi+0x2a0/0xf30
[  784.912893][ T4022]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  784.912904][ T4022]  ? xfrm_find_acq+0x87/0xa0
[  784.912918][ T4022]  xfrm_alloc_userspi+0x70b/0xc90
[  784.912937][ T4022]  ? apparmor_capable+0x137/0x1b0
[  784.912951][ T4022]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  784.912965][ T4022]  ? __nla_parse+0x40/0x60
[  784.912984][ T4022]  xfrm_user_rcv_msg+0x7a3/0xab0
[  784.912998][ T4022]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  784.913022][ T4022]  ? __pfx___mutex_trylock_common+0x10/0x10
[  784.913036][ T4022]  ? rcu_is_watching+0x15/0xb0
[  784.913047][ T4022]  ? trace_contention_end+0x39/0x120
[  784.913061][ T4022]  ? __mutex_lock+0x335/0x1360
[  784.913079][ T4022]  netlink_rcv_skb+0x208/0x470
[  784.913095][ T4022]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  784.913108][ T4022]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  784.913129][ T4022]  ? netlink_deliver_tap+0x2e/0x1b0
[  784.913144][ T4022]  ? netlink_deliver_tap+0x2e/0x1b0
[  784.913161][ T4022]  xfrm_netlink_rcv+0x79/0x90
[  784.913173][ T4022]  netlink_unicast+0x82f/0x9e0
[  784.913190][ T4022]  ? __pfx_netlink_unicast+0x10/0x10
[  784.913205][ T4022]  ? netlink_sendmsg+0x642/0xb30
[  784.913221][ T4022]  ? skb_put+0x11b/0x210
[  784.913232][ T4022]  netlink_sendmsg+0x805/0xb30
[  784.913251][ T4022]  ? __pfx_netlink_sendmsg+0x10/0x10
[  784.913269][ T4022]  ? aa_sock_msg_perm+0xf1/0x1d0
[  784.913287][ T4022]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  784.913300][ T4022]  ? __pfx_netlink_sendmsg+0x10/0x10
[  784.913316][ T4022]  __sock_sendmsg+0x21c/0x270
[  784.913331][ T4022]  ____sys_sendmsg+0x505/0x830
[  784.913353][ T4022]  ? __pfx_____sys_sendmsg+0x10/0x10
[  784.913368][ T4022]  ? import_iovec+0x74/0xa0
[  784.913383][ T4022]  ___sys_sendmsg+0x21f/0x2a0
[  784.913397][ T4022]  ? __pfx____sys_sendmsg+0x10/0x10
[  784.913419][ T4022]  ? __fget_files+0x2a/0x420
[  784.913431][ T4022]  ? __fget_files+0x3a0/0x420
[  784.913444][ T4022]  __x64_sys_sendmsg+0x19b/0x260
[  784.913457][ T4022]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  784.913475][ T4022]  ? do_syscall_64+0xbe/0x3b0
[  784.913495][ T4022]  do_syscall_64+0xfa/0x3b0
[  784.913512][ T4022]  ? lockdep_hardirqs_on+0x9c/0x150
[  784.913527][ T4022]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.913539][ T4022]  ? exc_page_fault+0x9f/0xf0
[  784.913582][ T4022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  784.913595][ T4022] RIP: 0033:0x7f9d2978ebe9
[  784.913607][ T4022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  784.913618][ T4022] RSP: 002b:00007f9d2a565038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  784.913633][ T4022] RAX: ffffffffffffffda RBX: 00007f9d299b5fa0 RCX: 00007f9d2978ebe9
[  784.913642][ T4022] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[  784.913651][ T4022] RBP: 00007f9d29811e19 R08: 0000000000000000 R09: 0000000000000000
[  784.913659][ T4022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  784.913666][ T4022] R13: 00007f9d299b6038 R14: 00007f9d299b5fa0 R15: 00007ffde4534f28
[  784.913681][ T4022]  </TASK>
[  784.913686][ T4022] 
[  784.931617][  T792] usb 7-1: Using ep0 maxpacket: 32
[  784.932097][ T4022] Allocated by task 28351:
[  785.073813][ T4022]  kasan_save_track+0x3e/0x80
[  785.075803][ T4022]  __kasan_slab_alloc+0x6c/0x80
[  785.077828][ T4022]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  785.080100][ T4022]  xfrm_state_alloc+0x24/0x2f0
[  785.082075][ T4022]  __find_acq_core+0x8a7/0x1c00
[  785.083727][ T4022]  xfrm_find_acq+0x78/0xa0
[  785.085192][ T4022]  xfrm_alloc_userspi+0x6b3/0xc90
[  785.086869][ T4022]  xfrm_user_rcv_msg+0x7a3/0xab0
[  785.088510][ T4022]  netlink_rcv_skb+0x208/0x470
[  785.090111][ T4022]  xfrm_netlink_rcv+0x79/0x90
[  785.091697][ T4022]  netlink_unicast+0x82f/0x9e0
[  785.093264][ T4022]  netlink_sendmsg+0x805/0xb30
[  785.094833][ T4022]  __sock_sendmsg+0x21c/0x270
[  785.096345][ T4022]  ____sys_sendmsg+0x505/0x830
[  785.097908][ T4022]  ___sys_sendmsg+0x21f/0x2a0
[  785.099752][ T4022]  __x64_sys_sendmsg+0x19b/0x260
[  785.101655][ T4022]  do_syscall_64+0xfa/0x3b0
[  785.103568][ T4022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  785.105815][ T4022] 
[  785.106599][ T4022] Freed by task 11632:
[  785.107890][ T4022]  kasan_save_track+0x3e/0x80
[  785.109392][ T4022]  kasan_save_free_info+0x46/0x50
[  785.111087][ T4022]  __kasan_slab_free+0x5b/0x80
[  785.112592][ T4022]  kmem_cache_free+0x18f/0x400
[  785.114073][ T4022]  xfrm_state_gc_task+0x52d/0x6b0
[  785.115683][ T4022]  process_scheduled_works+0xae1/0x17b0
[  785.117455][ T4022]  worker_thread+0x8a0/0xda0
[  785.118966][ T4022]  kthread+0x711/0x8a0
[  785.120296][ T4022]  ret_from_fork+0x3fc/0x770
[  785.121789][ T4022]  ret_from_fork_asm+0x1a/0x30
[  785.123313][ T4022] 
[  785.124100][ T4022] The buggy address belongs to the object at ffff888107067600
[  785.124100][ T4022]  which belongs to the cache xfrm_state of size 928
[  785.128447][ T4022] The buggy address is located 196 bytes inside of
[  785.128447][ T4022]  freed 928-byte region [ffff888107067600, ffff8881070679a0)
[  785.132819][ T4022] 
[  785.133618][ T4022] The buggy address belongs to the physical page:
[  785.135936][ T4022] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888107067600 pfn:0x107064
[  785.139599][ T4022] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  785.142230][ T4022] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  785.144920][ T4022] page_type: f5(slab)
[  785.146448][ T4022] raw: 057ff00000000040 ffff88801bbfcc80 dead000000000122 0000000000000000
[  785.149726][ T4022] raw: ffff888107067600 00000000800e000c 00000000f5000000 0000000000000000
[  785.152802][ T4022] head: 057ff00000000040 ffff88801bbfcc80 dead000000000122 0000000000000000
[  785.156436][ T4022] head: ffff888107067600 00000000800e000c 00000000f5000000 0000000000000000
[  785.160066][ T4022] head: 057ff00000000002 ffffea00041c1901 00000000ffffffff 00000000ffffffff
[  785.163432][ T4022] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  785.166464][ T4022] page dumped because: kasan: bad access detected
[  785.168817][ T4022] page_owner tracks the page as allocated
[  785.170715][ T4022] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7357, tgid 7356 (syz.2.576), ts 115563467087, free_ts 64276797907
[  785.176927][ T4022]  post_alloc_hook+0x240/0x2a0
[  785.178649][ T4022]  get_page_from_freelist+0x21e4/0x22c0
[  785.180637][ T4022]  __alloc_frozen_pages_noprof+0x181/0x370
[  785.182892][ T4022]  alloc_pages_mpol+0x232/0x4a0
[  785.184846][ T4022]  allocate_slab+0x8a/0x370
[  785.186672][ T4022]  ___slab_alloc+0xbeb/0x1410
[  785.188181][ T4022]  kmem_cache_alloc_noprof+0x283/0x3c0
[  785.190205][ T4022]  xfrm_state_alloc+0x24/0x2f0
[  785.192134][ T4022]  pfkey_add+0x6e4/0x2e00
[  785.193875][ T4022]  pfkey_sendmsg+0xbfe/0x1090
[  785.195406][ T4022]  __sock_sendmsg+0x21c/0x270
[  785.197063][ T4022]  ____sys_sendmsg+0x505/0x830
[  785.198729][ T4022]  ___sys_sendmsg+0x21f/0x2a0
[  785.200481][ T4022]  __x64_sys_sendmsg+0x19b/0x260
[  785.202524][ T4022]  do_syscall_64+0xfa/0x3b0
[  785.204378][ T4022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  785.206816][ T4022] page last free pid 5858 tgid 5858 stack trace:
[  785.209296][ T4022]  __free_frozen_pages+0xbc4/0xd30
[  785.211278][ T4022]  __slab_free+0x303/0x3c0
[  785.213117][ T4022]  qlist_free_all+0x97/0x140
[  785.215142][ T4022]  kasan_quarantine_reduce+0x148/0x160
[  785.217202][ T4022]  __kasan_slab_alloc+0x22/0x80
[  785.218818][ T4022]  __kmalloc_cache_noprof+0x1be/0x3d0
[  785.220688][ T4022]  netdevice_event+0x3a1/0x8a0
[  785.222277][ T4022]  notifier_call_chain+0x1b6/0x3e0
[  785.223964][ T4022]  netif_set_mac_address+0x37c/0x4c0
[  785.225659][ T4022]  do_setlink+0x88c/0x41c0
[  785.227127][ T4022]  rtnl_newlink+0x160b/0x1c70
[  785.228687][ T4022]  rtnetlink_rcv_msg+0x7cf/0xb70
[  785.230323][ T4022]  netlink_rcv_skb+0x208/0x470
[  785.231853][ T4022]  netlink_unicast+0x82f/0x9e0
[  785.233372][ T4022]  netlink_sendmsg+0x805/0xb30
[  785.234899][ T4022]  __sock_sendmsg+0x21c/0x270
[  785.236405][ T4022] 
[  785.237224][ T4022] Memory state around the buggy address:
[  785.239025][ T4022]  ffff888107067580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  785.241480][ T4022]  ffff888107067600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  785.244417][ T4022] >ffff888107067680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  785.247461][ T4022]                                            ^
[  785.250020][ T4022]  ffff888107067700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  785.252787][ T4022]  ffff888107067780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  785.255400][ T4022] ==================================================================
[  785.258215][ T4022] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  785.260629][ T4022] CPU: 0 UID: 0 PID: 4022 Comm: syz.3.10518 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  785.264801][ T4022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  785.268780][ T4022] Call Trace:
[  785.270085][ T4022]  <TASK>
[  785.271149][ T4022]  dump_stack_lvl+0x99/0x250
[  785.272645][ T4022]  ? __asan_memcpy+0x40/0x70
[  785.274340][ T4022]  ? __pfx_dump_stack_lvl+0x10/0x10
[  785.276062][ T4022]  ? __pfx__printk+0x10/0x10
[  785.277617][ T4022]  vpanic+0x281/0x750
[  785.278976][ T4022]  ? __pfx_vpanic+0x10/0x10
[  785.280499][ T4022]  ? irqentry_exit+0x74/0x90
[  785.282069][ T4022]  panic+0xb9/0xc0
[  785.283377][ T4022]  ? __pfx_panic+0x10/0x10
[  785.285135][ T4022]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  785.287352][ T4022]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  785.289761][ T4022]  ? xfrm_alloc_spi+0x570/0xf30
[  785.291762][ T4022]  check_panic_on_warn+0x89/0xb0
[  785.293652][ T4022]  ? xfrm_alloc_spi+0x570/0xf30
[  785.295276][ T4022]  end_report+0x78/0x160
[  785.296701][ T4022]  kasan_report+0x129/0x150
[  785.298493][ T4022]  ? xfrm_alloc_spi+0x570/0xf30
[  785.300208][ T4022]  xfrm_alloc_spi+0x570/0xf30
[  785.301802][ T4022]  ? xfrm_alloc_spi+0x2a0/0xf30
[  785.303649][ T4022]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  785.305731][ T4022]  ? xfrm_find_acq+0x87/0xa0
[  785.307548][ T4022]  xfrm_alloc_userspi+0x70b/0xc90
[  785.309343][ T4022]  ? apparmor_capable+0x137/0x1b0
[  785.311303][ T4022]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  785.313321][ T4022]  ? __nla_parse+0x40/0x60
[  785.314821][ T4022]  xfrm_user_rcv_msg+0x7a3/0xab0
[  785.316493][ T4022]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  785.318301][ T4022]  ? __pfx___mutex_trylock_common+0x10/0x10
[  785.320334][ T4022]  ? rcu_is_watching+0x15/0xb0
[  785.321858][ T4022]  ? trace_contention_end+0x39/0x120
[  785.323732][ T4022]  ? __mutex_lock+0x335/0x1360
[  785.325299][ T4022]  netlink_rcv_skb+0x208/0x470
[  785.326810][ T4022]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  785.328814][ T4022]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  785.330988][ T4022]  ? netlink_deliver_tap+0x2e/0x1b0
[  785.333138][ T4022]  ? netlink_deliver_tap+0x2e/0x1b0
[  785.334985][ T4022]  xfrm_netlink_rcv+0x79/0x90
[  785.336719][ T4022]  netlink_unicast+0x82f/0x9e0
[  785.338312][ T4022]  ? __pfx_netlink_unicast+0x10/0x10
[  785.340016][ T4022]  ? netlink_sendmsg+0x642/0xb30
[  785.341593][ T4022]  ? skb_put+0x11b/0x210
[  785.343002][ T4022]  netlink_sendmsg+0x805/0xb30
[  785.344603][ T4022]  ? __pfx_netlink_sendmsg+0x10/0x10
[  785.346338][ T4022]  ? aa_sock_msg_perm+0xf1/0x1d0
[  785.347991][ T4022]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  785.349863][ T4022]  ? __pfx_netlink_sendmsg+0x10/0x10
[  785.351838][ T4022]  __sock_sendmsg+0x21c/0x270
[  785.353576][ T4022]  ____sys_sendmsg+0x505/0x830
[  785.355074][ T4022]  ? __pfx_____sys_sendmsg+0x10/0x10
[  785.357051][ T4022]  ? import_iovec+0x74/0xa0
[  785.358898][ T4022]  ___sys_sendmsg+0x21f/0x2a0
[  785.360740][ T4022]  ? __pfx____sys_sendmsg+0x10/0x10
[  785.363000][ T4022]  ? __fget_files+0x2a/0x420
[  785.364961][ T4022]  ? __fget_files+0x3a0/0x420
[  785.366876][ T4022]  __x64_sys_sendmsg+0x19b/0x260
[  785.368823][ T4022]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  785.370712][ T4022]  ? do_syscall_64+0xbe/0x3b0
[  785.372389][ T4022]  do_syscall_64+0xfa/0x3b0
[  785.374118][ T4022]  ? lockdep_hardirqs_on+0x9c/0x150
[  785.375939][ T4022]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  785.378116][ T4022]  ? exc_page_fault+0x9f/0xf0
[  785.379770][ T4022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  785.381701][ T4022] RIP: 0033:0x7f9d2978ebe9
[  785.383416][ T4022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  785.389857][ T4022] RSP: 002b:00007f9d2a565038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  785.392464][ T4022] RAX: ffffffffffffffda RBX: 00007f9d299b5fa0 RCX: 00007f9d2978ebe9
[  785.394946][ T4022] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[  785.397980][ T4022] RBP: 00007f9d29811e19 R08: 0000000000000000 R09: 0000000000000000
[  785.401203][ T4022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  785.404405][ T4022] R13: 00007f9d299b6038 R14: 00007f9d299b5fa0 R15: 00007ffde4534f28
[  785.407097][ T4022]  </TASK>
[  785.408759][ T4022] Kernel Offset: disabled
[  785.410208][ T4022] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:06:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000079 RBX=0000000000000079 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000010cb RDI=00000000000010cc RBP=00000000000003f8 RSP=ffffc900066369f0
R8 =ffff888020b60237 R9 =1ffff1100416c046 R10=dffffc0000000000 R11=ffffffff854effb0
R12=dffffc0000000000 R13=ffffffff99af9901 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f002c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9d2a5656c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9d2a564fc8 CR3=000000003c368000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9d29987498 00007f9d29987470 XMM03=00007f9d299874a8 00007f9d299874a0
XMM04=00007f9d2a4ed100 00007f9d29987460 XMM05=00007f9d29987478 00007f9d299874c0
XMM06=00007f9d299874b8 00007f9d299874b0 XMM07=00007f9d299874a8 00007f9d299874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f9d29812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=11ab7612cb1d8f00 RBX=ffffffff81968308 RCX=11ab7612cb1d8f00 RDX=0000000000000001
RSI=ffffffff8d9b6dc6 RDI=ffffffff8be33400 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020006000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000540 CR3=00000000369a6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f808ce12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
